{"id":"https://openalex.org/W7151731895","doi":"https://doi.org/10.48550/arxiv.2604.05296","title":"From Measurement to Mitigation: Quantifying and Reducing Identity Leakage in Image Representation Encoders with Linear Subspace Removal","display_name":"From Measurement to Mitigation: Quantifying and Reducing Identity Leakage in Image Representation Encoders with Linear Subspace Removal","publication_year":2026,"publication_date":"2026-04-07","ids":{"openalex":"https://openalex.org/W7151731895","doi":"https://doi.org/10.48550/arxiv.2604.05296"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.05296","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.05296","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.05296","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133162747","display_name":"Daniel George","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"George, Daniel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133232112","display_name":"Charles Yeh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yeh, Charles","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133197404","display_name":"Daniel D. Lee","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lee, Daniel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133182445","display_name":"Yifei Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yifei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.49950000643730164,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.49950000643730164,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2361000031232834,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.1005999967455864,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/subspace-topology","display_name":"Subspace topology","score":0.6610999703407288},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.4771000146865845},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4147000014781952},{"id":"https://openalex.org/keywords/leakage","display_name":"Leakage (economics)","score":0.4097000062465668},{"id":"https://openalex.org/keywords/projector","display_name":"Projector","score":0.3646000027656555},{"id":"https://openalex.org/keywords/linear-subspace","display_name":"Linear subspace","score":0.3416000008583069},{"id":"https://openalex.org/keywords/identity","display_name":"Identity (music)","score":0.33379998803138733},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.3312999904155731}],"concepts":[{"id":"https://openalex.org/C32834561","wikidata":"https://www.wikidata.org/wiki/Q660730","display_name":"Subspace topology","level":2,"score":0.6610999703407288},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6341000199317932},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5102999806404114},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.4771000146865845},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.4562000036239624},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4147000014781952},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.4097000062465668},{"id":"https://openalex.org/C2776865275","wikidata":"https://www.wikidata.org/wiki/Q311666","display_name":"Projector","level":2,"score":0.3646000027656555},{"id":"https://openalex.org/C12362212","wikidata":"https://www.wikidata.org/wiki/Q728435","display_name":"Linear subspace","level":2,"score":0.3416000008583069},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.33379998803138733},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.3312999904155731},{"id":"https://openalex.org/C184297639","wikidata":"https://www.wikidata.org/wiki/Q177765","display_name":"Biometrics","level":2,"score":0.328000009059906},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3077000081539154},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.30649998784065247},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.30309998989105225},{"id":"https://openalex.org/C2776452267","wikidata":"https://www.wikidata.org/wiki/Q1503443","display_name":"Secrecy","level":2,"score":0.29670000076293945},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.2937999963760376},{"id":"https://openalex.org/C6802819","wikidata":"https://www.wikidata.org/wiki/Q1072174","display_name":"Linear system","level":2,"score":0.2840999960899353},{"id":"https://openalex.org/C57493831","wikidata":"https://www.wikidata.org/wiki/Q3134666","display_name":"Projection (relational algebra)","level":2,"score":0.272599995136261},{"id":"https://openalex.org/C116409475","wikidata":"https://www.wikidata.org/wiki/Q1385056","display_name":"External Data Representation","level":2,"score":0.27000001072883606},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.26899999380111694},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.2632000148296356},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2630999982357025},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.2596000134944916},{"id":"https://openalex.org/C50942859","wikidata":"https://www.wikidata.org/wiki/Q4967193","display_name":"Rectification","level":3,"score":0.25609999895095825}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.05296","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.05296","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.05296","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.05296","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5820760726928711,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Frozen":[0],"visual":[1,41,176],"embeddings":[2,42],"(e.g.,":[3],"CLIP,":[4],"DINOv2/v3,":[5],"SSCD)":[6],"power":[7],"retrieval":[8],"and":[9,24,35,57,63,97,118,124,143,162,178],"integrity":[10],"systems,":[11],"yet":[12],"their":[13],"use":[14],"on":[15],"face-containing":[16],"data":[17],"is":[18],"constrained":[19],"by":[20],"unmeasured":[21],"identity":[22,74,91],"leakage":[23,115],"a":[25,38,51,66],"lack":[26],"of":[27,40,159],"deployable":[28],"mitigations.":[29],"We":[30],"take":[31],"an":[32,72],"attacker-aware":[33],"view":[34],"contribute:":[36],"(i)":[37],"benchmark":[39],"that":[43,70,101,131,164],"reports":[44],"open-set":[45,107],"verification":[46],"at":[47],"low":[48],"false-accept":[49],"rates,":[50],"calibrated":[52],"diffusion-based":[53],"template":[54,122],"inversion":[55],"check,":[56],"face-context":[58],"attribution":[59],"with":[60,110,147],"equal-area":[61],"perturbations;":[62],"(ii)":[64],"propose":[65],"one-shot":[67],"linear":[68,108,134,165],"projector":[69],"removes":[71],"estimated":[73],"subspace":[75,166],"while":[76,138,172],"preserving":[77,173],"the":[78,90,153],"complementary":[79],"space":[80],"needed":[81],"for":[82,85,175],"utility,":[83,142],"which":[84],"brevity":[86],"we":[87,99,129],"denote":[88],"as":[89],"sanitization":[92],"projection":[93],"ISP.":[94],"Across":[95],"CelebA-20":[96],"VGGFace2,":[98],"show":[100,130],"these":[102],"encoders":[103,161],"are":[104,125],"robust":[105,120],"under":[106],"probes,":[109],"CLIP":[111],"exhibiting":[112],"relatively":[113],"higher":[114],"than":[116],"DINOv2/v3":[117],"SSCD,":[119],"to":[121,136],"inversion,":[123],"context-dominant.":[126],"In":[127],"addition,":[128],"ISP":[132],"drives":[133],"access":[135],"near-chance":[137],"retaining":[139],"high":[140],"non-biometric":[141],"transfers":[144],"across":[145],"datasets":[146],"minor":[148],"degradation.":[149],"Our":[150],"results":[151],"establish":[152],"first":[154],"attacker-calibrated":[155],"facial":[156],"privacy":[157,170],"audit":[158],"non-FR":[160],"demonstrate":[163],"removal":[167],"achieves":[168],"strong":[169],"guarantees":[171],"utility":[174],"search":[177],"retrieval.":[179]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-09T00:00:00"}