针对视频背景泄露位置隐私,提出动态噪声扰动框架
PPEDCRF: Dynamic-CRF-Guided Selective Perturbation for Background-Based Location Privacy in Video Sequences

- 用动态随机场定位敏感区域,只在这些区域加噪声
- 在σ₀=8时将检索准确率从0.667降到0.361±0.127
- 相比全局加噪,在相同噪声强度下保持更高画质
我们提出PPEDCRF,一种校准的定向扰动框架,用于保护发布视频帧中基于背景的位置隐私,抵御基于图库的检索攻击。即使移除GPS元数据,攻击者仍可通过匹配背景视觉特征与带地理标签的参考图像来定位视频帧。PPEDCRF通过动态条件随机场(DCRF)估计位置敏感的背景区域,利用归一化控制惩罚(NCP)调整扰动强度,并依据差分隐私(DP)校准规则仅在推断区域内注入高斯噪声。在包含八种攻击模型和三种噪声种子的受控成对场景检索基准上,当σ₀=8时,将ResNet18的Top-1检索准确率从0.667降至0.361±0.127,同时保持36.14 dB PSNR——相较全局高斯噪声有约6 dB的质量优势。跨八种骨干网络的平均测试显示,23/24个组合呈现负向差异(Δ),仅MixVPR为例外。在等效保真度下,两者隐私性能趋同,因此实际优势在于空间聚焦扰动可实现更高画质而非更强隐私。
原文摘要 · Abstract (English)
We propose PPEDCRF, a calibrated selective perturbation framework that protects \emph{background-based location privacy} in released video frames against gallery-based retrieval attackers. Even after GPS metadata are stripped, an adversary can geolocate a frame by matching its background visual cues to geo-tagged reference imagery; PPEDCRF mitigates this threat by estimating location-sensitive background regions with a dynamic conditional random field (DCRF), rescaling perturbation strength with a normalized control penalty (NCP), and injecting Gaussian noise only inside the inferred regions via a DP-style calibration rule. On a controlled paired-scene retrieval benchmark with eight attacker backbones and three noise seeds, PPEDCRF reduces ResNet18 Top-1 retrieval accuracy from 0.667 to $0.361\pm0.127$ at $σ_0=8$ while preserving $36.14\,$dB PSNR -- an ${\approx}6\,$dB quality advantage over global Gaussian noise. Transfer across the eight-backbone seed-averaged benchmark is broadly supportive (23 of 24 backbone-gallery cells show negative $Δ$), while appendix-scale confirmation identifies MixVPR as a remaining adverse-transfer exception. Matched-operating-point analysis shows that PPEDCRF and global Gaussian noise converge in Top-1 privacy at equal utility, so the practical benefit is spatially concentrated perturbation that preserves higher visual quality at any given noise scale rather than stronger matched-utility privacy. Code: https://github.com/mabo1215/PPEDCRF
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。