将图像像素转为二进制位平面,实现高保真隐私保护图像生成
LDP-Slicing: Local Differential Privacy for Images via Randomized Bit-Plane Slicing
- 将像素分解为二进制位平面,适配局部差分隐私机制
- 在相同隐私预算下,人脸识别与分类任务准确率显著优于现有方法
- 无需训练、计算开销小,适合实际部署的隐私保护图像处理
局部差分隐私(LDP)是机器学习中保障数据源隐私的黄金标准,但其在高维图像数据上的应用长期被认为不切实际,因传统低维数据设计的机制在像素空间中导致严重效用下降。本文指出,这种效用损失并非源于LDP本身,而是由不恰当的数据表示引起。我们提出LDP-Slicing:一种轻量级、无需训练的框架,通过将像素值分解为二进制位平面,使LDP机制可直接作用于位级表示。为进一步增强隐私并保留效用,引入感知混淆模块以减少人眼可察觉的信息泄露,并采用基于优化的隐私预算分配策略。该流程在像素级满足严格的ε-LDP,同时生成的图像在下游任务中保持高可用性。在人脸验证与图像分类任务上的大量实验表明,相比现有差分隐私/局部差分隐私基线,在相近隐私预算下性能显著提升,且计算开销极低。
原文摘要 · Abstract (English)
Local Differential Privacy (LDP) is the gold standard trust model for privacy-preserving machine learning by guaranteeing privacy at the data source. However, its application to image data has long been considered impractical due to the high dimensionality of pixel space. Canonical LDP mechanisms are designed for low-dimensional data, resulting in severe utility degradation when applied to high-dimensional pixel spaces. This paper demonstrates that this utility loss is not inherent to LDP, but from its application to an inappropriate data representation. We introduce LDP-Slicing, a lightweight, training-free framework that resolves this domain mismatch. Our key insight is to decompose pixel values into a sequence of binary bit-planes. This transformation allows us to apply the LDP mechanism directly to the bit-level representation. To further strengthen privacy and preserve utility, we integrate a perceptual obfuscation module that mitigates human-perceivable leakage and an optimization-based privacy budget allocation strategy. This pipeline satisfies rigorous pixel-level $\varepsilon$-LDP while producing images that retain high utility for downstream tasks. Extensive experiments on face recognition and image classification demonstrate that LDP-Slicing outperforms existing DP/LDP baselines under comparable privacy budgets, with negligible computational overhead.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。