The paper presents an information‑theoretic framework that derives a distortion bound for reconstruction attacks on models trained with DP‑SGD. The bound can be computed before training and applies even when an adversary observes the training trajectory and knows all other training data. It separates the information leaked by training (conditional mutual information) from the inherent uncertainty in the data (source entropy) and uses rate‑distortion theory to produce a lower bound on expected reconstruction error, instantiated in both pixel and LPIPS feature spaces.
By Henry Bourne, Robert F. Allison
arXiv:2503.12232v3 Announce Type: replace
Abstract: Aiming to match pedestrian images captured under varying lighting conditions, visible-infrared person re-identification (VI-ReID) has drawn intensi...
By Yan Jiang, Hao Yu, Xu Cheng, Haoyu Chen, Zhaodong Sun, Guoying Zhao
PrinGS introduces a privacy‑preserving framework for 3D Gaussian Splatting, enabling post‑training anonymization of sensitive content such as faces, license plates, documents, and computer screens. By localizing and directly anonymizing regions in the 3D representation, the method removes sensitive information from all rendered novel views while maintaining scene geometry and visual fidelity, achieving this in under one second. The approach also offers a privacy‑by‑design training strategy that prevents sensitive data from being encoded during optimization, yielding splats with low face similarity and unreadable text.
By Gaurav Behera, Abhinav Raundhal, Archisha Panda, Saumya Balina, Gargi Shroff, Ponnurangam Kumaraguru
arXiv:2608.28691v1 Announce Type: cross
Abstract: Wearable VLM pipelines promise continuous multimodal assistance from egocentric visual capture: a user asks a task-driven question about the surround...
By Zhimin Li, Pan Wang, Jingxian Chen, Yuantao Tang, Anthony Chen, Qian Lou, Jingtong Hu
arXiv:2511.17747v2 Announce Type: replace-cross
Abstract: The growing adoption of photorealistic 3D facial avatars, particularly those utilizing efficient 3D Gaussian Splatting representations, intro...
By Dawid Wolkiewicz, Anastasiya Pechko, Przemys{\l}aw Spurek, Piotr Syga
arXiv:2609.09188v1 Announce Type: new
Abstract: Lensless near-eye sensing is often described as privacy-friendly because its coded measurements are visually unintelligible. Yet visual unintelligibili...
By Rahul Vimalkanth, Kaushik Mitra
arXiv:2607. 25926v1 Announce Type: cross Abstract: Face de-identification (De-ID) aims to remove or conceal personally identifiable facial features in images or videos to prevent identity recognition while preserving utility for downstream tasks.
By Hui Wei, Hao Yu, Guoying Zhao
Video recording on smart glasses exposes more than faces. Continuous capture reveals full-body biometric signatures, including gait, posture, and silhouette, that enable person re-identification (ReID...
arXiv:2609.37344v1 Announce Type: cross
Abstract: Data reconstruction attacks have empirically been successful in recovering training samples from learned models, raising privacy concerns and motivat...
By Max Cairney-Leeming, Simone Bombari, Marco Mondelli
arXiv:2608.11645v2 Announce Type: replace
Abstract: Volumetric video streaming turns privacy into a 3D, multi-view problem. Unlike ordinary video, where sensitive content can often be redacted frame...
By Hossein Khalili (UCLA), Philip Do (UCLA), Alexander Vilesov (UCLA), Achuta Kadambi (UCLA), Kittipat Apicharttrisorn (Nokia Bell Labs), Nader Sehatbakhsh (UCLA)
arXiv:2609.24537v1 Announce Type: new
Abstract: Video recording on smart glasses exposes more than faces. Continuous capture reveals full-body biometric signatures, including gait, posture, and silho...
By Muhammad Umair, Muhammad Danial Maqbool, Fatima Arshad Cheema, Kapal Dev, Muhammad Hamad Alizai, Muhammad Ali Siddiqi, Naveed Anwar Bhatti
arXiv:2610.07677v1 Announce Type: new
Abstract: In this paper, we show that standard evaluations of high-resolution Model Inversion Attacks (MIAs) significantly underestimate training-data privacy le...
By Shailen Smith, Rasmus Torp, Adam Breuer