Bit-ViP: Leveraging Bit-planes to Preserve Visual Privacy in Images through Obfuscation

• URL: http://arxiv.org/abs/2606.29417v1
• Date: Sun, 28 Jun 2026 14:28:43 GMT
• Title: Bit-ViP: Leveraging Bit-planes to Preserve Visual Privacy in Images through Obfuscation
• Abstract summary: This paper proposes a novel bit-plane-based image obfuscation scheme, em Bit-ViP, to preserve visual privacy for image-based recognition tasks.<n>The Bit-ViP scheme produces secure, usable images by incorporating an innovative end-to-end obfuscation function.
• Score: 8.239190526011933
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: The unprecedented growth of computer vision applications, such as surveillance systems and social media, raises security and visual privacy concerns, especially when data is stored on cloud servers. Image obfuscation offers a way to preserve visual privacy while maintaining an adequate level of usability; thus, it has been a topic of great interest in recent years. However, prior obfuscation schemes are either vulnerable to malicious attacks, such as model inversion to reconstruct original images from obfuscated images, or generate non-trainable obfuscated images, making them unusable for achieving reasonable accuracy. This paper proposes a novel bit-plane-based image obfuscation scheme, {\em Bit-ViP}, to preserve visual privacy for image-based recognition tasks. The Bit-ViP scheme produces secure, usable images by incorporating an innovative end-to-end obfuscation function. While doing so, the obfuscated image would contain non-invertible noise (generated by Lorenz's chaotic system and differential privacy), making it hard for an adversary to reconstruct the original image. We conduct extensive experiments on two popular activity recognition datasets, namely UCF101 and HMDB51, to validate the effectiveness of Bit-ViP. In the face of attacks on reconstruction, pixel frequency, information entropy, and pixel inter-correlation, we present a rigorous security analysis demonstrating tangible improvements over existing schemes.

Related papers

• Enhancing Privacy in Federated Learning via Dual Obfuscation of Gradients and Training Images [1.0874100424278172]
  Federated learning enables collaborative model training while keeping data locally at each client.<n>Recent studies have shown that training data can be reconstructed from shared model updates.<n>This paper proposes a dual obfuscation method that enhances robustness against image restoration attacks.
  arXiv  Detail & Related papers  (2026-08-20T05:36:22Z)
• Privacy-Aware Camera 2.0 Technical Report [48.075034699787004]
  Existing privacy-preserving approaches, including physical desensitization, encryption, and obfuscation, often compromise semantic understanding.<n>This paper proposes a novel privacy-preserving perception framework based on the AI Flow paradigm and a collaborative edge-cloud architecture.
  arXiv  Detail & Related papers  (2026-03-05T03:46:20Z)
• Privacy Blur: Quantifying Privacy and Utility for Image Data Release [48.64095568151945]
  We show that practical implementations of Gaussian blurring are reversible enough to break privacy.<n>We take a closer look at the privacy-utility tradeoffs offered by three other obfuscation algorithms.<n> pixelization and noise addition offer both privacy and utility for a number of computer vision tasks.
  arXiv  Detail & Related papers  (2025-12-18T02:01:17Z)
• Adapter Shield: A Unified Framework with Built-in Authentication for Preventing Unauthorized Zero-Shot Image-to-Image Generation [74.5813283875938]
  Zero-shot image-to-image generation poses substantial risks related to intellectual property violations.<n>This work presents Adapter Shield, the first universal and authentication-integrated solution aimed at defending personal images from misuse.<n>Our method surpasses existing state-of-the-art defenses in blocking unauthorized zero-shot image synthesis.
  arXiv  Detail & Related papers  (2025-11-25T04:49:16Z)
• PixelFade: Privacy-preserving Person Re-identification with Noise-guided Progressive Replacement [41.05432008027312]
  Online person re-identification services privacy breaches from potential data leakage recovery attacks. Previous privacy-preserving person re-identification methods are unable to resist recovery attacks and compromise accuracy. We propose an iterative (PixelFade) method to protect pedestrian images.
  arXiv  Detail & Related papers  (2024-08-10T12:52:54Z)
• PRO-Face S: Privacy-preserving Reversible Obfuscation of Face Images via Secure Flow [69.78820726573935]
  We name it PRO-Face S, short for Privacy-preserving Reversible Obfuscation of Face images via Secure flow-based model. In the framework, an Invertible Neural Network (INN) is utilized to process the input image along with its pre-obfuscated form, and generate the privacy protected image that visually approximates to the pre-obfuscated one.
  arXiv  Detail & Related papers  (2023-07-18T10:55:54Z)
• Human-imperceptible, Machine-recognizable Images [76.01951148048603]
  A major conflict is exposed relating to software engineers between better developing AI systems and distancing from the sensitive training data. This paper proposes an efficient privacy-preserving learning paradigm, where images are encrypted to become human-imperceptible, machine-recognizable'' We show that the proposed paradigm can ensure the encrypted images have become human-imperceptible while preserving machine-recognizable information.
  arXiv  Detail & Related papers  (2023-06-06T13:41:37Z)
• EViT: Privacy-Preserving Image Retrieval via Encrypted Vision Transformer in Cloud Computing [9.41257807502252]
  We propose a novel paradigm named Encrypted Vision Transformer (EViT), which advances the discriminative representations capability of cipher-images. EViT achieves both excellent encryption and retrieval performance, outperforming current schemes in terms of retrieval accuracy by large margins while protecting image privacy effectively.
  arXiv  Detail & Related papers  (2022-08-31T07:07:21Z)
• Image Transformation Network for Privacy-Preserving Deep Neural Networks and Its Security Evaluation [17.134566958534634]
  We propose a transformation network for generating visually-protected images for privacy-preserving DNNs. The proposed network enables us not only to strongly protect visual information but also to maintain the image classification accuracy that using plain images achieves.
  arXiv  Detail & Related papers  (2020-08-07T12:58:45Z)
• InfoScrub: Towards Attribute Privacy by Targeted Obfuscation [77.49428268918703]
  We study techniques that allow individuals to limit the private information leaked in visual data. We tackle this problem in a novel image obfuscation framework. We find our approach generates obfuscated images faithful to the original input images, and additionally increase uncertainty by 6.2$times$ (or up to 0.85 bits) over the non-obfuscated counterparts.
  arXiv  Detail & Related papers  (2020-05-20T19:48:04Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.