arXiv Computer Vision
Oct 2

Anti-Persona: Disrupting Unauthorized Identity Binding and Recognition in Personalized Vision--Language Models

The paper introduces Anti-Persona, an image-level defense that prevents unauthorized identity binding and recognition in personalized vision–language models. By aggregating visual features from multiple reference images into an identity prototype and applying subtle perturbations, the method disrupts prototype alignment in the vision‑encoder space while maintaining visual fidelity. Experiments on two personalized LVLMs show protection rates up to 95.0% and robustness across prompt variations and encoder mismatches.

By Abhishek Basu, Fahad Shamshad, Karthik Nandakumar
arXiv Computer Vision
Oct 8

How Private is Private? A Comparative Study for Face De-Identification

The paper introduces a unified evaluation framework for face de-identification (FDeID), addressing inconsistencies in current protocols. It presents UtilFace, a demographically balanced benchmark assembled from four large-scale datasets, and HiFD, a hierarchical metric that simultaneously measures identity suppression, multi-level utility preservation, and image quality. Using this framework, the authors compare adversarial, GAN-based, and diffusion-based methods, revealing trade-offs and failure modes that were previously hidden, and they release the benchmark and toolkit for reproducible research.

By Hui Wei, Hao Yu, Hui Kuurila-Zhang, Guoying Zhao