mlsanityData to 14 Oct 2026

PPEDCRF: Dynamic-CRF-Guided Selective Perturbation for Background-Based Location Privacy in Video Sequences

arXiv 2604.17163 ↗First posted 18 Apr 2026cs.CVcited by 0

Not on the map. Why?

Abstract (arXiv)

We propose PPEDCRF, a calibrated selective perturbation framework that protects background-based location privacy in released video frames against gallery-based retrieval attackers. Even after GPS metadata are stripped, an adversary can geolocate a frame by matching its background visual cues to geo-tagged reference imagery; PPEDCRF mitigates this threat by estimating location-sensitive background regions with a dynamic conditional random field (DCRF), rescaling perturbation strength with a normalized control penalty (NCP), and injecting Gaussian noise only inside the inferred regions via a DP-style calibration rule. On a controlled paired-scene retrieval benchmark with eight attacker backbones and three noise seeds, PPEDCRF reduces ResNet18 Top-1 retrieval accuracy from 0.667 to 0.361±0.127 at σ0=8 while preserving 36.14,dB PSNR -- an ≈6,dB quality advantage over global Gaussian noise. Transfer across the eight-backbone seed-averaged benchmark is broadly supportive (23 of 24 backbone-gallery cells show negative Delta), while appendix-scale confirmation identifies MixVPR as a remaining adverse-transfer exception. Matched-operating-point analysis shows that PPEDCRF and global Gaussian noise converge in Top-1 privacy at equal utility, so the practical benefit is spatially concentrated perturbation that preserves higher visual quality at any given noise scale rather than stronger matched-utility privacy. Code: https://github.com/mabo1215/PPEDCRF

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 20 of its 41 references that are in the map. First posted on arXiv 18 Apr 2026.

Builds on

20 of 41 references.

References · 20

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  3. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  4. 2016DeepLab: Semantic Image Segmentation with Deep Convolutional Nets, Atrous Convolution, and Fully Connected CRFscited by 3,241
  5. 2016Deep Learning with Differential Privacycited by 2,728
  6. 2017Renyi Differential Privacycited by 650
  7. 2021Patch-NetVLAD: Multi-Scale Fusion of Locally-Global Descriptors for Place Recognitioncited by 238
  8. 2018Improving the Gaussian Mechanism for Differential Privacy: Analytical Calibration and Optimal Denoisingcited by 218
  9. 2015Conditional Random Fields as Recurrent Neural Networkscited by 214
  10. 2020CIAGAN: Conditional Identity Anonymization Generative Adversarial Networkscited by 88
  11. 2019Revealing Scenes by Inverting Structure from Motion Reconstructionscited by 66
  12. 2018Learning to Anonymize Faces for Privacy Preserving Action Detectioncited by 63
8 more
  1. 2017Natural and Effective Obfuscation by Head Inpaintingcited by 60
  2. 2018Towards Privacy-Preserving Visual Recognition via Adversarial Training: A Pilot Studycited by 48
  3. 2019Mitigating Information Leakage in Image Representations: A Maximum Entropy Approachcited by 48
  4. 2019Privacy Preserving Image-Based Localizationcited by 47
  5. 2016Defeating Image Obfuscation with Deep Learningcited by 43
  6. 2020Privacy Preserving Face Recognition Utilizing Differential Privacycited by 30
  7. 2016Faceless Person Recognition; Privacy Implications in Social Mediacited by 27
  8. 2021Personal Privacy Protection via Irrelevant Faces Tracking and Pixelation in Video Live Streamingcited by 17

Built on by

Not cited yet.