{"id":"https://openalex.org/W7169875187","doi":"https://doi.org/10.48550/arxiv.2607.17504","title":"DecoyFace: Beyond Obfuscation via Controllable and Imperceptible Identity Misdirection for Privacy-Preserving Face Recognition","display_name":"DecoyFace: Beyond Obfuscation via Controllable and Imperceptible Identity Misdirection for Privacy-Preserving Face Recognition","publication_year":2026,"publication_date":"2026-07-20","ids":{"openalex":"https://openalex.org/W7169875187","doi":"https://doi.org/10.48550/arxiv.2607.17504"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.17504","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.17504","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.17504","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067089651","display_name":"Zhihan Ren","orcid":"https://orcid.org/0009-0003-5763-4581"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ren, Zhihan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5141249858","display_name":"Lijun He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Lijun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5141287452","display_name":"Xinyao Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Xinyao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044684746","display_name":"Xinzhu Fu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fu, Xinzhu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5141255052","display_name":"Fan Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Fan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.838699996471405,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.838699996471405,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10828","display_name":"Biometric Identification and Security","score":0.1005999967455864,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0142000000923872,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/facial-recognition-system","display_name":"Facial recognition system","score":0.73580002784729},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.588699996471405},{"id":"https://openalex.org/keywords/identity","display_name":"Identity (music)","score":0.5289999842643738},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.45239999890327454},{"id":"https://openalex.org/keywords/subspace-topology","display_name":"Subspace topology","score":0.45080000162124634},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.4259999990463257},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.421999990940094},{"id":"https://openalex.org/keywords/decoy","display_name":"Decoy","score":0.4052000045776367}],"concepts":[{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.73580002784729},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6890000104904175},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.588699996471405},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.5289999842643738},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4796999990940094},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.45239999890327454},{"id":"https://openalex.org/C32834561","wikidata":"https://www.wikidata.org/wiki/Q660730","display_name":"Subspace topology","level":2,"score":0.45080000162124634},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.4259999990463257},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.421999990940094},{"id":"https://openalex.org/C2779179475","wikidata":"https://www.wikidata.org/wiki/Q3545649","display_name":"Decoy","level":3,"score":0.4052000045776367},{"id":"https://openalex.org/C184297639","wikidata":"https://www.wikidata.org/wiki/Q177765","display_name":"Biometrics","level":2,"score":0.4034000039100647},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3862999975681305},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.36880001425743103},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3587999939918518},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.358599990606308},{"id":"https://openalex.org/C88799230","wikidata":"https://www.wikidata.org/wiki/Q3398329","display_name":"Three-dimensional face recognition","level":5,"score":0.3465000092983246},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3456000089645386},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.3424000144004822},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.3325999975204468},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3303999900817871},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.32019999623298645},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3122999966144562},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.27649998664855957},{"id":"https://openalex.org/C191070858","wikidata":"https://www.wikidata.org/wiki/Q5428343","display_name":"Face Recognition Grand Challenge","level":5,"score":0.27070000767707825},{"id":"https://openalex.org/C522325796","wikidata":"https://www.wikidata.org/wiki/Q471880","display_name":"Identity theft","level":2,"score":0.2538999915122986}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.17504","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.17504","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.17504","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.17504","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6939935088157654}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Split":[0],"face":[1,23,183],"recognition":[2,24,75,156],"reduces":[3],"client-side":[4],"computation":[5],"but":[6,70],"exposes":[7],"intermediate":[8,84],"features":[9,34,142],"to":[10,28,81,163],"feature":[11],"inversion":[12,36,139],"attacks":[13,167,172],"and":[14,48,90,129,143,168,177],"unauthorized":[15,30,65],"analysis":[16],"by":[17],"honest-but-curious":[18],"(HBC)":[19],"servers.":[20],"Existing":[21],"privacy-preserving":[22],"methods":[25],"mainly":[26],"aim":[27],"resist":[29],"reconstruction,":[31],"typically":[32],"producing":[33],"whose":[35],"yields":[37],"visibly":[38],"degraded":[39],"results,":[40],"which":[41],"may":[42],"reveal":[43],"the":[44,83,101,109,115,119],"existence":[45],"of":[46],"protection":[47],"motivate":[49],"adaptive":[50],"attacks.":[51],"To":[52],"address":[53],"this":[54],"issue,":[55],"we":[56],"propose":[57],"DecoyFace,":[58],"an":[59,122],"imperceptible":[60,178],"decoy-oriented":[61],"framework":[62],"that":[63,152],"steers":[64],"reconstruction":[66,146],"toward":[67],"a":[68,87,131],"plausible":[69,176],"incorrect":[71],"identity":[72,98,161],"while":[73,104,158,173],"preserving":[74],"utility.":[76],"The":[77,94],"key":[78],"idea":[79],"is":[80,112],"decompose":[82],"representation":[85],"into":[86,100],"reconstruction-sensitive":[88,102],"subspace":[89],"its":[91],"complementary":[92,116],"subspace.":[93,117],"client":[95],"injects":[96],"decoy":[97],"cues":[99],"subspace,":[103],"limited":[105],"recognition-relevant":[106],"evidence":[107],"from":[108,140,147],"true":[110],"sample":[111],"retained":[113],"in":[114],"On":[118],"server":[120],"side,":[121],"authorized":[123],"canonicalization":[124],"module":[125],"suppresses":[126],"decoy-dominant":[127],"components":[128],"recovers":[130],"recognition-friendly":[132],"representation.":[133],"This":[134],"design":[135],"addresses":[136],"both":[137],"attacker-side":[138],"intercepted":[141],"HBC":[144],"server-side":[145],"canonicalized":[148],"representations.":[149],"Experiments":[150],"show":[151],"DecoyFace":[153],"preserves":[154],"competitive":[155],"accuracy":[157],"substantially":[159],"reducing":[160],"leakage":[162],"2.93%":[164],"under":[165,170],"U-Net":[166],"0.74%":[169],"Flow-Matching":[171],"yielding":[174],"visually":[175],"reconstructions,":[179],"with":[180],"over":[181],"99.78%":[182],"validity":[184],"on":[185],"LFW":[186],"dataset.":[187]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-22T00:00:00"}