arXiv:2606.17606cs.CV2026-06

用扩散模型保护人脸隐私,编辑照片时自动防识别

Flux-Guard: Facial Identity Protection using diffusion models

论文配图:Flux-Guard: Facial Identity Protection using diffusion models
图 1 · 摘自论文原文
  • 将对抗攻击融入生成过程,边修图边隐藏身份
  • 在CelebA-HQ和LADN上提升跨域识别攻击成功率
  • 适合需要安全美颜、社交分享的用户

人脸识别系统广泛部署,导致社交媒体上的个人图像面临身份关联与隐私泄露风险。现有对抗性隐私保护方法虽能降低非法人脸识别性能,但不兼容生成式人脸编辑。随着AI修图工具普及,用户对个性化肖像生成与分享需求激增,但现有方法常保留身份特征,使编辑后图像仍可被恶意人脸识别系统追踪。为此,本文提出Flux-Guard,一种基于对抗攻击的隐私保护人脸编辑框架,将人脸编辑与隐私保护统一于生成流程中。具体地,设计了流轨迹控制方法,使语义操作与生成过程对齐;引入潜在空间对抗优化,并采用感知损失驱动的自适应加权策略,动态调节对抗强度,在最大化攻击效果的同时保持视觉质量。大量实验表明,Flux-Guard在CelebA-HQ和LADN数据集上显著提升对跨域人脸识别模型的攻击成功率。此外,商业API评估结果验证了其在真实场景中的有效性。代码已开源:https://github.com/JLMWang/Flux-Guard。

原文摘要 · Abstract (English)

The widespread deployment of face recognition (FR) systems exposes personal images shared on social media and public platforms to identity linkage and privacy risks. Existing adversarial privacy protection methods can degrade unauthorized FR performance but are not compatible with generative face editing. Artificial intelligence-driven face editing tools are gaining popularity, which has significantly increased user demand for personalized portrait generation and social sharing. However, current editing methods often preserve identity features, making the edited images still susceptible to tracking by malicious FR systems. Thus, this paper proposes Flux-Guard, a privacy-preserving face editing framework based on adversarial attacks, which integrates face editing and privacy protection within a unified generative process. Specifically, we design a flow trajectory control method to align semantic manipulations with the generative process and introduce latent-space adversarial optimization with an adaptive perceptual-loss-driven weighting strategy, dynamically adjusting adversarial strength to maximize attack effectiveness while preserving visual quality. Extensive experiments demonstrate that Flux-Guard supports face editing while significantly improving attack success rates against cross-domain face recognition models on the CelebA-HQ and LADN datasets. Furthermore, evaluation results for commercial APIs have confirmed its effectiveness in real-world applications. The code is released at https://github.com/JLMWang/Flux-Guard.

人脸隐私扩散模型对抗攻击图像编辑

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。