arXiv:2607.02038cs.CV2026-07

用美学降级保护人脸隐私,对抗定制化生成模型

Hierarchical Anti-Aesthetics: Protecting Facial Privacy against Customized Diffusion Models

论文配图:Hierarchical Anti-Aesthetics: Protecting Facial Privacy against Customized Diffusion Models
图 1 · 摘自论文原文
  • 从全局与局部两个层面降低图像美学质量,干扰生成内容
  • 有效减少恶意模型中的人脸身份泄露,隐私保护效果更优
  • 适合关注生成模型安全与隐私保护的研究者和开发者

定制化扩散模型的兴起推动了个性化视觉内容创作的发展,但也带来了恶意滥用的风险,威胁个人隐私。图像美学与人类对图像质量的感知密切相关。受此启发,本文提出一种新颖的美学视角来保护人脸隐私:通过降低恶意定制模型的生成质量,减少人脸身份泄露。我们设计了分层反美学(HAA)框架,利用多层次感知的美学线索实现反美学干扰。HAA包含两个关键分支:(1) 全局反美学,通过构建全局反美学奖励机制和对应损失函数,降低整体图像质量和美学表现;(2) 局部反美学,通过局部反美学奖励机制与损失函数,引导对抗扰动聚焦于人脸区域,破坏身份特征。二者结合实现了从全局到局部的连续反美学退化。大量实验表明,HAA在身份移除方面优于现有方法,为面部隐私保护提供了有效工具。

原文摘要 · Abstract (English)

The rise of customized diffusion models has fueled a boom in personalized visual content creation, but it also introduces serious risks of malicious misuse, thereby posing threats to personal privacy. Image aesthetics are strongly correlated with human perception of image quality. Motivated by this observation, we address facial privacy protection from a novel aesthetic perspective by degrading the generation quality of maliciously customized models, thus reducing facial identity leakage. Specifically, we propose a Hierarchical Anti-Aesthetics (HAA) framework that exploits aesthetic cues at multiple perceptual levels. HAA consists of two key branches: (1) Global Anti-Aesthetics, which degrades overall aesthetics and generation quality by constructing a global anti-aesthetic reward mechanism and a corresponding loss; and (2) Local Anti-Aesthetics, which disrupts facial identity by using a local anti-aesthetic reward mechanism and loss to guide adversarial perturbations toward facial regions. By integrating both branches, HAA achieves anti-aesthetic degradation from a global to a local level during customized generation. Extensive experiments show that HAA outperforms existing methods in identity removal, providing an effective tool for protecting facial privacy.

隐私保护扩散模型反美学人脸安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。