{"id":"https://openalex.org/W3107185593","doi":"https://doi.org/10.2478/popets-2021-0006","title":"On the (Im)Practicality of Adversarial Perturbation for Image Privacy","display_name":"On the (Im)Practicality of Adversarial Perturbation for Image Privacy","publication_year":2020,"publication_date":"2020-11-09","ids":{"openalex":"https://openalex.org/W3107185593","doi":"https://doi.org/10.2478/popets-2021-0006","mag":"3107185593"},"language":"en","primary_location":{"id":"doi:10.2478/popets-2021-0006","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2021-0006","pdf_url":"https://www.sciendo.com/pdf/10.2478/popets-2021-0006","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://www.sciendo.com/pdf/10.2478/popets-2021-0006","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023144708","display_name":"Arezoo Rajabi","orcid":"https://orcid.org/0000-0001-9050-0129"},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Arezoo Rajabi","raw_affiliation_strings":["Oregon State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062173431","display_name":"Rakesh B. Bobba","orcid":"https://orcid.org/0000-0002-5440-0785"},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rakesh B. Bobba","raw_affiliation_strings":["Oregon State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036907709","display_name":"Mike Rosulek","orcid":null},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mike Rosulek","raw_affiliation_strings":["Oregon State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026656203","display_name":"Charles V. Wright","orcid":null},"institutions":[{"id":"https://openalex.org/I126345244","display_name":"Portland State University","ror":"https://ror.org/00yn2fy02","country_code":"US","type":"education","lineage":["https://openalex.org/I126345244"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Charles V. Wright","raw_affiliation_strings":["Portland State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Portland State University","institution_ids":["https://openalex.org/I126345244"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100859961","display_name":"Wu\u2010chi Feng","orcid":"https://orcid.org/0000-0002-5267-8281"},"institutions":[{"id":"https://openalex.org/I126345244","display_name":"Portland State University","ror":"https://ror.org/00yn2fy02","country_code":"US","type":"education","lineage":["https://openalex.org/I126345244"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wu-chi Feng","raw_affiliation_strings":["Portland State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Portland State University","institution_ids":["https://openalex.org/I126345244"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.9113,"has_fulltext":false,"cited_by_count":44,"citation_normalized_percentile":{"value":0.9477803,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"2021","issue":"1","first_page":"85","last_page":"106"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9801999926567078,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.9742000102996826,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8547576665878296},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.820410430431366},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.6879848837852478},{"id":"https://openalex.org/keywords/facial-recognition-system","display_name":"Facial recognition system","score":0.5923308730125427},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5405797362327576},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.46773678064346313},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.46467241644859314},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3525424003601074},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.33864372968673706}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8547576665878296},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.820410430431366},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.6879848837852478},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.5923308730125427},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5405797362327576},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.46773678064346313},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.46467241644859314},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3525424003601074},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.33864372968673706}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.2478/popets-2021-0006","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2021-0006","pdf_url":"https://www.sciendo.com/pdf/10.2478/popets-2021-0006","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:pdxscholar.library.pdx.edu:compsci_fac-1268","is_oa":true,"landing_page_url":"https://pdxscholar.library.pdx.edu/compsci_fac/265","pdf_url":"https://pdxscholar.library.pdx.edu/cgi/viewcontent.cgi?article=1268&context=compsci_fac","source":{"id":"https://openalex.org/S4377196300","display_name":"PDXScholar  (Portland State University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I126345244","host_organization_name":"Portland State University","host_organization_lineage":["https://openalex.org/I126345244"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Computer Science Faculty Publications and Presentations","raw_type":null},{"id":"pmh:oai:doaj.org/article:5eb5560cb9bd4916be0fce0d8305e026","is_oa":false,"landing_page_url":"https://doaj.org/article/5eb5560cb9bd4916be0fce0d8305e026","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings on Privacy Enhancing Technologies, Vol 2021, Iss 1, Pp 85-106 (2021)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.2478/popets-2021-0006","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2021-0006","pdf_url":"https://www.sciendo.com/pdf/10.2478/popets-2021-0006","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.6000000238418579,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":81,"referenced_works":["https://openalex.org/W28205226","https://openalex.org/W100863554","https://openalex.org/W1488228643","https://openalex.org/W1505723240","https://openalex.org/W1572593068","https://openalex.org/W1578378315","https://openalex.org/W1630882384","https://openalex.org/W1648971828","https://openalex.org/W1673923490","https://openalex.org/W1686810756","https://openalex.org/W1849007038","https://openalex.org/W1852980076","https://openalex.org/W1945616565","https://openalex.org/W1972138918","https://openalex.org/W1976948919","https://openalex.org/W2013623332","https://openalex.org/W2019464758","https://openalex.org/W2024922353","https://openalex.org/W2028299542","https://openalex.org/W2048228667","https://openalex.org/W2054269161","https://openalex.org/W2057380627","https://openalex.org/W2067681708","https://openalex.org/W2070804210","https://openalex.org/W2078944335","https://openalex.org/W2083192529","https://openalex.org/W2092782098","https://openalex.org/W2095705004","https://openalex.org/W2101268763","https://openalex.org/W2103958416","https://openalex.org/W2113227937","https://openalex.org/W2117539524","https://openalex.org/W2119647652","https://openalex.org/W2122880142","https://openalex.org/W2133665775","https://openalex.org/W2143969840","https://openalex.org/W2144354855","https://openalex.org/W2156523068","https://openalex.org/W2158551678","https://openalex.org/W2159024459","https://openalex.org/W2163605009","https://openalex.org/W2243397390","https://openalex.org/W2295936755","https://openalex.org/W2325939864","https://openalex.org/W2476457629","https://openalex.org/W2480709345","https://openalex.org/W2509735204","https://openalex.org/W2516672586","https://openalex.org/W2531409750","https://openalex.org/W2543927648","https://openalex.org/W2551176409","https://openalex.org/W2557283755","https://openalex.org/W2603766943","https://openalex.org/W2605289356","https://openalex.org/W2607219512","https://openalex.org/W2618043096","https://openalex.org/W2640329709","https://openalex.org/W2766866342","https://openalex.org/W2787708942","https://openalex.org/W2797132229","https://openalex.org/W2799208032","https://openalex.org/W2879216670","https://openalex.org/W2884985453","https://openalex.org/W2941048077","https://openalex.org/W2950274894","https://openalex.org/W2962700793","https://openalex.org/W2962835968","https://openalex.org/W2963207607","https://openalex.org/W2963268689","https://openalex.org/W2963542245","https://openalex.org/W2963745020","https://openalex.org/W2963857521","https://openalex.org/W2964077693","https://openalex.org/W2964153729","https://openalex.org/W2966295182","https://openalex.org/W2977362526","https://openalex.org/W3102720581","https://openalex.org/W3133898321","https://openalex.org/W3207137622","https://openalex.org/W4220765846","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3176240006","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4288019534","https://openalex.org/W4310988119"],"abstract_inverted_index":{"Abstract":[0],"Image":[1],"hosting":[2],"platforms":[3,20],"are":[4,32,130],"a":[5,66,90],"popular":[6],"way":[7],"to":[8,25,50,195],"store":[9],"and":[10,16,53,72,106,122,158,164,172,179],"share":[11],"images":[12,26,49,75],"with":[13,35,56,147],"family":[14],"members":[15],"friends.":[17],"However,":[18],"such":[19,104],"typically":[21],"have":[22,62],"full":[23],"access":[24],"raising":[27],"privacy":[28,91],"concerns.":[29],"These":[30],"concerns":[31],"further":[33],"exacerbated":[34],"the":[36,83,152,197],"advent":[37],"of":[38,74,85],"Convolutional":[39],"Neural":[40],"Networks":[41],"(CNNs)":[42],"that":[43,129,170,191],"can":[44,139,193],"be":[45],"trained":[46],"on":[47],"available":[48],"automatically":[51],"detect":[52],"recognize":[54],"faces":[55],"high":[57],"accuracy.":[58],"Recently,":[59],"adversarial":[60,86,111,132],"perturbations":[61,119,133,143],"been":[63],"proposed":[64,153,198],"as":[65,89],"potential":[67,189],"defense":[68,92],"against":[69,93,155,182,206],"automated":[70,94],"recognition":[71,161,184],"classification":[73],"by":[76],"CNNs.":[77],"In":[78],"this":[79],"paper,":[80],"we":[81,98,187,201],"explore":[82,188],"practicality":[84],"perturbation-based":[87],"approaches":[88,105,113],"face":[95,160,183],"recognition.":[96],"Specifically,":[97],"first":[99],"identify":[100],"practical":[101,110],"requirements":[102],"for":[103],"then":[107],"propose":[108],"two":[109],"perturbation":[112],"\u2013":[114],"(i)":[115],"learned":[116],"universal":[117],"ensemble":[118],"(UEP)":[120],",":[121],"(ii)":[123],"k-randomized":[124],"transparent":[125],"image":[126],"overlays":[127],"(k-RTIO)":[128],"semantic":[131],".":[134],"We":[135,150],"demonstrate":[136,202],"how":[137],"users":[138],"generate":[140],"effective":[141,204],"transferable":[142],"under":[144],"realistic":[145],"assumptions":[146],"less":[148],"effort.":[149],"evaluate":[151],"methods":[154],"state-of-theart":[156],"online":[157],"offline":[159],"models,":[162],"Clarifai.com":[163],"DeepFace,":[165],"respectively.":[166],"Our":[167],"findings":[168],"show":[169],"UEP":[171],"k-RTIO":[173],"respectively":[174],"achieve":[175],"more":[176],"than":[177],"85%":[178],"90%":[180],"success":[181],"models.":[185],"Additionally,":[186],"countermeasures":[190],"classifiers":[192],"use":[194],"thwart":[196],"defenses.":[199],"Particularly,":[200],"one":[203],"countermeasure":[205],"UEP.":[207]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":9},{"year":2020,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}