{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,27]],"date-time":"2026-06-27T15:54:46Z","timestamp":1782575686116,"version":"3.54.5"},"reference-count":44,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Pioneer and Leading Goose R&D Program of Zhejiang","award":["2024SSYS0002"],"award-info":[{"award-number":["2024SSYS0002"]}]},{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2022YFB3103500"],"award-info":[{"award-number":["2022YFB3103500"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472057"],"award-info":[{"award-number":["62472057"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U21A20463"],"award-info":[{"award-number":["U21A20463"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. on Image Process."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tip.2025.3533210","type":"journal-article","created":{"date-parts":[[2025,2,17]],"date-time":"2025-02-17T18:42:14Z","timestamp":1739817734000},"page":"1560-1572","source":"Crossref","is-referenced-by-count":2,"title":["Deep Face Leakage: Inverting High-Quality Faces From Gradients Using Residual Optimization"],"prefix":"10.1109","volume":"34","author":[{"ORCID":"https:\/\/orcid.org\/0009-0004-5608-6955","authenticated-orcid":false,"given":"Xu","family":"Zhang","sequence":"first","affiliation":[{"name":"College of Computer Science, Chongqing University, Chongqing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9439-4623","authenticated-orcid":false,"given":"Tao","family":"Xiang","sequence":"additional","affiliation":[{"name":"College of Computer Science, Chongqing University, Chongqing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6443-5308","authenticated-orcid":false,"given":"Shangwei","family":"Guo","sequence":"additional","affiliation":[{"name":"College of Computer Science, Chongqing University, Chongqing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4802-3191","authenticated-orcid":false,"given":"Fei","family":"Yang","sequence":"additional","affiliation":[{"name":"Zhejiang Laboratory, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6595-6650","authenticated-orcid":false,"given":"Tianwei","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Nanyang Technological University, Jurong West, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2016.2603342"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3087400"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298682"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2022.3229616"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2023.3322593"},{"key":"ref6","article-title":"Progressive growing of GANs for improved quality, stability, and variation","volume-title":"arXiv:1710.10196","author":"Karras","year":"2017"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01258-8_18"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2022.3154238"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/IJCB52358.2021.9484386"},{"key":"ref10","article-title":"Robust and privacy-preserving collaborative learning: A comprehensive survey","author":"Guo","year":"2021","journal-title":"arXiv:2112.10183"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2021.3116976"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2021.3105723"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2023.3234278"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3503161.3548303"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-63076-8_2"},{"key":"ref16","article-title":"IDLG: Improved deep leakage from gradients","volume-title":"arXiv:2001.02610","author":"Zhao","year":"2020"},{"key":"ref17","first-page":"1","article-title":"Inverting gradients\u2014How easy is it to break privacy in federated learning?","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Geiping"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01607"},{"key":"ref19","article-title":"Bayesian framework for gradient leakage","volume-title":"arXiv:2111.04706","author":"Balunovi\u0107","year":"2021"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00989"},{"key":"ref21","first-page":"30599","article-title":"Towards robust blind face restoration with codebook lookup transformer","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Zhou"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01699"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00750"},{"key":"ref24","article-title":"DifFace: Blind face restoration with diffused error contraction","volume-title":"arXiv:2212.06512","author":"Yue","year":"2022"},{"key":"ref25","volume-title":"Labeled faces in the wild: A database for studying face recognition in unconstrained environments","author":"Huang","year":"2007"},{"key":"ref26","first-page":"29898","article-title":"Gradient inversion with generative image prior","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Jeon"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-63076-8_3"},{"key":"ref28","article-title":"R-GAP: Recursive gradient attack on privacy","volume-title":"arXiv:2010.07733","author":"Zhu","year":"2020"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2787987"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2010.579"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00068"},{"key":"ref32","article-title":"A framework for evaluating gradient leakage attacks in federated learning","volume-title":"arXiv:2004.10397","author":"Wei","year":"2020"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00474"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref36","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume-title":"Proc. NIPS","volume":"33","author":"Ho"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref38","first-page":"7232","article-title":"Evaluating gradient inversion attacks and defenses in federated learning","volume-title":"Proc. Annu. Conf. Neural Inf. Process. Syst. (NeurIPS)","author":"Huang"},{"key":"ref39","first-page":"8780","article-title":"Diffusion models beat GANs on image synthesis","volume-title":"Proc. NIPS","volume":"34","author":"Dhariwal"},{"key":"ref40","article-title":"Denoising diffusion implicit models","volume-title":"arXiv:2010.02502","author":"Song","year":"2020"},{"key":"ref41","article-title":"Towards deep learning models resistant to adversarial attacks","volume-title":"arXiv:1706.06083","author":"Madry","year":"2017"},{"key":"ref42","first-page":"1","article-title":"Exploring the landscape of spatial robustness","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Engstrom"},{"key":"ref43","article-title":"Adversarial robustness as a prior for learned representations","volume-title":"arXiv:1906.00945","author":"Engstrom","year":"2019"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3262813"}],"container-title":["IEEE Transactions on Image Processing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/83\/10795784\/10891522.pdf?arnumber=10891522","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,6]],"date-time":"2025-03-06T18:53:31Z","timestamp":1741287211000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10891522\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":44,"URL":"https:\/\/doi.org\/10.1109\/tip.2025.3533210","relation":{},"ISSN":["1057-7149","1941-0042"],"issn-type":[{"value":"1057-7149","type":"print"},{"value":"1941-0042","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}