تقرير
LDP-Feat: Image Features with Local Differential Privacy
| العنوان: | LDP-Feat: Image Features with Local Differential Privacy |
|---|---|
| المؤلفون: | Pittaluga, Francesco, Zhuang, Bingbing |
| سنة النشر: | 2023 |
| المجموعة: | Computer Science |
| مصطلحات موضوعية: | Computer Science - Computer Vision and Pattern Recognition, Computer Science - Cryptography and Security |
| الوصف: | Modern computer vision services often require users to share raw feature descriptors with an untrusted server. This presents an inherent privacy risk, as raw descriptors may be used to recover the source images from which they were extracted. To address this issue, researchers recently proposed privatizing image features by embedding them within an affine subspace containing the original feature as well as adversarial feature samples. In this paper, we propose two novel inversion attacks to show that it is possible to (approximately) recover the original image features from these embeddings, allowing us to recover privacy-critical image content. In light of such successes and the lack of theoretical privacy guarantees afforded by existing visual privacy methods, we further propose the first method to privatize image features via local differential privacy, which, unlike prior approaches, provides a guaranteed bound for privacy leakage regardless of the strength of the attacks. In addition, our method yields strong performance in visual localization as a downstream task while enjoying the privacy guarantee. Comment: 11 pages, 4 figures, to be published in International Conference on Computer Vision (ICCV) 2023 |
| نوع الوثيقة: | Working Paper |
| URL الوصول: | http://arxiv.org/abs/2308.11223 |
| رقم الأكسشن: | edsarx.2308.11223 |
| قاعدة البيانات: | arXiv |
| الوصف غير متاح. |