{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/edit-away-and-my-face-will-not-stay-personal","title":"Edit Away and My Face Will not Stay: Personal Biometric Defense against Malicious Generative Editing","arxiv_id":"2411.16832","date":"2024-11-25","proceeding":"CVPR 2025 1","authors":["Hanhui Wang","Yihua Zhang","Ruizheng Bai","Yue Zhao","Sijia Liu","Zhengzhong Tu"],"abstract":"Recent advancements in diffusion models have made generative image editing more accessible, enabling creative edits but raising ethical concerns, particularly regarding malicious edits to human portraits that threaten privacy and identity security. Existing protection methods primarily rely on adversarial perturbations to nullify edits but often fail against diverse editing requests. We propose FaceLock, a novel approach to portrait protection that optimizes adversarial perturbations to destroy or significantly alter biometric information, rendering edited outputs biometrically unrecognizable. FaceLock integrates facial recognition and visual perception into perturbation optimization to provide robust protection against various editing attempts. We also highlight flaws in commonly used evaluation metrics and reveal how they can be manipulated, emphasizing the need for reliable assessments of protection. Experiments show FaceLock outperforms baselines in defending against malicious edits and is robust against purification techniques. Ablation studies confirm its stability and broad applicability across diffusion-based editing algorithms. Our work advances biometric defense and sets the foundation for privacy-preserving practices in image editing. The code is available at: https://github.com/taco-group/FaceLock.","url_abs":"https://arxiv.org/abs/2411.16832v1","url_pdf":"https://arxiv.org/pdf/2411.16832v1.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"edit-away-and-my-face-will-not-stay-personal","repo_url":"https://github.com/taco-group/facelock","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok"}}],"tasks":[{"task_slug":"privacy-preserving","task_name":"Privacy Preserving"}],"methods":[{"method_slug":"diffusion","method_name":"Diffusion"}],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2411.16832","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2411.16832"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/taco-group/facelock","reach":{"status":"ok"}}],"summary":{"unverified":6},"by_repo_kind":{"official":{"samples":6,"ran":0,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":6,"samples":[{"code_sha256_prefix":"95c00f8b82ca8e3a","entry":"cw_l2_attack","repo":"taco-group/facelock","repo_kind":"official","path":"methods.py","file_url":"https://github.com/taco-group/facelock/blob/HEAD/methods.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"95c00f8b82ca8e3a"}},{"code_sha256_prefix":"84a9298cc6426358","entry":"encoder_attack","repo":"taco-group/facelock","repo_kind":"official","path":"methods.py","file_url":"https://github.com/taco-group/facelock/blob/HEAD/methods.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"84a9298cc6426358"}},{"code_sha256_prefix":"b4bd1edde7ae8fea","entry":"load_model_by_repo_id","repo":"taco-group/facelock","repo_kind":"official","path":"utils.py","file_url":"https://github.com/taco-group/facelock/blob/HEAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"b4bd1edde7ae8fea"}},{"code_sha256_prefix":"f752fa362ee902ed","entry":"load_model_from_local_path","repo":"taco-group/facelock","repo_kind":"official","path":"utils.py","file_url":"https://github.com/taco-group/facelock/blob/HEAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"f752fa362ee902ed"}},{"code_sha256_prefix":"7ddca31a9bed65b3","entry":"pil_to_input","repo":"taco-group/facelock","repo_kind":"official","path":"utils.py","file_url":"https://github.com/taco-group/facelock/blob/HEAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"7ddca31a9bed65b3"}},{"code_sha256_prefix":"783282303df4fd9f","entry":"vae_attack","repo":"taco-group/facelock","repo_kind":"official","path":"methods.py","file_url":"https://github.com/taco-group/facelock/blob/HEAD/methods.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"783282303df4fd9f"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}