{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,16]],"date-time":"2026-04-16T22:50:04Z","timestamp":1776379804208,"version":"3.51.2"},"reference-count":74,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,5]]},"DOI":"10.1109\/sp46215.2023.10179310","type":"proceedings-article","created":{"date-parts":[[2023,7,21]],"date-time":"2023-07-21T17:18:15Z","timestamp":1689959895000},"page":"234-252","source":"Crossref","is-referenced-by-count":6,"title":["Deep perceptual hashing algorithms with hidden dual purpose: when client-side scanning does facial recognition"],"prefix":"10.1109","author":[{"given":"Shubham","family":"Jain","sequence":"first","affiliation":[{"name":"Imperial College London"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ana-Maria","family":"Cre\u0163u","sequence":"additional","affiliation":[{"name":"Imperial College London"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Antoine","family":"Cully","sequence":"additional","affiliation":[{"name":"Imperial College London"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yves-Alexandre","family":"de Montjoye","sequence":"additional","affiliation":[{"name":"Imperial College London"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"About end-to-end encryption"},{"key":"ref2","article-title":"Bumble releases open-source version of private detector a.i. feature to help tech platforms combat cyberflashing"},{"key":"ref3","article-title":"Certain activities relating to material involving the sexual exploitation of minors"},{"key":"ref4","volume-title":"Csam detection - technical summary 2021"},{"key":"ref5","volume-title":"Cybertipline data"},{"key":"ref6","volume-title":"icloud security overview"},{"key":"ref7","volume-title":"Securing privacy: Pi on end-to-end encryption \u2014 privacy international"},{"key":"ref8","volume-title":"Signal messenger"},{"key":"ref9","volume-title":"Ten most wanted fugitives \u2014 fbi"},{"key":"ref10","volume-title":"Photodna \u2014 microsoft","year":"2009"},{"key":"ref11","volume-title":"How the nsa (may have) put a backdoor in rsa\u2019s cryptography","year":"2014"},{"key":"ref12","volume-title":"Crypto wars","year":"2022"},{"key":"ref13","article-title":"Overview of perceptual hashing technology","year":"2022"},{"key":"ref14","volume-title":"Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL laying down rules to prevent and combat child sexual abuse","year":"2022"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1093\/cybsec\/tyad020"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/T-C.1974.223784"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10590-1_38"},{"key":"ref18","author":"Biswas","year":"2021","journal-title":"State of the art: Image hashing"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2076732.2076777"},{"key":"ref20","article-title":"Connecting one billion users every day","author":"blog","year":"2017"},{"key":"ref21","article-title":"Two billion users \u2013 connecting the world privately","author":"Blog","year":"2020"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/FG.2018.00020"},{"key":"ref23","first-page":"1597","article-title":"A simple framework for contrastive learning of visual representations","volume-title":"International conference on machine learning","author":"Chen"},{"key":"ref24","author":"Chen","year":"2017","journal-title":"Targeted backdoor attacks on deep learning systems using data poisoning"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00525"},{"key":"ref26","author":"Dolhansky","year":"2020","journal-title":"Adversarial collision attacks on image hashing functions"},{"key":"ref27","author":"Douze","year":"2021","journal-title":"The 2021 image similarity dataset and challenge"},{"key":"ref28","article-title":"Draft online safety bill"},{"issue":"6","key":"ref29","first-page":"518","article-title":"Similarity search in high dimensions via hashing","volume":"99","author":"Gionis","year":"1999","journal-title":"Vldb"},{"key":"ref30","first-page":"249","article-title":"Understanding the difficulty of training deep feedforward neural networks","volume-title":"Proceedings of the thirteenth international conference on artificial intelligence and statistics. JMLR Workshop and Conference Proceedings","author":"Glorot"},{"key":"ref31","author":"Guo","year":"2021","journal-title":"Sample and computation redistribution for efficient face detection"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484559"},{"key":"ref33","volume-title":"Face recognition on 330 million images at 400 images per second","author":"Iglovikov","year":"2020"},{"key":"ref34","first-page":"2317","article-title":"Adversarial detection avoidance attacks: Evaluating the robustness of perceptual hashing-based client-side scanning","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Jain"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2019.2921572"},{"key":"ref36","article-title":"The TMK+PDQF video-hashing algorithim and the PDQ image hashing algorithm","author":"Kerl","year":"2020"},{"key":"ref37","article-title":"Novel dataset for fine-grained image categorization: Stanford dogs","volume-title":"Proc. CVPR workshop on fine-grained visual categorization (FGVC)","volume":"2","author":"Khosla"},{"key":"ref38","first-page":"893","article-title":"Identifying harmful media in {End-to-End} encrypted communication: Efficient private membership computation","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Kulshrestha"},{"key":"ref39","article-title":"Principles for a more informed exceptional access debate","author":"Levy","year":"2018"},{"key":"ref40","author":"Levy","year":"2022","journal-title":"Thoughts on child safety on commodity platforms"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3182979"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58607-2_11"},{"key":"ref43","author":"Musgrave","year":"2020","journal-title":"Pytorch metric learning"},{"key":"ref44","article-title":"Ncmec\u2019s statement regarding end-to-end encryption","year":"2019"},{"key":"ref45","volume-title":"Interim code of practice on online child sexual exploitation and abuse (accessible version)","year":"2020"},{"key":"ref46","author":"Papadakis","year":"2021","journal-title":"Producing augmentation-invariant embeddings from real-life imagery"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/cvprw56347.2022.00027"},{"key":"ref48","first-page":"1","article-title":"Results and findings of the 2021 image similarity challenge","volume-title":"NeurIPS 2021 Competitions and Demonstrations Track.","author":"Papakipos","year":"2022"},{"key":"ref49","article-title":"Pytorch: An imperative style, high-performance deep learning library","volume":"32","author":"Paszke","year":"2019","journal-title":"Advances in neural information processing systems"},{"key":"ref50","article-title":"International statement: End-to-end encryption and public safety","author":"Patel","year":"2020"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01413"},{"key":"ref52","author":"Prokos","journal-title":"Squint hard enough: Attacking perceptual hashing with adversarial machine learning"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2846566"},{"key":"ref54","author":"Ridnik","year":"2021","journal-title":"Imagenet-21k pretraining for the masses"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"ref57","first-page":"9389","article-title":"Just how toxic is data poisoning? a unified benchmark for backdoor and data poisoning attacks","volume-title":"International Conference on Machine Learning","author":"Schwarzschild"},{"key":"ref58","article-title":"Poison frogs! targeted clean-label poisoning attacks on neural networks","volume":"31","author":"Shafahi","year":"2018","journal-title":"Advances in neural information processing systems"},{"key":"ref59","volume-title":"Whatsapp is now delivering roughly 100 billion messages a day","author":"Singh","year":"2020"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3531146.3533073"},{"key":"ref61","first-page":"10 096","article-title":"Efficientnetv2: Smaller models and faster training","volume-title":"International Conference on Machine Learning","author":"Tan"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2006.03.013"},{"key":"ref63","author":"Tolias","year":"2015","journal-title":"Particular object retrieval with integral max-pooling of cnn activations"},{"key":"ref64","author":"Wang","year":"2021","journal-title":"Bag of tricks and a strong baseline for image copy detection"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00642"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref67","article-title":"Pytorch image models","author":"Wightman","year":"2019"},{"key":"ref68","author":"Wong","year":"2022","journal-title":"Blogpost: Deep perceptual hashing is not robust to adversarial detection avoidance attacks"},{"key":"ref69","first-page":"25 313","article-title":"A study of face obfuscation in imagenet","volume-title":"International Conference on Machine Learning","author":"Yang"},{"key":"ref70","author":"Yokoo","year":"2021","journal-title":"Contrastive learning with large memory bank and negative embedding subtraction for accurate copy detection"},{"key":"ref71","article-title":"Implementation and benchmarking of perceptual image hash functions","volume-title":"Master\u2019s thesis","author":"Zauner","year":"2010"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/IWBF49977.2020.9107950"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.7000"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01035"}],"event":{"name":"2023 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2023,5,21]]},"end":{"date-parts":[[2023,5,25]]}},"container-title":["2023 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10179215\/10179280\/10179310.pdf?arnumber=10179310","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,7,20]],"date-time":"2024-07-20T05:18:38Z","timestamp":1721452718000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10179310\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5]]},"references-count":74,"URL":"https:\/\/doi.org\/10.1109\/sp46215.2023.10179310","relation":{},"subject":[],"published":{"date-parts":[[2023,5]]}}}