{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T02:00:26Z","timestamp":1760148026027,"version":"build-2065373602"},"reference-count":29,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2023,3,25]],"date-time":"2023-03-25T00:00:00Z","timestamp":1679702400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Entropy"],"abstract":"<jats:p>The database of faces containing sensitive information is at risk of being targeted by unauthorized automatic recognition systems, which is a significant concern for privacy. Although there are existing methods that aim to conceal identifiable information by adding adversarial perturbations to faces, they suffer from noticeable distortions that significantly compromise visual perception, and therefore, offer limited protection to privacy. Furthermore, the increasing prevalence of appearance anxiety on social media has led to users preferring to beautify their faces before uploading images. In this paper, we design a novel face database protection scheme via beautification with chaotic systems. Specifically, we construct the adversarial face with better visual perception via beautification for each face in the database. In the training, the face matcher and the beautification discriminator are federated against the generator, prompting it to generate beauty-like perturbations on the face to confuse the face matcher. Namely, the pixel changes produced by face beautification mask the adversarial perturbations. Moreover, we use chaotic systems to disrupt the order of adversarial faces in the database, further mitigating the risk of privacy leakage. Our scheme has been extensively evaluated through experiments, which show that it effectively defends against unauthorized attacks while also yielding good visual results.<\/jats:p>","DOI":"10.3390\/e25040566","type":"journal-article","created":{"date-parts":[[2023,3,27]],"date-time":"2023-03-27T03:31:48Z","timestamp":1679887908000},"page":"566","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Face Database Protection via Beautification with Chaotic Systems"],"prefix":"10.3390","volume":"25","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5532-3999","authenticated-orcid":false,"given":"Tao","family":"Wang","sequence":"first","affiliation":[{"name":"College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing 211106, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yushu","family":"Zhang","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing 211106, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ruoyu","family":"Zhao","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing 211106, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2023,3,25]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Hukkel\u00e5s, H., Mester, R., and Lindseth, F. (2019, January 7\u20139). Deepprivacy: A generative adversarial network for face anonymization. Proceedings of the Advances in Visual Computing: 14th International Symposium on Visual Computing, Lake Tahoe, CA, USA.","DOI":"10.1007\/978-3-030-33720-9_44"},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Yuan, Z., You, Z., Li, S., Qian, Z., Zhang, X., and Kot, A. (2022, January 10\u201312). On Generating Identifiable Virtual Faces. Proceedings of the 30th ACM International Conference on Multimedia, Lisbon, Portugal.","DOI":"10.1145\/3503161.3548110"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Sun, Q., Tewari, A., Xu, W., Fritz, M., Theobalt, C., and Schiele, B. (2018, January 8\u201314). A hybrid model for identity obfuscation by face replacement. Proceedings of the European Conference on Computer Vision, Munich, Germany.","DOI":"10.1007\/978-3-030-01246-5_34"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Chen, J.W., Chen, L.J., Yu, C.M., and Lu, C.S. (2021, January 19\u201325). Perceptual indistinguishability-net (pi-net): Facial image obfuscation with manipulable semantics. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Online.","DOI":"10.1109\/CVPR46437.2021.00641"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Maximov, M., Elezi, I., and Leal-Taix\u00e9, L. (2020, January 14\u201319). Ciagan: Conditional identity anonymization generative adversarial networks. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Seattle, WA, USA.","DOI":"10.1109\/CVPR42600.2020.00549"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Cao, J., Liu, B., Wen, Y., Xie, R., and Song, L. (2021, January 11\u201317). Personalized and invertible face de-identification by disentangled identity information manipulation. Proceedings of the IEEE\/CVF International Conference on Computer Vision, Montreal, BC, Canada.","DOI":"10.1109\/ICCV48922.2021.00332"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Yang, X., Dong, Y., Pang, T., Su, H., Zhu, J., Chen, Y., and Xue, H. (2021, January 10\u201311). Towards face encryption by generating adversarial identity masks. Proceedings of the IEEE\/CVF International Conference on Computer Vision, Montreal, BC, Canada.","DOI":"10.1109\/ICCV48922.2021.00387"},{"key":"ref_8","first-page":"3590","article-title":"OPOM: Customized Invisible Cloak towards Face Privacy Protection","volume":"3","author":"Zhong","year":"2022","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Zhang, J., Sang, J., Zhao, X., Huang, X., Sun, Y., and Hu, Y. (2020, January 1\u201312). Adversarial privacy-preserving filter. Proceedings of the 28th ACM International Conference on Multimedia, New York, NY, USA.","DOI":"10.1145\/3394171.3413906"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"1452","DOI":"10.1109\/TIFS.2020.3036801","article-title":"Towards transferable adversarial attack against deep face recognition","volume":"16","author":"Zhong","year":"2020","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Deb, D., Zhang, J., and Jain, A.K. (October, January 28). Advfaces: Adversarial face synthesis. Proceedings of the 2020 IEEE International Joint Conference on Biometrics, Online.","DOI":"10.1109\/IJCB48548.2020.9304898"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Hu, S., Liu, X., Zhang, Y., Li, M., Zhang, L.Y., Jin, H., and Wu, L. (2022, January 18\u201324). Protecting facial privacy: Generating adversarial identity masks via style-robust makeup transfer. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, New Orleans, LA, USA.","DOI":"10.1109\/CVPR52688.2022.01459"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Li, J., Xiong, C., Liu, L., Shu, X., and Yan, S. (2015, January 26\u201330). Deep face beautification. Proceedings of the 23rd ACM International Conference on Multimedia, Brisbane, Australia.","DOI":"10.1145\/2733373.2807966"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Diamant, N., Zadok, D., Baskin, C., Schwartz, E., and Bronstein, A.M. (2019, January 22\u201325). Beholder-gan: Generation and beautification of facial images with conditioning on their beauty level. Proceedings of the 2019 IEEE International Conference on Image Processing, Taipei, Taiwan.","DOI":"10.1109\/ICIP.2019.8803807"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"114067","DOI":"10.1016\/j.eswa.2020.114067","article-title":"Facial reshaping operator for controllable face beautification","volume":"167","author":"Hu","year":"2021","journal-title":"Expert Syst. Appl."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"139","DOI":"10.1145\/3422622","article-title":"Generative adversarial networks","volume":"63","author":"Goodfellow","year":"2020","journal-title":"Commun. ACM"},{"key":"ref_17","unstructured":"Gulrajani, I., Ahmed, F., Arjovsky, M., Dumoulin, V., and Courville, A.C. (2017, January 4\u20139). Improved training of wasserstein gans. Proceedings of the Systems 30: Annual Conference on Neural Information Processing Systems 2017, Long Beach, CA, USA."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Schroff, F., Kalenichenko, D., and Philbin, J. (2015, January 7\u201312). Facenet: A unified embedding for face recognition and clustering. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Boston, MA, USA.","DOI":"10.1109\/CVPR.2015.7298682"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Wang, H., Wang, Y., Zhou, Z., Ji, X., Gong, D., Zhou, J., Li, Z., and Liu, W. (2018, January 19\u201321). Cosface: Large margin cosine loss for deep face recognition. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Salt Lake City, UT, USA.","DOI":"10.1109\/CVPR.2018.00552"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Vaidyanathan, S., and Volos, C. (2016). Advances and Applications in Chaotic Systems, Springer.","DOI":"10.1007\/978-3-319-30279-9"},{"key":"ref_21","unstructured":"Larsen, A.B.L., S\u00f8nderby, S.K., Larochelle, H., and Winther, O. (2016, January 19\u201324). Autoencoding beyond pixels using a learned similarity metric. Proceedings of the International Conference on Machine Learning, New York, NY, USA."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Ronneberger, O., Fischer, P., and Brox, T. (2015, January 5\u20139). U-net: Convolutional networks for biomedical image segmentation. Proceedings of the Medical Image Computing and Computer-Assisted Intervention\u2013MICCAI 2015: 18th International Conference, Munich, Germany.","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Isola, P., Zhu, J.Y., Zhou, T., and Efros, A.A. (2017, January 21\u201326). Image-to-image translation with conditional adversarial networks. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Honululu, HI, USA.","DOI":"10.1109\/CVPR.2017.632"},{"key":"ref_24","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., and Vladu, A. (2017). Towards deep learning models resistant to adversarial attacks. arXiv."},{"key":"ref_25","unstructured":"Goodfellow, I.J., Shlens, J., and Szegedy, C. (2014). Explaining and harnessing adversarial examples. arXiv."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Poursaeed, O., Katsman, I., Gao, B., and Belongie, S. (2018, January 19\u201321). Generative adversarial perturbations. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Salt Lake City, UT, USA.","DOI":"10.1109\/CVPR.2018.00465"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Deng, J., Guo, J., Xue, N., and Zafeiriou, S. (2019, January 16\u201320). Arcface: Additive angular margin loss for deep face recognition. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Long Beach, CA, USA.","DOI":"10.1109\/CVPR.2019.00482"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Hu, J., Shen, L., and Sun, G. (2018, January 19\u201321). Squeeze-and-excitation networks. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Salt Lake City, UT, USA.","DOI":"10.1109\/CVPR.2018.00745"},{"key":"ref_29","unstructured":"Howard, A.G., Zhu, M., Chen, B., Kalenichenko, D., Wang, W., Weyand, T., Andreetto, M., and Adam, H. (2017). Mobilenets: Efficient convolutional neural networks for mobile vision applications. arXiv."}],"container-title":["Entropy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1099-4300\/25\/4\/566\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T19:03:07Z","timestamp":1760122987000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1099-4300\/25\/4\/566"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,25]]},"references-count":29,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2023,4]]}},"alternative-id":["e25040566"],"URL":"https:\/\/doi.org\/10.3390\/e25040566","relation":{},"ISSN":["1099-4300"],"issn-type":[{"type":"electronic","value":"1099-4300"}],"subject":[],"published":{"date-parts":[[2023,3,25]]}}}