{"id":"https://openalex.org/W7094954398","doi":"https://doi.org/10.1145/3746027.3755068","title":"Reversible Privacy Preserving on Vision-Language Models via Adversarial Multimodal Key","display_name":"Reversible Privacy Preserving on Vision-Language Models via Adversarial Multimodal Key","publication_year":2025,"publication_date":"2025-10-25","ids":{"openalex":"https://openalex.org/W7094954398","doi":"https://doi.org/10.1145/3746027.3755068"},"language":null,"primary_location":{"id":"doi:10.1145/3746027.3755068","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3746027.3755068","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on Multimedia","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Peng Ying","orcid":"https://orcid.org/0009-0005-8007-5583"},"institutions":[{"id":"https://openalex.org/I25757504","display_name":"China University of Mining and Technology","ror":"https://ror.org/01xt2dr21","country_code":"CN","type":"education","lineage":["https://openalex.org/I25757504"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Ying","raw_affiliation_strings":["School of Compute Science and Technology / School of Artificial Intelligence, China University of Mining and Technology, Xuzhou, Jiangsu, China and Mine Digitization Engineering Research Center of the Ministry of Education, Xuzhou, Jiangsu, China"],"raw_orcid":"https://orcid.org/0009-0005-8007-5583","affiliations":[{"raw_affiliation_string":"School of Compute Science and Technology / School of Artificial Intelligence, China University of Mining and Technology, Xuzhou, Jiangsu, China and Mine Digitization Engineering Research Center of the Ministry of Education, Xuzhou, Jiangsu, China","institution_ids":["https://openalex.org/I25757504"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhongnian Li","orcid":"https://orcid.org/0000-0003-3364-8703"},"institutions":[{"id":"https://openalex.org/I25757504","display_name":"China University of Mining and Technology","ror":"https://ror.org/01xt2dr21","country_code":"CN","type":"education","lineage":["https://openalex.org/I25757504"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhongnian Li","raw_affiliation_strings":["School of Compute Science and Technology / School of Artificial Intelligence, China University of Mining and Technology, Xuzhou, Jiangsu, China and Mine Digitization Engineering Research Center of the Ministry of Education, Xuzhou, Jiangsu, China"],"raw_orcid":"https://orcid.org/0000-0003-3364-8703","affiliations":[{"raw_affiliation_string":"School of Compute Science and Technology / School of Artificial Intelligence, China University of Mining and Technology, Xuzhou, Jiangsu, China and Mine Digitization Engineering Research Center of the Ministry of Education, Xuzhou, Jiangsu, China","institution_ids":["https://openalex.org/I25757504"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Meng Wei","orcid":"https://orcid.org/0009-0000-3836-6487"},"institutions":[{"id":"https://openalex.org/I25757504","display_name":"China University of Mining and Technology","ror":"https://ror.org/01xt2dr21","country_code":"CN","type":"education","lineage":["https://openalex.org/I25757504"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Meng Wei","raw_affiliation_strings":["School of Compute Science and Technology / School of Artificial Intelligence, China University of Mining and Technology, Xuzhou, Jiangsu, China and Mine Digitization Engineering Research Center of the Ministry of Education, Xuzhou, Jiangsu, China"],"raw_orcid":"https://orcid.org/0009-0000-3836-6487","affiliations":[{"raw_affiliation_string":"School of Compute Science and Technology / School of Artificial Intelligence, China University of Mining and Technology, Xuzhou, Jiangsu, China and Mine Digitization Engineering Research Center of the Ministry of Education, Xuzhou, Jiangsu, China","institution_ids":["https://openalex.org/I25757504"]}]},{"author_position":"last","author":{"id":null,"display_name":"Xinzheng Xu","orcid":"https://orcid.org/0000-0001-6973-799X"},"institutions":[{"id":"https://openalex.org/I25757504","display_name":"China University of Mining and Technology","ror":"https://ror.org/01xt2dr21","country_code":"CN","type":"education","lineage":["https://openalex.org/I25757504"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinzheng Xu","raw_affiliation_strings":["School of Compute Science and Technology / School of Artificial Intelligence, China University of Mining and Technology, Xuzhou, Jiangsu, China, State Key Lab. for Novel Software Technology, Nanjing University, Nanjing, Jiangsu, China, and Mine Digitization Engineering Research Center of the Ministry of Education, Xuzhou, Jiangsu, China"],"raw_orcid":"https://orcid.org/0000-0001-6973-799X","affiliations":[{"raw_affiliation_string":"School of Compute Science and Technology / School of Artificial Intelligence, China University of Mining and Technology, Xuzhou, Jiangsu, China, State Key Lab. for Novel Software Technology, Nanjing University, Nanjing, Jiangsu, China, and Mine Digitization Engineering Research Center of the Ministry of Education, Xuzhou, Jiangsu, China","institution_ids":["https://openalex.org/I25757504"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I25757504"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.57286115,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3380","last_page":"3389"},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.33739998936653137,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.33739998936653137,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.19269999861717224,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.10100000351667404,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8557999730110168},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.8118000030517578},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.47130000591278076},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.3968000113964081},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.3847000002861023},{"id":"https://openalex.org/keywords/term","display_name":"Term (time)","score":0.3276999890804291},{"id":"https://openalex.org/keywords/redaction","display_name":"Redaction","score":0.32190001010894775}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8557999730110168},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.8118000030517578},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7714999914169312},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.47130000591278076},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44449999928474426},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3968000113964081},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.3847000002861023},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.37450000643730164},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.3276999890804291},{"id":"https://openalex.org/C2776795254","wikidata":"https://www.wikidata.org/wiki/Q561071","display_name":"Redaction","level":2,"score":0.32190001010894775},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.29750001430511475},{"id":"https://openalex.org/C2778152352","wikidata":"https://www.wikidata.org/wiki/Q5165061","display_name":"Content (measure theory)","level":2,"score":0.2971999943256378},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.2883000075817108},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.2705000042915344},{"id":"https://openalex.org/C3073032","wikidata":"https://www.wikidata.org/wiki/Q15912075","display_name":"Information hiding","level":3,"score":0.2574999928474426},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.25600001215934753},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.2517000138759613},{"id":"https://openalex.org/C509729295","wikidata":"https://www.wikidata.org/wiki/Q7246032","display_name":"Privacy software","level":3,"score":0.2500999867916107}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3746027.3755068","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3746027.3755068","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on Multimedia","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7587488889694214}],"awards":[{"id":"https://openalex.org/G3207407949","display_name":null,"funder_award_id":"No. 62306320, No. 61976217","funder_id":"https://openalex.org/F4320334062","funder_display_name":"National Natural Science Foundation of China-Liaoning Joint Fund"},{"id":"https://openalex.org/G392641027","display_name":null,"funder_award_id":"No. BK20231063","funder_id":"https://openalex.org/F4320322769","funder_display_name":"Natural Science Foundation of Jiangsu Province"}],"funders":[{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334062","display_name":"National Natural Science Foundation of China-Liaoning Joint Fund","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W2473418344","https://openalex.org/W3170672407","https://openalex.org/W3177096435","https://openalex.org/W4367313930","https://openalex.org/W4382318916","https://openalex.org/W4385565597","https://openalex.org/W4389961033","https://openalex.org/W4392678661","https://openalex.org/W4393157467","https://openalex.org/W4401863415"],"related_works":[],"abstract_inverted_index":{"Vision-Language":[0],"Models":[1],"(VLMs)":[2],"such":[3,46],"as":[4,47],"GPT-4V":[5],"and":[6,15,97,119,175],"LLaVA":[7],"have":[8],"demonstrated":[9],"impressive":[10],"capabilities":[11],"in":[12,186],"multimodal":[13,104,187],"understanding":[14],"generation.":[16],"Unfortunately,":[17],"their":[18],"ability":[19],"to":[20,54,130,140],"infer":[21],"sensitive":[22,142],"information":[23,143],"from":[24,116,126],"visual":[25],"content":[26,64,129,171],"raises":[27],"serious":[28],"privacy":[29,161,184],"concerns,":[30],"especially":[31],"when":[32],"the":[33,120,127,165],"images":[34,96],"containing":[35],"personal":[36],"information.":[37],"Existing":[38],"solutions":[39],"either":[40],"rely":[41],"on":[42,79],"static":[43],"alignment":[44],"mechanisms,":[45],"task-specific":[48],"prompt":[49],"turning,":[50],"which":[51],"are":[52,149],"vulnerable":[53],"adversarial":[55,91],"prompts,":[56],"or":[57],"irreversible":[58],"redaction":[59],"methods":[60],"that":[61,164],"permanently":[62],"destroy":[63],"utility":[65],"for":[66,183],"legitimate":[67],"users.":[68],"To":[69],"address":[70],"these":[71],"limitations,":[72],"we":[73],"propose":[74],"a":[75,89,99,153,180],"reversible":[76],"privacy-preserving":[77],"framework":[78],"VLMs":[80],"via":[81],"Adversarial":[82],"Multimodal":[83],"Key":[84],"(AMK).":[85],"Specifically,":[86],"AMK":[87],"embeds":[88],"learnable":[90],"image":[92,109,128],"key":[93,102,110,122],"into":[94],"mosaic-obscured":[95],"generates":[98],"corresponding":[100],"text":[101,121],"through":[103,144,152],"contrastive":[105],"learning":[106],"model.":[107],"The":[108],"is":[111,123],"optimized":[112],"by":[113],"gradient-based":[114],"supervision":[115],"white-box":[117],"VLMs,":[118,145],"implicitly":[124],"derived":[125],"avoid":[131],"exposure":[132],"during":[133],"transmission.":[134],"These":[135],"keys":[136,174],"enable":[137],"authorized":[138],"users":[139],"restore":[141],"while":[146],"unauthorized":[147,177],"queries":[148],"explicitly":[150],"rejected":[151],"refusal":[154],"response":[155],"mechanism.":[156],"Our":[157],"experiments":[158],"across":[159],"various":[160],"scenarios":[162],"show":[163],"proposed":[166],"method":[167],"effectively":[168],"restores":[169],"redacted":[170],"with":[172],"correct":[173],"prevents":[176],"disclosure,":[178],"offering":[179],"practical":[181],"solution":[182],"protection":[185],"systems.":[188]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-25T00:00:00"}
