arXiv:2502. 16167v2 Announce Type: replace-cross Abstract: Diffusion models (DMs) have advanced text-to-image (T2I) synthesis, yet their personalization capabilities raise serious privacy and copyright concerns.
By Xinwei Liu, Xiaojun Jia, Yuan Xun, Hua Zhang, Xiaochun Cao
The paper introduces Anti-Persona, an image-level defense that prevents unauthorized identity binding and recognition in personalized vision–language models. By aggregating visual features from multiple reference images into an identity prototype and applying subtle perturbations, the method disrupts prototype alignment in the vision‑encoder space while maintaining visual fidelity. Experiments on two personalized LVLMs show protection rates up to 95.0% and robustness across prompt variations and encoder mismatches.
By Abhishek Basu, Fahad Shamshad, Karthik Nandakumar
arXiv:2606. 11615v1 Announce Type: cross Abstract: The widespread adoption of face recognition (FR) technologies raises serious privacy concerns, as facial data can be exploited without consent.
By Omid Ahmadieh, Nima Karimian
arXiv:2607. 28936v1 Announce Type: cross Abstract: Facial biometric identification relies on the distinctiveness of user attributes within a high-dimensional embedding space.
By Omid Ahmadieh, Nima Karimian
arXiv:2607. 25926v1 Announce Type: cross Abstract: Face de-identification (De-ID) aims to remove or conceal personally identifiable facial features in images or videos to prevent identity recognition while preserving utility for downstream tasks.
By Hui Wei, Hao Yu, Guoying Zhao
The paper introduces a unified evaluation framework for face de-identification (FDeID), addressing inconsistencies in current protocols. It presents UtilFace, a demographically balanced benchmark assembled from four large-scale datasets, and HiFD, a hierarchical metric that simultaneously measures identity suppression, multi-level utility preservation, and image quality. Using this framework, the authors compare adversarial, GAN-based, and diffusion-based methods, revealing trade-offs and failure modes that were previously hidden, and they release the benchmark and toolkit for reproducible research.
By Hui Wei, Hao Yu, Hui Kuurila-Zhang, Guoying Zhao
The paper presents KVeil, the first‑place solution to the ECCV 2026 LifeGenIP Challenge on Unlearnable Videos. It introduces Reference Capacity Collapse and a Motion‑Guided EOT mechanism for Phase 1, and a two‑layer framework that protects facial and background regions for Phase 2, achieving strong protection against various customization attacks. The methods build on the authors’ prior work LETHE and are publicly available on GitHub.
By Boheng Li, Yueming Xing, Yiming Li, Jie Zhang, Han Qiu, Tianwei Zhang
arXiv:2609.27022v1 Announce Type: new
Abstract: In this paper, we investigate the impact of adversarial attacks on identity encoders within a realistic de-identification framework. Our experiments sh...
By Felix Rosberg, Cristofer Englund, Eren Erdal Aksoy, Fernando Alonso-Fernandez
arXiv:2602.02914v4 Announce Type: replace
Abstract: Privacy-preserving face recognition (PPFR) and face anonymization have different goals, but both must retain some identity-related information for...
By Wenqi Guo, Qingyun Qian, Mohamed Shehata, Shan Du
arXiv:2504. 14798v2 Announce Type: replace Abstract: Machine Unlearning (MUL) has emerged as a key mechanism for privacy protection and content regulation, yet current techniques often fail to guarantee the complete removal of sensitive information.
By Hao Xuan, Xingyu Li
arXiv:2610.07677v1 Announce Type: new
Abstract: In this paper, we show that standard evaluations of high-resolution Model Inversion Attacks (MIAs) significantly underestimate training-data privacy le...
By Shailen Smith, Rasmus Torp, Adam Breuer
arXiv:2607. 14932v1 Announce Type: cross Abstract: Synthetic face datasets have become effective enough to train face recognition models with accuracy rivaling that of models trained on real photographs.
By Pawe{\l} Borsukiewicz, Daniele Lunghi, Wendk\^uuni C. Ou\'edraogo, Jacques Klein, Tegawend\'e F. Bissyand\'e