arXiv AI
6d ago

AEGIS: Preserving Privacy of 3D Facial Avatars with Adversarial Perturbations

AEGIS is a privacy‑preserving framework that applies adversarial perturbations to the color coefficients of 3D Gaussian avatar primitives, protecting identity across all viewpoints and animations without altering geometry. It achieves near‑zero face retrieval and verification accuracy against black‑box recognizers while maintaining high perceptual realism and preserving attributes like age, gender, and emotion. The authors also introduce a viewpoint‑robust leakage metric to quantify residual identity leakage across rendered views.

By Dawid Wolkiewicz, Anastasiya Pechko, Przemys{\l}aw Spurek, Piotr Syga
arXiv Computer Vision
Oct 8

How Private is Private? A Comparative Study for Face De-Identification

The paper introduces a unified evaluation framework for face de-identification (FDeID), addressing inconsistencies in current protocols. It presents UtilFace, a demographically balanced benchmark assembled from four large-scale datasets, and HiFD, a hierarchical metric that simultaneously measures identity suppression, multi-level utility preservation, and image quality. Using this framework, the authors compare adversarial, GAN-based, and diffusion-based methods, revealing trade-offs and failure modes that were previously hidden, and they release the benchmark and toolkit for reproducible research.

By Hui Wei, Hao Yu, Hui Kuurila-Zhang, Guoying Zhao