Abstract:With the increasing prevalence of cloud computing platforms, ensuring data privacy during the cloud-based image related services such as classification has become crucial. In this study, we propose a novel privacypreserving image classification scheme that enables the direct application of classifiers trained in the plaintext domain to classify encrypted images, without the need of retraining a dedicated classifier. Moreover, encrypted images can be decrypted back into their original form with high fidelity (recoverable) using a secret key. Specifically, our proposed scheme involves utilizing a feature extractor and an encoder to mask the plaintext image through a newly designed Noise-like Adversarial Example (NAE). Such an NAE not only introduces a noise-like visual appearance to the encrypted image but also compels the target classifier to predict the ciphertext as the same label as the original plaintext image. At the decoding phase, we adopt a Symmetric Residual Learning (SRL) framework for restoring the plaintext image with minimal degradation. Extensive experiments demonstrate that 1) the classification accuracy of the classifier trained in the plaintext domain remains the same in both the ciphertext and plaintext domains; 2) the encrypted images can be recovered into their original form with an average PSNR of up to 51+ dB for the SVHN dataset and 48+ dB for the VGGFace2 dataset; 3) our system exhibits satisfactory generalization capability on the encryption, decryption and classification tasks across datasets that are different from the training one; and 4) a high-level of security is achieved against three potential threat models. The code is available at <a class="link-external link-https" href="https://github.com/csjunjun/RIC.git" rel="external noopener nofollow">this https URL</a>.

Using Adversarial Noises to Protect Privacy in Deep Learning Era

Adversarial for Good – Defending Training Data Privacy with Adversarial Attack Wisdom

Protecting Privacy in Shared Photos Via Adversarial Examples Based Stealth

Protecting Multimedia Privacy from Both Humans and AI

Toward Invisible Adversarial Examples Against DNN-Based Privacy Leakage for Internet of Things

A New Noise Generating Method Based on Gaussian Sampling for Privacy Preservation

Exploiting vulnerabilities of deep neural networks for privacy protection

SocialGuard: An adversarial example based privacy-preserving technique for social images

Rethinking Privacy Preserving Deep Learning: How to Evaluate and Thwart Privacy Attacks

Transferable Adversarial Facial Images for Privacy Protection

Recoverable Privacy-Preserving Image Classification through Noise-like Adversarial Examples

Adversarial Attacks and Defenses in Deep Learning: From a Perspective of Cybersecurity

Dual Protection for Image Privacy and Copyright Via Traceable Adversarial Examples

ALRS: An Adversarial Noise Based Privacy-Preserving Data Sharing Mechanism

Privacy Adversarial Network: Representation Learning for Mobile Data Privacy

Masked image: Visually protected image dataset privacy-preserving scheme for convolutional neural networks

Privacy-preserving Universal Adversarial Defense for Black-box Models

Face image de‐identification by feature space adversarial perturbation

Adversarial Robust Safeguard for Evading Deep Facial Manipulation

Towards Privacy Protection by Generating Adversarial Identity Masks

Adversarial Privacy Protection on Speech Enhancement