Unveiling Hidden Visual Information: A Reconstruction Attack Against Adversarial Visual Information Hiding

Understand

This paper investigates the security vulnerabilities of adversarial-example-based image encryption by executing data reconstruction (DR) attacks on encrypted images.

• A representative image encryption method is the adversarial visual information hiding (AVIH), which uses type-I adversarial example training to protect gallery datasets used in image recognition tasks.
• In the AVIH method, the type-I adversarial example approach creates images that appear completely different but are still recognized by machines as the original ones.
• Additionally, the AVIH method can restore encrypted images to their original forms using a predefined private key generative model.