Search papers, labs, and topics across Lattice.
This paper introduces Flux-Guard, a novel framework that combines face editing with privacy protection by leveraging adversarial attacks to thwart face recognition systems. By implementing a flow trajectory control method and latent-space adversarial optimization, Flux-Guard effectively enhances the success rates of privacy attacks while maintaining high visual quality in edited images. Experimental results on CelebA-HQ and LADN datasets, as well as evaluations with commercial APIs, demonstrate its efficacy in real-world scenarios, addressing the pressing issue of identity linkage in social media sharing.
Flux-Guard achieves a breakthrough by enabling effective face editing that simultaneously thwarts face recognition systems without compromising image quality.
The widespread deployment of face recognition (FR) systems exposes personal images shared on social media and public platforms to identity linkage and privacy risks. Existing adversarial privacy protection methods can degrade unauthorized FR performance but are not compatible with generative face editing. Artificial intelligence-driven face editing tools are gaining popularity, which has significantly increased user demand for personalized portrait generation and social sharing. However, current editing methods often preserve identity features, making the edited images still susceptible to tracking by malicious FR systems. Thus, this paper proposes Flux-Guard, a privacy-preserving face editing framework based on adversarial attacks, which integrates face editing and privacy protection within a unified generative process. Specifically, we design a flow trajectory control method to align semantic manipulations with the generative process and introduce latent-space adversarial optimization with an adaptive perceptual-loss-driven weighting strategy, dynamically adjusting adversarial strength to maximize attack effectiveness while preserving visual quality. Extensive experiments demonstrate that Flux-Guard supports face editing while significantly improving attack success rates against cross-domain face recognition models on the CelebA-HQ and LADN datasets. Furthermore, evaluation results for commercial APIs have confirmed its effectiveness in real-world applications. The code is released at https://github.com/JLMWang/Flux-Guard.
