A Video Gait Privacy Protection Algorithm Based on Sparse Adversarial Attack on Silhouette
Deep network models can obtain human gait biometrics from video gait sequences and recognize character identities through feature matching,which threatens human privacy.Privacy protection treatments such as blurring and deformation of the human body in video images can to some extent change the appearance of the human body.Still,it is difficult to change the walking posture of the characters and cannot avoid recognition by deep network models.Moreover,this treatment often accompanies serious damage to video quality,reducing the visual usability of the video.In response to this issue,this article proposed a video gait privacy protection algorithm based on sparse adversarial attack on silhouette,which calculates effective modification positions around human silhouette in the image through adversarial attacks on gait recognition models.Compared with traditional methods,this algorithm reduces the modification of images while maintaining the same privacy protection capabilities.The optimal balance between privacy security and visual availability was obtained.The algorithm is tested on four gait recognition models using the public gait datasets CASIA-B and OUMVLP,and previous gait privacy protection methods are implemented and compared,verifying the effectiveness and availability of this algorithm in gait privacy protection.
gait privacy protectiongait recognitionsparse adversarial attack on silhouetteadversarial samples
万方数据
维普
