arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2401.00151cs.CVcs.CR
收藏

CamPro:基于摄像头的反面部识别

CamPro: Camera-based Anti-Facial Recognition

Zhejiang University(浙江大学)

Wenjun Zhu, Yuan Sun, Jiani Liu, Yushi Cheng, Xiaoyu Ji, Wenyuan Xu

AI总结:

本文提出CamPro方法,通过调整摄像头图像信号处理器配置和设计图像增强器,生成不含敏感个人信息但保留非敏感视觉应用所需功能的图像,将面部识别准确率降至0.3%并抵御自适应攻击。

摘要:

数百万摄像头捕获的图像激增以及面部识别(FR)技术的进步,使得FR的滥用成为严重的隐私威胁。现有工作通常依赖混淆、合成或对抗样本修改图像中的面部来实现反面部识别(AFR)。然而,摄像头模块捕获的未修改图像仍可能泄露,其中包含敏感的个人身份信息(PII)。本文提出一种新方法CamPro,用于捕获天然AFR图像。CamPro使封装良好的商用摄像头模块能够生成几乎不含PII但仍保留足够信息以支持其他非敏感视觉应用(如行人检测)的图像。具体而言,CamPro调整摄像头图像信号处理器(ISP)内部的配置设置,即色彩校正矩阵和伽马校正,以实现AFR,并设计图像增强器以保持人类观看者的图像质量。我们在概念验证摄像头上实现并验证了CamPro,实验证明其在十个最先进的黑盒FR模型上有效。结果表明,CamPro图像可将面部识别准确率显著降至0.3%,同时对目标非敏感视觉应用影响甚微。此外,我们发现CamPro对自适应攻击者具有弹性,即使这些攻击者利用CamPro生成的图像重新训练FR模型,并完全掌握隐私保护ISP参数。

英文摘要:

The proliferation of images captured from millions of cameras and the advancement of facial recognition (FR) technology have made the abuse of FR a severe privacy threat. Existing works typically rely on obfuscation, synthesis, or adversarial examples to modify faces in images to achieve anti-facial recognition (AFR). However, the unmodified images captured by camera modules that contain sensitive personally identifiable information (PII) could still be leaked. In this paper, we propose a novel approach, CamPro, to capture inborn AFR images. CamPro enables well-packed commodity camera modules to produce images that contain little PII and yet still contain enough information to support other non-sensitive vision applications, such as person detection. Specifically, CamPro tunes the configuration setup inside the camera image signal processor (ISP), i.e., color correction matrix and gamma correction, to achieve AFR, and designs an image enhancer to keep the image quality for possible human viewers. We implemented and validated CamPro on a proof-of-concept camera, and our experiments demonstrate its effectiveness on ten state-of-the-art black-box FR models. The results show that CamPro images can significantly reduce face identification accuracy to 0.3\% while having little impact on the targeted non-sensitive vision application. Furthermore, we find that CamPro is resilient to adaptive attackers who have re-trained their FR models using images generated by CamPro, even with full knowledge of privacy-preserving ISP parameters.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑