AuraMask: An Extensible Pipeline for Developing Aesthetic Anti-Facial Recognition Image Filters

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Lagogiannis, Jacob, Agnew, William, Arriaga, Rosa I., Das, Sauvik
Format: Preprint
Veröffentlicht: 2026
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866910215420510208
author Lagogiannis, Jacob
Agnew, William
Arriaga, Rosa I.
Das, Sauvik
author_facet Lagogiannis, Jacob
Agnew, William
Arriaga, Rosa I.
Das, Sauvik
contents Anti-facial recognition (AFR) image filters alter images in ways that are subtle to people but blinding to computer vision. Yet, despite widespread interest in these technologies to subvert surveillance, users rarely use them in practice -- because the ``subtle'' alterations are visible enough to conflict with users' self-presentation goals. To address this challenge, we propose AuraMask: a novel approach to creating AFR filters that are both adversarially effective and aesthetically acceptable. Using AuraMask, we produce 40 ``aesthetic'' filters that emulate popular ``one-click'' Instagram image filters. We show that AuraMask filters meet or exceed the adversarial effectiveness of prior methods against open-source facial recognition models. Moreover, in a controlled online user study ($N=630$) we confirm these filters achieve significantly higher user acceptance than prior methods. Lastly, we provide our AFR pipeline to the community for accelerated research in adversarially effective and aesthetically acceptable protections.
format Preprint
id arxiv_https___arxiv_org_abs_2605_12937
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle AuraMask: An Extensible Pipeline for Developing Aesthetic Anti-Facial Recognition Image Filters
Lagogiannis, Jacob
Agnew, William
Arriaga, Rosa I.
Das, Sauvik
Computer Vision and Pattern Recognition
Artificial Intelligence
Human-Computer Interaction
Anti-facial recognition (AFR) image filters alter images in ways that are subtle to people but blinding to computer vision. Yet, despite widespread interest in these technologies to subvert surveillance, users rarely use them in practice -- because the ``subtle'' alterations are visible enough to conflict with users' self-presentation goals. To address this challenge, we propose AuraMask: a novel approach to creating AFR filters that are both adversarially effective and aesthetically acceptable. Using AuraMask, we produce 40 ``aesthetic'' filters that emulate popular ``one-click'' Instagram image filters. We show that AuraMask filters meet or exceed the adversarial effectiveness of prior methods against open-source facial recognition models. Moreover, in a controlled online user study ($N=630$) we confirm these filters achieve significantly higher user acceptance than prior methods. Lastly, we provide our AFR pipeline to the community for accelerated research in adversarially effective and aesthetically acceptable protections.
title AuraMask: An Extensible Pipeline for Developing Aesthetic Anti-Facial Recognition Image Filters
topic Computer Vision and Pattern Recognition
Artificial Intelligence
Human-Computer Interaction
url https://arxiv.org/abs/2605.12937