@article{sankaranarayanan2008object,
    author={Sankaranarayanan, Aswin C. and Veeraraghavan, Ashok and Chellappa, Rama},
    journal={Proceedings of the IEEE},   
    title={Object Detection, Tracking and Recognition for Multiple Smart Cameras},
    year={2008}
}

@book{aghajan2009multi,
  title={Multi-camera networks: principles and applications},
  author={Aghajan, Hamid and Cavallaro, Andrea},
  year={2009},
  publisher={Academic press}
}

@inproceedings{hou2020multiview,
  title={Multiview detection with feature perspective transformation},
  author={Hou, Yunzhong and Zheng, Liang and Gould, Stephen},
  booktitle={European Conference on Computer Vision (ECCV)},
  year={2020},
}

@article{alahi2011sparsity,
  title={Sparsity driven people localization with a heterogeneous network of cameras},
  author={Alahi, Alexandre and Jacques, Laurent and Boursier, Yannick and Vandergheynst, Pierre},
  journal={Journal of Mathematical Imaging and Vision},
  year={2011},
}

@inproceedings{hou2021shadow,
  title={Multiview detection with shadow transformer (and view-coherent data augmentation)},
  author={Hou, Yunzhong and Zheng, Liang},
  booktitle={ACM International Conference on Multimedia},
  year={2021}
}

@inproceedings{song2021stacked,
  title={Stacked Homography Transformations for Multi-View Pedestrian Detection},
  author={Song, Liangchen and Wu, Jialian and Yang, Ming and Zhang, Qian and Li, Yuan and Yuan, Junsong},
  booktitle={International Conference on Computer Vision (ICCV)},
  year={2021}
}

@inproceedings{chavdarova2017deep,
  title={Deep multi-camera people detection},
  author={Chavdarova, Tatjana and Fleuret, Fran{\c{c}}ois},
  booktitle={International Conference on Machine Learning and Applications (ICMLA)},
  year={2017},
}

@inproceedings{baque2017deep,
  title={Deep occlusion reasoning for multi-camera multi-target detection},
  author={Baqu{\'e}, Pierre and Fleuret, Fran{\c{c}}ois and Fua, Pascal},
  booktitle={International Conference on Computer Vision (ICCV)},
  year={2017}
}

@article{fleuret2007multicamera,
  title={Multi-camera people tracking with a probabilistic occupancy map},
  author={Fleuret, Francois and Berclaz, Jerome and Lengagne, Richard and Fua, Pascal},
  journal={Transactions on pattern analysis and machine intelligence (T-PAMI)},
  year={2007},
}

@inproceedings{roig2011conditional,
  title={Conditional random fields for multi-camera object detection},
  author={Roig, Gemma and Boix, Xavier and Shitrit, Horesh Ben and Fua, Pascal},
  booktitle={International Conference on Computer Vision (ICCV)},
  year={2011},
}

@inproceedings{xu2016multi,
  title={Multi-view people tracking via hierarchical trajectory composition},
  author={Xu, Yuanlu and Liu, Xiaobai and Liu, Yang and Zhu, Song-Chun},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2016}
}

@inproceedings{coates2010multi,
  title={Multi-camera object detection for robotics},
  author={Coates, Adam and Ng, Andrew Y},
  booktitle={International Conference on Robotics and Automation (ICRA)},
  year={2010},
}

@article{berclaz2011multiple,
  title={Multiple object tracking using k-shortest paths optimization},
  author={Berclaz, Jerome and Fleuret, Francois and Turetken, Engin and Fua, Pascal},
  journal={Transactions on pattern analysis and machine intelligence (T-PAMI)},
  year={2011}
}

@article{vora2021bringing,
  title={Bringing Generalization to Deep Multi-view Detection},
  author={Vora, Jeet and Dutta, Swetanjal and Karthik, Shyamgopal and Gandhi, Vineet},
  journal={arXiv preprint arXiv:2109.12227},
  year={2021}
}

@article{guo2021attention,
  title={Attention Mechanisms in Computer Vision: A Survey},
  author={Guo, Meng-Hao and Xu, Tian-Xing and Liu, Jiang-Jiang and Liu, Zheng-Ning and Jiang, Peng-Tao and Mu, Tai-Jiang and Zhang, Song-Hai and Martin, Ralph R and Cheng, Ming-Ming and Hu, Shi-Min},
  journal={arXiv preprint arXiv:2111.07624},
  year={2021}
}

@inproceedings{hu2018squeeze,
  title={Squeeze-and-excitation networks},
  author={Hu, Jie and Shen, Li and Sun, Gang},
  booktitle={Conference on computer vision and pattern recognition (CVPR)},
  year={2018}
}

@inproceedings{gao2019global,
  title={Global second-order pooling convolutional networks},
  author={Gao, Zilin and Xie, Jiangtao and Wang, Qilong and Li, Peihua},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2019}
}

@inproceedings{lee2019srm,
  title={Srm: A style-based recalibration module for convolutional neural networks},
  author={Lee, HyunJae and Kim, Hyo-Eun and Nam, Hyeonseob},
  booktitle={International Conference on Computer Vision (ICCV)},
  year={2019}
}

@inproceedings{yang2020gated,
  title={Gated channel transformation for visual recognition},
  author={Yang, Zongxin and Zhu, Linchao and Wu, Yu and Yang, Yi},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2020}
}

@inproceedings{wang2020eca,
  title={ECA-Net: efficient channel attention for deep convolutional neural networks, 2020 IEEE},
  author={Wang, Qilong and Wu, Banggu and Zhu, Pengfei and Li, Peihua and Zuo, Wangmeng and Hu, Qinghua},
  booktitle={Computer Vision and Pattern Recognition (CVPR)},
  year={2020}
}

@inproceedings{qin2021fcanet,
  title={Fcanet: Frequency channel attention networks},
  author={Qin, Zequn and Zhang, Pengyi and Wu, Fei and Li, Xi},
  booktitle={International Conference on Computer Vision (ICCV)},
  year={2021}
}

@inproceedings{zhang2018context,
  title={Context encoding for semantic segmentation},
  author={Zhang, Hang and Dana, Kristin and Shi, Jianping and Zhang, Zhongyue and Wang, Xiaogang and Tyagi, Ambrish and Agrawal, Amit},
  booktitle={Computer Vision and Pattern Recognition (CVPR)},
  year={2018}
}

@inproceedings{fang2019bilinear,
  title={Bilinear attention networks for person retrieval},
  author={Fang, Pengfei and Zhou, Jieming and Roy, Soumava Kumar and Petersson, Lars and Harandi, Mehrtash},
  booktitle={International Conference on Computer Vision (ICCV)},
  year={2019}
}

@inproceedings{mnih2014recurrent,
  title={Recurrent models of visual attention},
  author={Mnih, Volodymyr and Heess, Nicolas and Graves, Alex and others},
  booktitle={Advances in neural information processing systems (NeurIPS)},
  year={2014}
}

@article{ba2014multiple,
  title={Multiple object recognition with visual attention},
  author={Ba, Jimmy and Mnih, Volodymyr and Kavukcuoglu, Koray},
  journal={arXiv preprint arXiv:1412.7755},
  year={2014}
}

@inproceedings{xu2015show,
  title={Show, attend and tell: Neural image caption generation with visual attention},
  author={Xu, Kelvin and Ba, Jimmy and Kiros, Ryan and Cho, Kyunghyun and Courville, Aaron and Salakhudinov, Ruslan and Zemel, Rich and Bengio, Yoshua},
  booktitle={International conference on machine learning (ICML)},
  year={2015},
}

@article{oktay2018attention,
  title={Attention u-net: Learning where to look for the pancreas},
  author={Oktay, Ozan and Schlemper, Jo and Folgoc, Loic Le and Lee, Matthew and Heinrich, Mattias and Misawa, Kazunari and Mori, Kensaku and McDonagh, Steven and Hammerla, Nils Y and Kainz, Bernhard and others},
  journal={arXiv preprint arXiv:1804.03999},
  year={2018}
}

@article{jaderberg2015spatial,
  title={Spatial transformer networks},
  author={Jaderberg, Max and Simonyan, Karen and Zisserman, Andrew and others},
  journal={Advances in neural information processing systems (NuerIPS)},
  year={2015}
}

@inproceedings{dai2017deformable,
  title={Deformable convolutional networks},
  author={Dai, Jifeng and Qi, Haozhi and Xiong, Yuwen and Li, Yi and Zhang, Guodong and Hu, Han and Wei, Yichen},
  booktitle={International conference on computer vision (ICCV)},
  year={2017}
}

@inproceedings{zhu2019deformable,
  title={Deformable convnets v2: More deformable, better results},
  author={Zhu, Xizhou and Hu, Han and Lin, Stephen and Dai, Jifeng},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2019}
}

@inproceedings{carion2020end,
  title={End-to-end object detection with transformers},
  author={Carion, Nicolas and Massa, Francisco and Synnaeve, Gabriel and Usunier, Nicolas and Kirillov, Alexander and Zagoruyko, Sergey},
  booktitle={European Conference on Computer Vision (ECCV)},
  year={2020},
}

@inproceedings{wang2018non,
  title={Non-local neural networks},
  author={Wang, Xiaolong and Girshick, Ross and Gupta, Abhinav and He, Kaiming},
  booktitle={Computer vision and pattern recognition (CVPR)},
  year={2018}
}

@article{dosovitskiy2020image,
  title={An image is worth 16x16 words: Transformers for image recognition at scale},
  author={Dosovitskiy, Alexey and Beyer, Lucas and Kolesnikov, Alexander and Weissenborn, Dirk and Zhai, Xiaohua and Unterthiner, Thomas and Dehghani, Mostafa and Minderer, Matthias and Heigold, Georg and Gelly, Sylvain and others},
  journal={arXiv preprint arXiv:2010.11929},
  year={2020}
}

@inproceedings{chen2020generative,
  title={Generative pretraining from pixels},
  author={Chen, Mark and Radford, Alec and Child, Rewon and Wu, Jeffrey and Jun, Heewoo and Luan, David and Sutskever, Ilya},
  booktitle={International Conference on Machine Learning (ICML)},
  year={2020},
}

@article{zhu2020deformable,
  title={Deformable detr: Deformable transformers for end-to-end object detection},
  author={Zhu, Xizhou and Su, Weijie and Lu, Lewei and Li, Bin and Wang, Xiaogang and Dai, Jifeng},
  journal={arXiv preprint arXiv:2010.04159},
  year={2020}
}

@inproceedings{he2016deep,
  title={Deep residual learning for image recognition},
  author={He, Kaiming and Zhang, Xiangyu and Ren, Shaoqing and Sun, Jian},
  booktitle={Conference on computer vision and pattern recognition (CVPR)},
  year={2016}
}

@inproceedings{wang2017residual,
  title={Residual attention network for image classification},
  author={Wang, Fei and Jiang, Mengqing and Qian, Chen and Yang, Shuo and Li, Cheng and Zhang, Honggang and Wang, Xiaogang and Tang, Xiaoou},
  booktitle={Conference on computer vision and pattern recognition (CVPR)},
  year={2017}
}

@article{park2018bam,
  title={Bam: Bottleneck attention module},
  author={Park, Jongchan and Woo, Sanghyun and Lee, Joon-Young and Kweon, In So},
  journal={The British Machine Vision Conference (BMVC)},
  year={2018}
}

@inproceedings{woo2018cbam,
  title={Cbam: Convolutional block attention module},
  author={Woo, Sanghyun and Park, Jongchan and Lee, Joon-Young and Kweon, In So},
  booktitle={European conference on computer vision (ECCV)},
  year={2018}
}

@article{roy2018recalibrating,
  title={Recalibrating fully convolutional networks with spatial and channel “squeeze and excitation” blocks},
  author={Roy, Abhijit Guha and Navab, Nassir and Wachinger, Christian},
  journal={Transactions on medical imaging},
  year={2018}
}

@inproceedings{misra2021rotate,
  title={Rotate to attend: Convolutional triplet attention module},
  author={Misra, Diganta and Nalamada, Trikay and Arasanipalai, Ajay Uppili and Hou, Qibin},
  booktitle={Winter Conference on Applications of Computer Vision (WACV)},
  year={2021}
}

@inproceedings{yang2021simam,
  title={Simam: A simple, parameter-free attention module for convolutional neural networks},
  author={Yang, Lingxiao and Zhang, Ru-Yuan and Li, Lida and Xie, Xiaohua},
  booktitle={International Conference on Machine Learning (ICML)},
  year={2021},
}

@inproceedings{hou2021coordinate,
  title={Coordinate attention for efficient mobile network design},
  author={Hou, Qibin and Zhou, Daquan and Feng, Jiashi},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2021}
}

@inproceedings{fu2019dual,
  title={Dual attention network for scene segmentation},
  author={Fu, Jun and Liu, Jing and Tian, Haijie and Li, Yong and Bao, Yongjun and Fang, Zhiwei and Lu, Hanqing},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2019}
}

@inproceedings{liu2020improving,
  title={Improving convolutional networks with self-calibrated convolutions},
  author={Liu, Jiang-Jiang and Hou, Qibin and Cheng, Ming-Ming and Wang, Changhu and Feng, Jiashi},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2020}
}

@inproceedings{hou2020strip,
  title={Strip pooling: Rethinking spatial pooling for scene parsing},
  author={Hou, Qibin and Zhang, Li and Cheng, Ming-Ming and Feng, Jiashi},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2020}
}

@inproceedings{chen2017sca,
  title={Sca-cnn: Spatial and channel-wise attention in convolutional networks for image captioning},
  author={Chen, Long and Zhang, Hanwang and Xiao, Jun and Nie, Liqiang and Shao, Jian and Liu, Wei and Chua, Tat-Seng},
  booktitle={Conference on computer vision and pattern recognition (CVPR)},
  year={2017}
}

@article{linsley2018learning,
  title={Learning what and where to attend},
  author={Linsley, Drew and Shiebler, Dan and Eberhardt, Sven and Serre, Thomas},
  journal={arXiv preprint arXiv:1805.08819},
  year={2018}
}

@inproceedings{pittaluga2019learning,
  title={Learning privacy preserving encodings through adversarial training},
  author={Pittaluga, Francesco and Koppal, Sanjeev and Chakrabarti, Ayan},
  booktitle={Winter Conference on Applications of Computer Vision (WACV)},
  year={2019},
}

@inproceedings{wu2018towards,
  title={Towards privacy-preserving visual recognition via adversarial training: A pilot study},
  author={Wu, Zhenyu and Wang, Zhangyang and Wang, Zhaowen and Jin, Hailin},
  booktitle={European Conference on Computer Vision (ECCV)},
  year={2018}
}

@article{liu2019privacy,
  title={Privacy adversarial network: representation learning for mobile data privacy},
  author={Liu, Sicong and Du, Junzhao and Shrivastava, Anshumali and Zhong, Lin},
  journal={ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies},
  year={2019},
}

@inproceedings{li2021deepobfuscator,
  title={DeepObfuscator: Obfuscating Intermediate Representations with Privacy-Preserving Adversarial Learning on Smartphones},
  author={Li, Ang and Guo, Jiayi and Yang, Huanrui and Salim, Flora D and Chen, Yiran},
  booktitle={International Conference on Internet-of-Things Design and Implementation},
  year={2021}
}

@inproceedings{roy2019mitigating,
  title={Mitigating information leakage in image representations: A maximum entropy approach},
  author={Roy, Proteek Chandan and Boddeti, Vishnu Naresh},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2019}
}

@inproceedings{sadeghi2019global,
  title={On the global optima of kernelized adversarial representation learning},
  author={Sadeghi, Bashir and Yu, Runyi and Boddeti, Vishnu},
  booktitle={International Conference on Computer Vision (ICCV)},
  year={2019}
}

@inproceedings{bertran2019adversarially,
  title={Adversarially learned representations for information obfuscation and inference},
  author={Bertran, Martin and Martinez, Natalia and Papadaki, Afroditi and Qiu, Qiang and Rodrigues, Miguel and Reeves, Galen and Sapiro, Guillermo},
  booktitle={International Conference on Machine Learning (ICML)},
  year={2019},
}

@inproceedings{vepakomma2020nopeek,
  title={NoPeek: Information leakage reduction to share activations in distributed deep learning},
  author={Vepakomma, Praneeth and Singh, Abhishek and Gupta, Otkrist and Raskar, Ramesh},
  booktitle={2020 International Conference on Data Mining Workshops (ICDMW)},
  year={2020}
 }
  
 @article{mirjalili2019flowsan,
  title={Flowsan: Privacy-enhancing semi-adversarial networks to confound arbitrary face-based gender classifiers},
  author={Mirjalili, Vahid and Raschka, Sebastian and Ross, Arun},
  journal={IEEE Access},
  year={2019},
}

@article{xu2019ganobfuscator,
  title={GANobfuscator: Mitigating information leakage under GAN via differential privacy},
  author={Xu, Chugui and Ren, Ju and Zhang, Deyu and Zhang, Yaoxue and Qin, Zhan and Ren, Kui},
  journal={Transactions on Information Forensics and Security},
  year={2019},
}

@article{goodfellow2014generative,
  title={Generative adversarial nets},
  author={Goodfellow, Ian and Pouget-Abadie, Jean and Mirza, Mehdi and Xu, Bing and Warde-Farley, David and Ozair, Sherjil and Courville, Aaron and Bengio, Yoshua},
  journal={Advances in neural information processing systems (NeurIPS)},
  year={2014}
}

@article{jo2017measuring,
  title={Measuring the tendency of CNNs to learn surface statistical regularities},
  author={Jo, Jason and Bengio, Yoshua},
  journal={arXiv preprint arXiv:1711.11561},
  year={2017}
}

@inproceedings{wang2020high,
  title={High-frequency component helps explain the generalization of convolutional neural networks},
  author={Wang, Haohan and Wu, Xindi and Huang, Zeyi and Xing, Eric P},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2020}
}

@article{ilyas2019adversarial,
  title={Adversarial examples are not bugs, they are features},
  author={Ilyas, Andrew and Santurkar, Shibani and Tsipras, Dimitris and Engstrom, Logan and Tran, Brandon and Madry, Aleksander},
  journal={Advances in neural information processing systems (NeurIPS)},
  year={2019}
}

@inproceedings{yin2019fourier,
  title={A fourier perspective on model robustness in computer vision},
  author={Yin, Dong and Lopes, Raphael Gontijo and Shlens, Jon and Cubuk, Ekin Dogus and Gilmer, Justin},
  booktitle={Advances in neural information processing systems (NeurIPS)},
  year={2019}
}

@inproceedings{geirhos2018imagenet,
    title={ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustness.},
    author={Robert Geirhos and Patricia Rubisch and Claudio Michaelis and Matthias Bethge and Felix A. Wichmann and Wieland Brendel},
    booktitle={International Conference on Learning Representations (ICLR)},
    year={2019},
}

@article{zhang2021universal,
  title={Universal adversarial perturbations through the lens of deep steganography: Towards a fourier perspective},
  author={Zhang, Chaoning and Benz, Philipp and Karjauv, Adil and Kweon, In So},
  journal={Association for the Advancement of Artificial Intelligence (AAAI)},
  year={2021}
}

@inproceedings{abello2021dissecting,
  title={Dissecting the High-Frequency Bias in Convolutional Neural Networks},
  author={Abello, Antonio A and Hirata, Roberto and Wang, Zhangyang},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2021}
}

@article{maiya2021frequency,
  title={A Frequency Perspective of Adversarial Robustness},
  author={Maiya, Shishira R and Ehrlich, Max and Agarwal, Vatsal and Lim, Ser-Nam and Goldstein, Tom and Shrivastava, Abhinav},
  journal={arXiv preprint arXiv:2111.00861},
  year={2021}
}

@article{kim2019training,
  title={Training with the invisibles: Obfuscating images to share safely for learning visual recognition models},
  author={Kim, Tae-hoon and Kang, Dongmin and Pulli, Kari and Choi, Jonghyun},
  journal={arXiv preprint arXiv:1901.00098},
  year={2019}
}

@article{zhang2017mixup,
  title={mixup: Beyond empirical risk minimization},
  author={Zhang, Hongyi and Cisse, Moustapha and Dauphin, Yann N and Lopez-Paz, David},
  journal={arXiv preprint arXiv:1710.09412},
  year={2017}
}

@inproceedings{fu2019mixup,
  title={Mixup based privacy preserving mixed collaboration learning},
  author={Fu, Yingwei and Wang, Huaimin and Xu, Kele and Mi, Haibo and Wang, Yijie},
  booktitle={International Conference on Service-Oriented System Engineering (SOSE)},
  year={2019},
}

@inproceedings{huang2020instahide,
  title={Instahide: Instance-hiding schemes for private distributed learning},
  author={Huang, Yangsibo and Song, Zhao and Li, Kai and Arora, Sanjeev},
  booktitle={International Conference on Machine Learning (ICML)},
  year={2020}
 }
 
 @article{borgnia2021dp,
  title={Dp-instahide: Provably defusing poisoning and backdoor attacks with differentially private data augmentations},
  author={Borgnia, Eitan and Geiping, Jonas and Cherepanova, Valeriia and Fowl, Liam and Gupta, Arjun and Ghiasi, Amin and Huang, Furong and Goldblum, Micah and Goldstein, Tom},
  journal={arXiv preprint arXiv:2103.02079},
  year={2021}
}

@article{shin2020xor,
  title={Xor mixup: Privacy-preserving data augmentation for one-shot federated learning},
  author={Shin, MyungJae and Hwang, Chihoon and Kim, Joongheon and Park, Jihong and Bennis, Mehdi and Kim, Seong-Lyun},
  journal={arXiv preprint arXiv:2006.05148},
  year={2020}
}

@article{carlini2020private,
  title={Is Private Learning Possible with Instance Encoding?},
  author={Carlini, Nicholas and Deng, Samuel and Garg, Sanjam and Jha, Somesh and Mahloujifar, Saeed and Mahmoody, Mohammad and Song, Shuang and Thakurta, Abhradeep and Tramer, Florian},
  journal={arXiv preprint arXiv:2011.05315},
  year={2020}
}

@article{luo2021fusion,
  title={A Fusion-Denoising Attack on InstaHide with Data Augmentation},
  author={Luo, Xinjian and Xiao, Xiaokui and Wu, Yuncheng and Liu, Juncheng and Ooi, Beng Chin},
  journal={arXiv preprint arXiv:2105.07754},
  year={2021}
}

@article{osia2020hybrid,
  title={A hybrid deep learning architecture for privacy-preserving mobile analytics},
  author={Osia, Seyed Ali and Shamsabadi, Ali Shahin and Sajadmanesh, Sina and Taheri, Ali and Katevas, Kleomenis and Rabiee, Hamid R and Lane, Nicholas D and Haddadi, Hamed},
  journal={IEEE Internet of Things Journal},
  year={2020},
}

@inproceedings{kim2019learning,
  title={Learning not to learn: Training deep neural networks with biased data},
  author={Kim, Byungju and Kim, Hyunwoo and Kim, Kyungsu and Kim, Sungjin and Kim, Junmo},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2019}
}

@inproceedings{singh2021disco,
  title={DISCO: Dynamic and Invariant Sensitive Channel Obfuscation for deep neural networks},
  author={Singh, Abhishek and Chopra, Ayush and Garza, Ethan and Zhang, Emily and Vepakomma, Praneeth and Sharma, Vivek and Raskar, Ramesh},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2021}
}

@article{park2022image,
  title={Image Perturbation-Based Deep Learning for Face Recognition Utilizing Discrete Cosine Transform},
  author={Park, Jaehun and Kim, Kwangsu},
  journal={Electronics},
  year={2022},
  publisher={Multidisciplinary Digital Publishing Institute}
}

@article{lim1990two,
  title={Two-dimensional signal and image processing},
  author={Lim, Jae S},
  journal={Englewood Cliffs},
  year={1990}
}

@inproceedings{edwards2016censoring,
  title={Censoring representations with an adversary},
  author={Edwards, Harrison and Storkey, Amos},
  booktitle={International Conference on Learning Representations (ICLR)},
  year={2016}
}

@article{louizos2016variational,
  title={The variational fair autoencoder},
  author={Louizos, Christos and Swersky, Kevin and Li, Yujia and Welling, Max and Zemel, Richard},
  booktitle={International Conference on Learning Representations (ICLR)},
  year={2016}
}

@inproceedings{madras2018learning,
  title={Learning adversarially fair and transferable representations},
  author={Madras, David and Creager, Elliot and Pitassi, Toniann and Zemel, Richard},
  booktitle={International Conference on Machine Learning (ICML)},
  year={2018},
}

@inproceedings{martinsson2021adversarial,
  title={Adversarial representation learning for synthetic replacement of private attributes},
  author={Martinsson, John and Zec, Edvin Listo and Gillblad, Daniel and Mogren, Olof},
  booktitle={International Conference on Big Data (Big Data)},
  year={2021},
}

@inproceedings{liu2015faceattributes,
  title = {Deep Learning Face Attributes in the Wild},
  author = {Liu, Ziwei and Luo, Ping and Wang, Xiaogang and Tang, Xiaoou},
  booktitle = {International Conference on Computer Vision (ICCV)},
  year = {2015} 
}

@inproceedings{karkkainen2021fairface,
  title={Fairface: Face attribute dataset for balanced race, gender, and age for bias measurement and mitigation},
  author={Karkkainen, Kimmo and Joo, Jungseock},
  booktitle={Winter Conference on Applications of Computer Vision (WACV)},
  year={2021}
}

@article{krizhevsky2009learning,
  title={Learning multiple layers of features from tiny images},
  author={Krizhevsky, Alex and Hinton, Geoffrey and others},
  year={2009},
  publisher={Toronto, ON, Canada}
}

@inproceedings{shokri2017membership,
  title={Membership inference attacks against machine learning models},
  author={Shokri, Reza and Stronati, Marco and Song, Congzheng and Shmatikov, Vitaly},
  booktitle={Symposium on security and privacy (SP)},
  year={2017}
}

@inproceedings{fredrikson2015model,
  title={Model inversion attacks that exploit confidence information and basic countermeasures},
  author={Fredrikson, Matt and Jha, Somesh and Ristenpart, Thomas},
  booktitle={ACM SIGSAC conference on computer and communications security},
  year={2015}
}

@inproceedings{fredrikson2014privacy,
  title={Privacy in Pharmacogenetics: An $\{$End-to-End$\}$ Case Study of Personalized Warfarin Dosing},
  author={Fredrikson, Matthew and Lantz, Eric and Jha, Somesh and Lin, Simon and Page, David and Ristenpart, Thomas},
  booktitle={USENIX Security Symposium},
  year={2014}
}

@article{kairouz2021advances,
  title={Advances and open problems in federated learning},
  author={Kairouz, Peter and McMahan, H Brendan and Avent, Brendan and Bellet, Aur{\'e}lien and Bennis, Mehdi and Bhagoji, Arjun Nitin and Bonawitz, Kallista and Charles, Zachary and Cormode, Graham and Cummings, Rachel and others},
  journal={Foundations and Trends{\textregistered} in Machine Learning},
  year={2021}
}

@article{konevcny2016federated,
  title={Federated learning: Strategies for improving communication efficiency},
  author={Kone{\v{c}}n{\`y}, Jakub and McMahan, H Brendan and Yu, Felix X and Richt{\'a}rik, Peter and Suresh, Ananda Theertha and Bacon, Dave},
  journal={arXiv preprint arXiv:1610.05492},
  year={2016}
}

@article{lyu2020threats,
  title={Threats to federated learning: A survey},
  author={Lyu, Lingjuan and Yu, Han and Yang, Qiang},
  journal={arXiv preprint arXiv:2003.02133},
  year={2020}
}

@article{gupta2018distributed,
  title={Distributed learning of deep neural network over multiple agents},
  author={Gupta, Otkrist and Raskar, Ramesh},
  journal={Journal of Network and Computer Applications},
  year={2018}
}

@article{vepakomma2018split,
  title={Split learning for health: Distributed deep learning without sharing raw patient data},
  author={Vepakomma, Praneeth and Gupta, Otkrist and Swedish, Tristan and Raskar, Ramesh},
  journal={arXiv preprint arXiv:1812.00564},
  year={2018}
}

@inproceedings{pasquini2021unleashing,
  title={Unleashing the tiger: Inference attacks on split learning},
  author={Pasquini, Dario and Ateniese, Giuseppe and Bernaschi, Massimo},
  booktitle={ACM SIGSAC Conference on Computer and Communications Security},
  year={2021}
}

@article{li2021label,
  title={Label leakage and protection in two-party split learning},
  author={Li, Oscar and Sun, Jiankai and Yang, Xin and Gao, Weihao and Zhang, Hongyi and Xie, Junyuan and Smith, Virginia and Wang, Chong},
  journal={arXiv preprint arXiv:2102.08504},
  year={2021}
}

@inproceedings{dwork2008differential,
  title={Differential privacy: A survey of results},
  author={Dwork, Cynthia},
  booktitle={International conference on theory and applications of models of computation},
  year={2008},
}

@article{ji2014differential,
  title={Differential privacy and machine learning: a survey and review},
  author={Ji, Zhanglong and Lipton, Zachary C and Elkan, Charles},
  journal={arXiv preprint arXiv:1412.7584},
  year={2014}
}

@inproceedings{abadi2016deep,
  title={Deep learning with differential privacy},
  author={Abadi, Martin and Chu, Andy and Goodfellow, Ian and McMahan, H Brendan and Mironov, Ilya and Talwar, Kunal and Zhang, Li},
  booktitle={ACM SIGSAC Conference on Computer and Communications security},
  year={2016}
}

@inproceedings{nandakumar2019towards,
  title={Towards deep neural network training on encrypted data},
  author={Nandakumar, Karthik and Ratha, Nalini and Pankanti, Sharath and Halevi, Shai},
  booktitle={Conference on Computer Vision and Pattern Recognition Workshops (CVPR-W)},
  year={2019}
}

@article{hesamifard2017cryptodl,
  title={Cryptodl: Deep neural networks over encrypted data},
  author={Hesamifard, Ehsan and Takabi, Hassan and Ghasemi, Mehdi},
  journal={arXiv preprint arXiv:1711.05189},
  year={2017}
}

@inproceedings{juvekar2018gazelle,
  title={$\{$GAZELLE$\}$: A low latency framework for secure neural network inference},
  author={Juvekar, Chiraag and Vaikuntanathan, Vinod and Chandrakasan, Anantha},
  booktitle={USENIX Security Symposium},
  year={2018}
}

@book{cramer2015secure,
  title={Secure multiparty computation},
  author={Cramer, Ronald and Damg{\aa}rd, Ivan Bjerre and others},
  year={2015},
  publisher={Cambridge University Press}
}

@inproceedings{ronneberger2015u,
  title={U-net: Convolutional networks for biomedical image segmentation},
  author={Ronneberger, Olaf and Fischer, Philipp and Brox, Thomas},
  booktitle={International Conference on Medical image computing and computer-assisted intervention},
  year={2015}
 }

@article{kingma2014adam,
  title={Adam: A method for stochastic optimization},
  author={Kingma, Diederik P and Ba, Jimmy},
  journal={arXiv preprint arXiv:1412.6980},
  year={2014}
}

@ARTICLE{zhou2004ssim,
  title={Image quality assessment: from error visibility to structural similarity}, 
  author={Zhou Wang and Bovik, A.C. and Sheikh, H.R. and Simoncelli, E.P.},
  journal={Transactions on Image Processing}, 
  year={2004}
}

@INPROCEEDINGS{hore2010psnr,
  author={Horé, Alain and Ziou, Djemel},
  booktitle={International Conference on Pattern Recognition}, 
  title={Image Quality Metrics: PSNR vs. SSIM}, 
  year={2010}
}

@article{kang2017neurosurgeon,
  title={Neurosurgeon: Collaborative intelligence between the cloud and mobile edge},
  author={Kang, Yiping and Hauswald, Johann and Gao, Cao and Rovinski, Austin and Mudge, Trevor and Mars, Jason and Tang, Lingjia},
  journal={ACM SIGARCH Computer Architecture News},
  year={2017},
}

@article{chi2018privacy,
  title={Privacy partitioning: Protecting user data during the deep learning inference phase},
  author={Chi, Jianfeng and Owusu, Emmanuel and Yin, Xuwang and Yu, Tong and Chan, William and Tague, Patrick and Tian, Yuan},
  journal={arXiv preprint arXiv:1812.02863},
  year={2018}
}

@article{feutry2018learning,
  title={Learning anonymized representations with adversarial neural networks},
  author={Feutry, Cl{\'e}ment and Piantanida, Pablo and Bengio, Yoshua and Duhamel, Pierre},
  journal={arXiv preprint arXiv:1802.09386},
  year={2018}
}

@inproceedings{mireshghallah2020shredder,
  title={Shredder: Learning noise distributions to protect inference privacy},
  author={Mireshghallah, Fatemehsadat and Taram, Mohammadkazem and Ramrakhyani, Prakash and Jalali, Ali and Tullsen, Dean and Esmaeilzadeh, Hadi},
  booktitle={International Conference on Architectural Support for Programming Languages and Operating Systems},
  year={2020}
}

@article{osia2018deep,
  title={Deep private-feature extraction},
  author={Osia, Seyed Ali and Taheri, Ali and Shamsabadi, Ali Shahin and Katevas, Kleomenis and Haddadi, Hamed and Rabiee, Hamid R},
  journal={Transactions on Knowledge and Data Engineering},
  year={2018},
}

@inproceedings{liu2020datamix,
  title={Datamix: Efficient privacy-preserving edge-cloud inference},
  author={Liu, Zhijian and Wu, Zhanghao and Gan, Chuang and Zhu, Ligeng and Han, Song},
  booktitle={European Conference on Computer Vision (ECCV)},
  year={2020}
}

@inproceedings{ren2018learning,
  title={Learning to anonymize faces for privacy preserving action detection},
  author={Ren, Zhongzheng and Lee, Yong Jae and Ryoo, Michael S},
  booktitle={European Conference on Computer Vision (ECCV)},
  year={2018}
}

@inproceedings{ryoo2017privacy,
  title={Privacy-preserving human activity recognition from extreme low resolution},
  author={Ryoo, Michael S and Rothrock, Brandon and Fleming, Charles and Yang, Hyun Jong},
  booktitle={AAAI Conference on Artificial Intelligence},
  year={2017}
}

@inproceedings{xiao2020adversarial,
  title={Adversarial learning of privacy-preserving and task-oriented representations},
  author={Xiao, Taihong and Tsai, Yi-Hsuan and Sohn, Kihyuk and Chandraker, Manmohan and Yang, Ming-Hsuan},
  booktitle={AAAI Conference on Artificial Intelligence},
  year={2020}
}

@article{ganin2016domain,
  title={Domain-adversarial training of neural networks},
  author={Ganin, Yaroslav and Ustinova, Evgeniya and Ajakan, Hana and Germain, Pascal and Larochelle, Hugo and Laviolette, Fran{\c{c}}ois and Marchand, Mario and Lempitsky, Victor},
  journal={The journal of machine learning research},
  year={2016},
}

@inproceedings{guo2021deep,
  title={Deep Poisoning: Towards Robust Image Data Sharing against Visual Disclosure},
  author={Guo, Hao and Dolhansky, Brian and Hsin, Eric and Dinh, Phong and Ferrer, Cristian Canton and Wang, Song},
  booktitle={Winter Conference on Applications of Computer Vision (WACV)},
  year={2021}
}

@article{osia2017privacy,
  title={Privacy-preserving deep inference for rich user data on the cloud},
  author={Osia, Seyed Ali and Shamsabadi, Ali Shahin and Taheri, Ali and Katevas, Kleomenis and Rabiee, Hamid R and Lane, Nicholas D and Haddadi, Hamed},
  journal={arXiv preprint arXiv:1710.01727},
  year={2017}
}

@inproceedings{liu2020datamix,
  title={Datamix: Efficient privacy-preserving edge-cloud inference},
  author={Liu, Zhijian and Wu, Zhanghao and Gan, Chuang and Zhu, Ligeng and Han, Song},
  booktitle={European Conference on Computer Vision (ECCV)},
  year={2020}
 }
 
 @article{yuan2021ocnet,
  title={OCNet: Object context for semantic segmentation},
  author={Yuan, Yuhui and Huang, Lang and Guo, Jianyuan and Zhang, Chao and Chen, Xilin and Wang, Jingdong},
  journal={International Journal of Computer Vision},
  year={2021}
}

@inproceedings{xie2018attentional,
  title={Attentional shapecontextnet for point cloud recognition},
  author={Xie, Saining and Liu, Sainan and Chen, Zeyu and Tu, Zhuowen},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2018}
}

@article{guo2021pct,
  title={Pct: Point cloud transformer},
  author={Guo, Meng-Hao and Cai, Jun-Xiong and Liu, Zheng-Ning and Mu, Tai-Jiang and Martin, Ralph R and Hu, Shi-Min},
  journal={Computational Visual Media},
  year={2021}
}

@article{liu2018intriguing,
  title={An intriguing failing of convolutional neural networks and the coordconv solution},
  author={Liu, Rosanne and Lehman, Joel and Molino, Piero and Petroski Such, Felipe and Frank, Eric and Sergeev, Alex and Yosinski, Jason},
  journal={Advances in neural information processing systems (NeurIPS)},
  year={2018}
}

@article{yosinski2014transferable,
  title={How transferable are features in deep neural networks?},
  author={Yosinski, Jason and Clune, Jeff and Bengio, Yoshua and Lipson, Hod},
  journal={Advances in neural information processing systems (NeurIPS)},
  year={2014}
}

@inproceedings{law2018cornernet,
  title={Cornernet: Detecting objects as paired keypoints},
  author={Law, Hei and Deng, Jia},
  booktitle={European Conference on Computer Vision (ECCV)},
  year={2018}
}

@inproceedings{chavdarova2018wildtrack,
  title={Wildtrack: A multi-camera hd dataset for dense unscripted pedestrian detection},
  author={Chavdarova, Tatjana and Baqu{\'e}, Pierre and Bouquet, St{\'e}phane and Maksai, Andrii and Jose, Cijo and Bagautdinov, Timur and Lettry, Louis and Fua, Pascal and Van Gool, Luc and Fleuret, Fran{\c{c}}ois},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2018}
}

@inproceedings{sun2019dissecting,
  title={Dissecting person re-identification from the viewpoint of viewpoint},
  author={Sun, Xiaoxiao and Zheng, Liang},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2019}
}

@inproceedings{sandler2018mobilenetv2,
  title={Mobilenetv2: Inverted residuals and linear bottlenecks},
  author={Sandler, Mark and Howard, Andrew and Zhu, Menglong and Zhmoginov, Andrey and Chen, Liang-Chieh},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2018}
}

@article{krizhevsky2012imagenet_alexnet,
  title={Imagenet classification with deep convolutional neural networks},
  author={Krizhevsky, Alex and Sutskever, Ilya and Hinton, Geoffrey E},
  journal={Advances in neural information processing systems (NeurIPS)},
  year={2012}
}

@article{simonyan2014very_vgg,
  title={Very deep convolutional networks for large-scale image recognition},
  author={Simonyan, Karen and Zisserman, Andrew},
  journal={arXiv preprint arXiv:1409.1556},
  year={2014}
}

@article{hinton2015distilling,
  title={Distilling the knowledge in a neural network},
  author={Hinton, Geoffrey and Vinyals, Oriol and Dean, Jeff and others},
  journal={arXiv preprint arXiv:1503.02531},
  year={2015}
}

@inproceedings{jacob2018quantization,
  title={Quantization and training of neural networks for efficient integer-arithmetic-only inference},
  author={Jacob, Benoit and Kligys, Skirmantas and Chen, Bo and Zhu, Menglong and Tang, Matthew and Howard, Andrew and Adam, Hartwig and Kalenichenko, Dmitry},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2018}
}

@article{han2015deep,
  title={Deep compression: Compressing deep neural networks with pruning, trained quantization and huffman coding},
  author={Han, Song and Mao, Huizi and Dally, William J},
  journal={arXiv preprint arXiv:1510.00149},
  year={2015}
}

@book{cramer2016mathematical,
  title={Mathematical Methods of Statistics},
  author={Cram{\'e}r, Harald},
  year={2016},
  publisher={Princeton university press}
}

@article{donahue2019large-arl,
  title={Large scale adversarial representation learning},
  author={Donahue, Jeff and Simonyan, Karen},
  journal={Advances in neural information processing systems (NeurIPS)},
  year={2019}
}

@inproceedings{wang2003multiscale-msssim,
  title={Multiscale structural similarity for image quality assessment},
  author={Wang, Zhou and Simoncelli, Eero P and Bovik, Alan C},
  booktitle={Asilomar Conference on Signals, Systems \& Computers},
  year={2003},
}

@inproceedings{zhang2018unreasonable-lpips,
  title={The unreasonable effectiveness of deep features as a perceptual metric},
  author={Zhang, Richard and Isola, Phillip and Efros, Alexei A and Shechtman, Eli and Wang, Oliver},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2018}
}

@INPROCEEDINGS{lightweight-unet,
  author={Jeon, Kwang Myung and Chun, Chanjun and Kim, Gyeongbong and Leem, Chaejun and Kim, Bohee and Choi, Wooyeol},
  booktitle={2020 IEEE International Conference on Consumer Electronics (ICCE)}, 
  title={Lightweight U-Net Based Monaural Speech Source Separation for Edge Computing Device}, 
  year={2020},
 }
 
 @inproceedings{howard2019searching-mobilenetv3,
  title={Searching for mobilenetv3},
  author={Howard, Andrew and Sandler, Mark and Chu, Grace and Chen, Liang-Chieh and Chen, Bo and Tan, Mingxing and Wang, Weijun and Zhu, Yukun and Pang, Ruoming and Vasudevan, Vijay and others},
  booktitle={International Conference on Computer Vision (ICCV)},
  year={2019}
}

@InProceedings{Karras_2020_CVPR,
author = {Karras, Tero and Laine, Samuli and Aittala, Miika and Hellsten, Janne and Lehtinen, Jaakko and Aila, Timo},
title = {Analyzing and Improving the Image Quality of StyleGAN},
booktitle = {Conference on Computer Vision and Pattern Recognition (CVPR)},
month = {June},
year = {2020}
}

@article{xiong2020comprehensive,
  title={A comprehensive survey on local differential privacy},
  author={Xiong, Xingxing and Liu, Shubo and Li, Dan and Cai, Zhaohui and Niu, Xiaoguang},
  journal={Security and Communication Networks},
  volume={2020},
  year={2020},
  publisher={Hindawi}
}

@inproceedings{DPsgd,
  title={Deep learning with differential privacy},
  author={Abadi, Martin and Chu, Andy and Goodfellow, Ian and McMahan, H Brendan and Mironov, Ilya and Talwar, Kunal and Zhang, Li},
  booktitle={SIGSAC conference on computer and communications security},
  year={2016}
}

@article{yang2020local,
  title={Local differential privacy and its applications: A comprehensive survey},
  author={Yang, Mengmeng and Lyu, Lingjuan and Zhao, Jun and Zhu, Tianqing and Lam, Kwok-Yan},
  journal={arXiv preprint arXiv:2008.03686},
  year={2020}
}

@article{hsu2021survey,
  title={A Survey on Statistical, Information, and Estimation—Theoretic Views on Privacy},
  author={Hsu, Hsiang and Martinez, Natalia and Bertran, Martin and Sapiro, Guillermo and Calmon, Flavio P},
  journal={IEEE BITS the Information Theory Magazine},
  year={2021}
}

@article{zhao2020trade,
  title={Trade-offs and guarantees of adversarial representation learning for information obfuscation},
  author={Zhao, Han and Chi, Jianfeng and Tian, Yuan and Gordon, Geoffrey J},
  journal={Advances in neural information processing systems (NeurIPS)},
  year={2020}
}

@inproceedings{hsu2020obfuscation,
  title={Obfuscation via information density estimation},
  author={Hsu, Hsiang and Asoodeh, Shahab and Calmon, Flavio},
  booktitle={International Conference on Artificial Intelligence and Statistics},
  year={2020},
}

@inproceedings{wang2018not,
  title={Not just privacy: Improving performance of private deep learning in mobile cloud},
  author={Wang, Ji and Zhang, Jianguo and Bao, Weidong and Zhu, Xiaomin and Cao, Bokai and Yu, Philip S},
  booktitle={ACM SIGKDD international conference on knowledge discovery \& data mining},
  year={2018}
}

@article{arachchige2019local,
  title={Local differential privacy for deep learning},
  author={Arachchige, Pathum Chamikara Mahawaga and Bertok, Peter and Khalil, Ibrahim and Liu, Dongxi and Camtepe, Seyit and Atiquzzaman, Mohammed},
  journal={IEEE Internet of Things Journal},
  year={2019},
}

@article{ma2021voxelized,
  title={Voxelized 3D Feature Aggregation for Multiview Detection},
  author={Ma, Jiahao and Tong, Jinguang and Wang, Shan and Zhao, Wei and Zheng, Liang and Nguyen, Chuong},
  journal={arXiv preprint arXiv:2112.03471},
  year={2021}
}

@article{haoran2021mvm3det,
  title={MVM3Det: A Novel Method for Multi-view Monocular 3D Detection},
  author={Haoran, Li and Zicheng, Duan and Mingjun, Ma and Yaran, Chen and Jiaqi, Li and Dongbin, Zhao},
  journal={arXiv preprint arXiv:2109.10473},
  year={2021}
}

@inproceedings{abati2020conditional,
  title={Conditional channel gated networks for task-aware continual learning},
  author={Abati, Davide and Tomczak, Jakub and Blankevoort, Tijmen and Calderara, Simone and Cucchiara, Rita and Bejnordi, Babak Ehteshami},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2020}
}

@inproceedings{li2019selective,
  title={Selective kernel networks},
  author={Li, Xiang and Wang, Wenhai and Hu, Xiaolin and Yang, Jian},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2019}
}

@inproceedings{herrmann2020channel,
  title={Channel selection using gumbel softmax},
  author={Herrmann, Charles and Bowen, Richard Strong and Zabih, Ramin},
  booktitle={European Conference on Computer Vision (ECCV)},
  year={2020},
}

@article{vora2021bringing,
  title={Bringing Generalization to Deep Multi-view Detection},
  author={Vora, Jeet and Dutta, Swetanjal and Jain, Kanishk and Karthik, Shyamgopal and Gandhi, Vineet},
  journal={arXiv preprint arXiv:2109.12227},
  year={2021}
}

@article{edwards2015censoring,
  title={Censoring representations with an adversary},
  author={Edwards, Harrison and Storkey, Amos},
  journal={arXiv preprint arXiv:1511.05897},
  year={2015}
}

@inproceedings{raval2017protecting,
  title={Protecting visual secrets using adversarial nets},
  author={Raval, Nisarg and Machanavajjhala, Ashwin and Cox, Landon P},
  booktitle={2017 IEEE Conference on Computer Vision and Pattern Recognition Workshops (CVPRW)},
  year={2017},
  organization={IEEE}
}

@article{huang2017context,
  title={Context-aware generative adversarial privacy},
  author={Huang, Chong and Kairouz, Peter and Chen, Xiao and Sankar, Lalitha and Rajagopal, Ram},
  journal={Entropy},
  year={2017},
  publisher={MDPI}
}

@inproceedings{ng2022ninjadesc,
  title={NinjaDesc: Content-Concealing Visual Descriptors via Adversarial Learning},
  author={Ng, Tony and Kim, Hyo Jin and Lee, Vincent T and DeTone, Daniel and Yang, Tsun-Yi and Shen, Tianwei and Ilg, Eddy and Balntas, Vassileios and Mikolajczyk, Krystian and Sweeney, Chris},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2022}
}

@inproceedings{fan2019differential,
  title={Differential privacy for image publication},
  author={Fan, Liyue},
  booktitle={Theory and Practice of Differential Privacy (TPDP) Workshop},
  year={2019}
}

@inproceedings{fan2019practical,
  title={Practical image obfuscation with provable privacy},
  author={Fan, Liyue},
  booktitle={2019 IEEE international conference on multimedia and expo (ICME)},
  year={2019},
  organization={IEEE}
}

@inproceedings{john2020let,
  title={Let it snow: Adding pixel noise to protect the user’s identity},
  author={John, Brendan and Liu, Ao and Xia, Lirong and Koppal, Sanjeev and Jain, Eakta},
  booktitle={ACM Symposium on Eye Tracking Research and Applications},
  year={2020}
}

@article{croft2021obfuscation,
  title={Obfuscation of images via differential privacy: From facial images to general images},
  author={Croft, William L and Sack, J{\"o}rg-R{\"u}diger and Shi, Wei},
  journal={Peer-to-Peer Networking and Applications},
  year={2021},
  publisher={Springer}
}

@inproceedings{chen2021perceptual,
  title={Perceptual Indistinguishability-Net (PI-Net): Facial image obfuscation with manipulable semantics},
  author={Chen, Jia-Wei and Chen, Li-Ju and Yu, Chia-Mu and Lu, Chun-Shien},
  booktitle={Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2021}
}

@inproceedings{mireshghallah2021not,
  title={Not all features are equal: Discovering essential features for preserving prediction privacy},
  author={Mireshghallah, Fatemehsadat and Taram, Mohammadkazem and Jalali, Ali and Elthakeb, Ahmed Taha Taha and Tullsen, Dean and Esmaeilzadeh, Hadi},
  booktitle={Proceedings of the Web Conference 2021},
  year={2021}
}