FracFace: Breaking the Visual Clues—Fractal-Based Privacy-Preserving Face Recognition
Abstract
Face recognition is essential for identity authentication, but the rich visual clues in facial images pose significant privacy risks, highlighting the critical importance of privacy-preserving solutions. For instance, numerous studies have shown that generative models are capable of effectively performing reconstruction attacks that result in the restoration of original visual clues. To mitigate this threat, we introduce FracFace, a fractal-based privacy-preserving face recognition framework. This approach effectively weakens the visual clues that can be exploited by reconstruction attacks by disrupting the spatial structure in frequency domain features, while retaining the vital visual clues required for identity recognition. To achieve this, we craft a Frequency Channels Refining module that reduces sparsity in the frequency domain. It suppresses visual clues that could be exploited by reconstruction attacks, while preserving features indispensable for recognition, thus making these attacks more challenging. More significantly, we design a Frequency Fractal Mapping module that obfuscates deep representations by remapping refined frequency channels into a fractal-based privacy structure. By leveraging the self-similarity of fractals, this module preserves identity relevant features while enhancing defense capabilities, thereby improving the overall robustness of the protection scheme. Experiments conducted on multiple public face recognition benchmarks demonstrate that the proposed FracFace significantly reduces the visual recoverability of facial features, while maintaining high recognition accuracy, as well as the superiorities over state-of-the-art privacy protection approaches.
Cite
Text
Dai et al. "FracFace: Breaking the Visual Clues—Fractal-Based Privacy-Preserving Face Recognition." Advances in Neural Information Processing Systems, 2025.Markdown
[Dai et al. "FracFace: Breaking the Visual Clues—Fractal-Based Privacy-Preserving Face Recognition." Advances in Neural Information Processing Systems, 2025.](https://mlanthology.org/neurips/2025/dai2025neurips-fracface/)BibTeX
@inproceedings{dai2025neurips-fracface,
title = {{FracFace: Breaking the Visual Clues—Fractal-Based Privacy-Preserving Face Recognition}},
author = {Dai, Wanying and Li, Beibei and Dong, Naipeng and Bai, Guangdong and Dong, Jin Song},
booktitle = {Advances in Neural Information Processing Systems},
year = {2025},
url = {https://mlanthology.org/neurips/2025/dai2025neurips-fracface/}
}