UM  > Faculty of Science and Technology
Residential Collegefalse
Status已發表Published
Recoverable Privacy-Preserving Image Classification through Noise-like Adversarial Examples
Liu, Jun1; Zhou, Jiantao1; Tian, Jinyu2; Sun, Weiwei3
2024-07
Source PublicationACM Transactions on Multimedia Computing, Communications and Applications
ISSN1551-6857
Volume20Issue:7Pages:216
Abstract

With the increasing prevalence of cloud computing platforms, ensuring data privacy during the cloud-based image-related services such as classification has become crucial. In this study, we propose a novel privacy-preserving image classification scheme that enables the direct application of classifiers trained in the plaintext domain to classify encrypted images without the need of retraining a dedicated classifier. Moreover, encrypted images can be decrypted back into their original form with high fidelity (recoverable) using a secret key. Specifically, our proposed scheme involves utilizing a feature extractor and an encoder to mask the plaintext image through a newly designed Noise-like Adversarial Example (NAE). Such an NAE not only introduces a noise-like visual appearance to the encrypted image but also compels the target classifier to predict the ciphertext as the same label as the original plaintext image. At the decoding phase, we adopt a Symmetric Residual Learning (SRL) framework for restoring the plaintext image with minimal degradation. Extensive experiments demonstrate that (1) the classification accuracy of the classifier trained in the plaintext domain remains the same in both the ciphertext and plaintext domains; (2) the encrypted images can be recovered into their original form with an average PSNR of up to 51+ dB for the SVHN dataset and 48+ dB for the VGGFace2 dataset; (3) our system exhibits satisfactory generalization capability on the encryption, decryption, and classification tasks across datasets that are different from the training one; and (4) a high-level of security is achieved against three potential threat models. The code is available at https://github.com/csjunjun/RIC.git.

KeywordDeep Neural Networks Encryption Image Classification Privacy-preserving
DOI10.1145/3653676
URLView the original
Indexed BySCIE
Language英語English
WOS Research AreaComputer Science
WOS SubjectComputer Science, Information Systems ; Computer Science, Software Engineering ; Computer Science, Theory & Methods
WOS IDWOS:001234494100031
PublisherASSOC COMPUTING MACHINERY, 1601 Broadway, 10th Floor, NEW YORK, NY, UNITED STATES
Scopus ID2-s2.0-85193720161
Fulltext Access
Citation statistics
Document TypeJournal article
CollectionFaculty of Science and Technology
THE STATE KEY LABORATORY OF INTERNET OF THINGS FOR SMART CITY (UNIVERSITY OF MACAU)
DEPARTMENT OF COMPUTER AND INFORMATION SCIENCE
Corresponding AuthorZhou, Jiantao
Affiliation1.State Key Laboratory of Internet of Things for Smart City, Department of Computer and Information Science, Faculty of Science and Technology, University of Macau, University Avenue, Taipa, 999078, Macao
2.School of Computer Science and Engineering, Faculty of Innovation Engineering, Macau University of Science and Technology, Taipa, Weilong Road, 999078, Macao
3.Alibaba Group, Hangzhou, 699 Wangshang Road, Binjiang District Zhejiang Province, 310052, China
First Author AffilicationFaculty of Science and Technology
Corresponding Author AffilicationFaculty of Science and Technology
Recommended Citation
GB/T 7714
Liu, Jun,Zhou, Jiantao,Tian, Jinyu,et al. Recoverable Privacy-Preserving Image Classification through Noise-like Adversarial Examples[J]. ACM Transactions on Multimedia Computing, Communications and Applications, 2024, 20(7), 216.
APA Liu, Jun., Zhou, Jiantao., Tian, Jinyu., & Sun, Weiwei (2024). Recoverable Privacy-Preserving Image Classification through Noise-like Adversarial Examples. ACM Transactions on Multimedia Computing, Communications and Applications, 20(7), 216.
MLA Liu, Jun,et al."Recoverable Privacy-Preserving Image Classification through Noise-like Adversarial Examples".ACM Transactions on Multimedia Computing, Communications and Applications 20.7(2024):216.
Files in This Item:
There are no files associated with this item.
Related Services
Recommend this item
Bookmark
Usage statistics
Export to Endnote
Google Scholar
Similar articles in Google Scholar
[Liu, Jun]'s Articles
[Zhou, Jiantao]'s Articles
[Tian, Jinyu]'s Articles
Baidu academic
Similar articles in Baidu academic
[Liu, Jun]'s Articles
[Zhou, Jiantao]'s Articles
[Tian, Jinyu]'s Articles
Bing Scholar
Similar articles in Bing Scholar
[Liu, Jun]'s Articles
[Zhou, Jiantao]'s Articles
[Tian, Jinyu]'s Articles
Terms of Use
No data!
Social Bookmark/Share
All comments (0)
No comment.
 

Items in the repository are protected by copyright, with all rights reserved, unless otherwise indicated.