{"id":"https://openalex.org/W3160385331","doi":"https://doi.org/10.1609/aaai.v36i2.20084","title":"A Fusion-Denoising Attack on InstaHide with Data Augmentation","display_name":"A Fusion-Denoising Attack on InstaHide with Data Augmentation","publication_year":2022,"publication_date":"2022-06-28","ids":{"openalex":"https://openalex.org/W3160385331","doi":"https://doi.org/10.1609/aaai.v36i2.20084","mag":"3160385331"},"language":"en","primary_location":{"id":"doi:10.1609/aaai.v36i2.20084","doi":"https://doi.org/10.1609/aaai.v36i2.20084","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v36i2.20084","pdf_url":null,"source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-2","norway-1"],"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1609/aaai.v36i2.20084","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038626990","display_name":"Xinjian Luo","orcid":"https://orcid.org/0000-0001-9671-5104","observed_orcids":["https://orcid.org/0000-0001-9671-5104"]},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Xinjian Luo","raw_affiliation_strings":["National University of Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010903591","display_name":"Xiaokui Xiao","orcid":"https://orcid.org/0000-0003-0914-4580","observed_orcids":["https://orcid.org/0000-0003-0914-4580"]},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Xiaokui Xiao","raw_affiliation_strings":["National University of Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101635565","display_name":"Yuncheng Wu","orcid":"https://orcid.org/0000-0002-1436-3916","observed_orcids":["https://orcid.org/0000-0002-1436-3916"]},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yuncheng Wu","raw_affiliation_strings":["National University of Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101415161","display_name":"Juncheng Liu","orcid":"https://orcid.org/0000-0002-5895-0581","observed_orcids":["https://orcid.org/0000-0002-5895-0581"]},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Juncheng Liu","raw_affiliation_strings":["National University of Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024892041","display_name":"Beng Chin Ooi","orcid":"https://orcid.org/0000-0003-4446-1100","observed_orcids":["https://orcid.org/0000-0003-4446-1100"]},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Beng Chin Ooi","raw_affiliation_strings":["National University of Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Singapore","institution_ids":["https://openalex.org/I165932596"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I165932596"],"apc_list":null,"apc_paid":null,"fwci":0.6286,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.68523785,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":96},"biblio":{"volume":"36","issue":"2","first_page":"1899","last_page":"1907"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.7324000000953674,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.7324000000953674,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.11760000139474869,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.06040000170469284,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/image-encryption","display_name":"image encryption","score":0.45399999618530273},{"id":"https://openalex.org/keywords/data-augmentation","display_name":"data augmentation","score":0.6959999799728394},{"id":"https://openalex.org/keywords/privacy-attacks-on-machine-learning","display_name":"privacy attacks on machine learning","score":0.39899998903274536}],"concepts":[{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.7043647170066833},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6913402676582336},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.584465503692627},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5439380407333374},{"id":"https://openalex.org/C163294075","wikidata":"https://www.wikidata.org/wiki/Q581861","display_name":"Noise reduction","level":2,"score":0.5207500457763672},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38195300102233887},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.374112069606781},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35043421387672424}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1609/aaai.v36i2.20084","doi":"https://doi.org/10.1609/aaai.v36i2.20084","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v36i2.20084","pdf_url":null,"source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-2","norway-1"],"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2105.07754","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2105.07754","pdf_url":"https://arxiv.org/pdf/2105.07754","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:ojs.aaai.org:article/20084","doi":null,"is_oa":true,"landing_page_url":"https://ojs.aaai.org/index.php/AAAI/article/view/20084","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/20084/19843","source":{"id":"https://openalex.org/S4306400155","display_name":"AAAI Publications (The Association for the Advancement of Artificial Intelligence (AAAI))","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I2801652627","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/I2801652627"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2159-5399","raw_type":"info:eu-repo/semantics/article"},{"id":"doi:10.48550/arxiv.2105.07754","doi":"https://doi.org/10.48550/arxiv.2105.07754","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2105.07754","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.1609/aaai.v36i2.20084","doi":"https://doi.org/10.1609/aaai.v36i2.20084","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v36i2.20084","pdf_url":null,"source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-2","norway-1"],"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321026","display_name":"Ministry of Earth Sciences","ror":"https://ror.org/013cf5k59"},{"id":"https://openalex.org/F4320322724","display_name":"Ministry of Education, India","ror":"https://ror.org/048xjjh50"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3160385331.pdf","grobid_xml":"https://content.openalex.org/works/W3160385331.grobid-xml"},"referenced_works_count":44,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W1834627138","https://openalex.org/W1955055330","https://openalex.org/W2051267297","https://openalex.org/W2108598243","https://openalex.org/W2117228865","https://openalex.org/W2118858186","https://openalex.org/W2133665775","https://openalex.org/W2146353910","https://openalex.org/W2147555557","https://openalex.org/W2151103935","https://openalex.org/W2194775991","https://openalex.org/W2273348943","https://openalex.org/W2520164769","https://openalex.org/W2522703671","https://openalex.org/W2562637781","https://openalex.org/W2591882872","https://openalex.org/W2765407302","https://openalex.org/W2793890232","https://openalex.org/W2809795042","https://openalex.org/W2903202062","https://openalex.org/W2912213068","https://openalex.org/W2912268344","https://openalex.org/W2943865428","https://openalex.org/W2944620162","https://openalex.org/W2951368041","https://openalex.org/W2954996726","https://openalex.org/W2963787388","https://openalex.org/W2964121744","https://openalex.org/W2970408908","https://openalex.org/W2995022099","https://openalex.org/W3000775737","https://openalex.org/W3008160931","https://openalex.org/W3021654819","https://openalex.org/W3049595782","https://openalex.org/W3091830290","https://openalex.org/W3094150121","https://openalex.org/W3094542121","https://openalex.org/W3100345364","https://openalex.org/W3108940306","https://openalex.org/W3118608800","https://openalex.org/W3157476704","https://openalex.org/W4407957581","https://openalex.org/W6600281463"],"related_works":["https://openalex.org/W3109512660","https://openalex.org/W3091830290","https://openalex.org/W3100345364","https://openalex.org/W3217260658","https://openalex.org/W4413889808","https://openalex.org/W7214211318","https://openalex.org/W4313483632","https://openalex.org/W2943240775","https://openalex.org/W4308233694","https://openalex.org/W7155072970"],"abstract_inverted_index":{"InstaHide":[0,77,105],"is":[1,39,76,110,115],"a":[2,73,87,118,138],"state-of-the-art":[3],"mechanism":[4],"for":[5,97,141],"protecting":[6],"private":[7,13,43,99,133,144],"training":[8],"images,":[9],"by":[10,50,64,93],"mixing":[11],"multiple":[12],"images":[14,44,100,124],"and":[15,135],"modifying":[16],"them":[17],"such":[18],"that":[19,37,55,125],"their":[20],"visual":[21],"features":[22],"are":[23,126],"indistinguishable":[24],"to":[25,41,72,90,116,121,128,130,169],"the":[26,46,102,131,143,147,153,161,164],"naked":[27],"eye.":[28],"In":[29,82],"recent":[30],"work,":[31],"however,":[32],"Carlini":[33,56,170],"et":[34,57,171],"al.":[35],"show":[36],"it":[38],"possible":[40],"reconstruct":[42],"from":[45,101,146],"encrypted":[47,123,148],"dataset":[48],"generated":[49],"InstaHide.":[51,69],"Nevertheless,":[52],"we":[53,85],"demonstrate":[54,160],"al.\u2019s":[58,172],"attack":[59,96,166],"can":[60],"be":[61],"easily":[62],"defeated":[63],"incorporating":[65],"data":[66,79,108,156],"augmentation":[67,80,109],"into":[68,151],"This":[70],"leads":[71],"natural":[74],"question:":[75],"with":[78],"secure?":[81],"this":[83,91],"paper,":[84],"provide":[86],"negative":[88],"answer":[89],"question,":[92],"devising":[94],"an":[95],"recovering":[98],"outputs":[103],"of":[104,155,163],"even":[106],"when":[107],"present.":[111],"The":[112],"basic":[113],"idea":[114],"use":[117],"comparative":[119],"network":[120,140],"identify":[122],"likely":[127],"correspond":[129],"same":[132],"image,":[134],"then":[136],"employ":[137],"fusion-denoising":[139],"restoring":[142],"image":[145],"ones,":[149],"taking":[150],"account":[152],"effects":[154],"augmentation.":[157],"Extensive":[158],"experiments":[159],"effectiveness":[162],"proposed":[165],"in":[167],"comparison":[168],"attack.":[173]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2022,"cited_by_count":3},{"year":2020,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2021-05-24T00:00:00"}