Pith. sign in

REVIEW 3 major objections 7 minor 126 references

Semantics versus Identity: A Divide-and-Conquer Approach towards Adjustable Medical Image De-Identification

T0 review · 3 major / 7 minor · reviewed 2026-08-15 · deepseek-v4-flash

Challenge this review Re-run · record.json Download PDF Read on arXiv ↗ Review JSON

Pith's one-line read A divide-and-conquer medical image de-identification framework blocks identity-related regions and re-synthesizes them from decoupled medical foundation model features, claiming adjustable privacy with preserved diagnostic utility.

desk verdict A genuinely new divide-and-conquer DeID pipeline with the strongest empirical trade-off I have seen in medical imaging privacy, but the 'identity-free' claim is asserted rather than proven. read the letter →

arxiv 2507.21703 v1 pith:4WYYORXL submitted 2025-07-25 cs.CV

Yuan Tian , Shuo Wang , Rongzhao Zhang , Zijian Chen , Yankai Jiang , Chunyi Li , Xiangyang Zhu , Fang Yan
show 3 more authors
Qiang Hu XiaoSong Wang Guangtao Zhai
This is my paper · ORCID
classification cs.CV
keywords medicalimagede-identificationre-identificationattackidentity-semanticsdecouplingminimumdescriptionlengthfoundationmodelsdiffusionmodeladjustableprivacychestX-rayandfundus
verification ladder T0 review T1 audit T2 compute T3 formal

The pith

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The reading

Medical images carry hidden identity cues, so the paper argues that privacy protection and diagnostic usefulness should be handled as two separate problems, not one balancing act. Its DCM-DeID framework first blocks image regions that a re-identification model deems identity-related, with a threshold that controls the privacy level, and then re-synthesizes those regions from semantic features extracted by pre-trained medical foundation models. Because those foundation-model features still leak identity, the framework routes them through a minimum-description-length discrete code space and uses a learned binary mask to discard identity-associated codes while keeping semantic codes. On a new seven-dataset benchmark of chest X-rays and fundus photos, the paper reports attack success rates tunable in the 10–40% range while classification, captioning, and segmentation results stay well above five compared baselines.

What carries the argument

The load-bearing mechanism is a minimum-codelength discrete latent space with a learned identity mask. MFM features are compressed to 32-channel integer codes $Q$ whose codelength is estimated by a three-component Gaussian-mixture entropy model; a single convolution trained with Gumbel-Softmax predicts a binary mask $M$, and the rate-distortion losses for reconstructing the image and the identity embedding push the masked-out codes $Q_{id}$ and the retained codes $Q_{sem}$ to carry independent information. The decoded identity-free feature $f_{sem} = D(Q_{sem})$ is what conditions the diffusion re-synthesis, closing the loop that prevents identity from being reintroduced.

What would settle it

Train a medical ReID model on the de-identified outputs (or on the retained semantic codes) and measure CMC-R1 on the same patient splits; if the attack success rate rises well above the claimed 10–40% adjustable range, residual identity has survived the decoupling.

Watch

Extended reading notes

Core claim

The central claim is that identity removal and medical semantics preservation can be cleanly separated, and that the separation is what makes de-identification both adjustable and task-preserving. Concretely, the method computes a point-wise similarity map between local features and the global identity embedding of a ViT-based ReID model, blocks the regions above a chosen threshold, and uses a latent diffusion model to synthesize the protected image conditioned jointly on the blocked image and on identity-free medical features. The identity-free features come from a learned code space: medical foundation model features are quantized into integer codes, a Gumbel-Softmax mask $M$ splits them into identity codes $Q_{id}$ and semantic codes $Q_{sem}$, and only the semantic codes are decoded. The paper reports that this yields state-of-the-art privacy-utility trade-offs on seven datasets across X-ray and fundus modalities, including datasets never seen in training.

Load-bearing premise

The load-bearing premise is that identity cues and medical semantics occupy separable groups of discrete latent codes, so deleting the codes selected by the learned mask removes every identity cue while keeping diagnostic content; the paper's evidence for this rests on a single VisionMamba-based attacker.

Editorial extensions

If this is right

  • Adjusting a single threshold—the quantile of the identity-similarity map—moves the attack success rate across privacy levels, so one trained model can serve a range of de-identification requirements without retraining.
  • Because the compensation branch draws on task-agnostic medical foundation models, the preserved semantics transfer to classification, captioning, and segmentation, including on external datasets unseen during training.
  • Without the MDL decoupling, identity leakage rises by roughly 15 CMC-R1 points at matched AUROC, so the code-space separation, not the diffusion model alone, is what sustains the trade-off.
  • In a single-task comparison, the decoupled representation also beats label-conditioned diffusion synthesis, suggesting the preserved information is richer than any one label.

Reading between the lines

Editorial extensions of the paper, not claims the author makes directly.

  • A decisive test the paper does not run: train the medical ReID attacker directly on the de-identified images or on the semantic codes $Q_{sem}$, then measure CMC-R1; if the rate jumps above the claimed range, the decoupling has left usable identity signal that the fixed VisionMamba attacker cannot see.
  • The reported bit-costs—roughly 44% identity-related codes for X-ray and 55% for fundus—suggest codelength could double as a measurable privacy budget, which would let hospitals set a leakage ceiling before sharing data; this is an editorial extrapolation from the paper's measurements.
  • The same divide-and-conquer pattern could extend to other identity-rich modalities like MRI or CT, but the method's reliance on a task-appropriate medical foundation model means the transfer is not automatic.
Share X Bluesky LinkedIn Reddit HN

Signed reviews

No signed human review yet.

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, and a circularity audit.

Referee Report

3 major / 7 minor

Summary. The manuscript proposes DCM-DeID, a divide-and-conquer framework for adjustable medical image de-identification. The method first blocks identity-related image regions using a similarity map from a pre-trained ReID model, with a threshold controlling the privacy level. It then compensates the blocked regions using features from medical foundation models (MFMs), and introduces a minimum description length (MDL)-based discrete code space with a learned binary mask to separate and discard identity-associated codes before a diffusion model re-synthesizes the image. The paper evaluates the method on seven datasets spanning chest X-ray and fundus modalities and three downstream tasks, reporting improved utility over five baselines at matched attack success rates, and performs ablations of the main components.

Significance. If the main claims hold, the paper makes a useful contribution: it provides a common evaluation protocol for adjustable medical de-identification, shows that semantic compensation via foundation models can preserve task utility better than filtering, adversarial, or masked-autoencoder baselines, and introduces a code-space decoupling mechanism that appears to reduce identity leakage. The empirical comparison is broad and includes held-out datasets, and the use of a different ReID architecture (VisionMamba) at evaluation time than at training time (ViT) is a good generalization check. However, the central privacy claim rests on an unverified assumption about identity-free semantic codes, and the evidence for that assumption is currently indirect.

major comments (3)
  1. [Section 3.3, Eq. (3)] The decoupling loss L_code-id = ||id_hat - id||^2 + beta*H(Qid) trains Qid to be predictive of identity, but contains no term that penalizes identity information in Qsem = (1-M)⊗Q. The MDL argument does not guarantee that the complement of the low-codelength identity set is identity-free; the codelength H(Qid) is evaluated with the same GMM fitted to the full Q, so the penalty encourages compactness of the chosen subset but not uniqueness of the identity-bearing information. Because the re-synthesis uses hat_f_sem = D(Qsem), any residual identity in Qsem will appear in the generated image regardless of ID-Blocking. The w/oDecouple ablation in Section 4.7 demonstrates that decoupling lowers CMC-R1 for one VisionMamba ReID model, but it does not establish that Qsem is identity-free. Please add a direct measurement of identity leakage from Qsem (e.g., training a ReID classifier on Qsem or on images reconstructed from Qsem alone) and/or an explicit loss term that prevents identity information from remaining in Qsem.
  2. [Figure 6] The reported 44% and 55% identity-information shares are measured with the same learned mask M and the same GMM that were trained to make Qid compact; this is at least partly circular. It shows what fraction of bits the learned mask assigned to the identity set, not an independent estimate of identity information in the MFM features. Please provide an external estimate (e.g., a separately trained ReID probe on Qsem vs Q, or mutual information estimation) before claiming that these numbers quantify identity content.
  3. [Sections 4.5 and 4.7] All privacy results are reported against a single attacker model (VisionMamba ReID) and without error bars or significance tests. Since the paper's central claim is that identity cues are effectively removed, the privacy evaluation should include multiple seeds, and ideally additional ReID backbones, gallery sizes, or attack protocols, to show the result is not specific to one attacker. At minimum, report standard deviations for the main privacy and utility numbers in Table 1.
minor comments (7)
  1. [Section 4.6] There are several typos: 'MIMIX-X' should be 'MIMIC-X', and 'ORID5K' should be 'ODIR5K' in the fundus classification paragraph and in the Table 1 header.
  2. [Section 4.5] The dataset name is inconsistent: 'CheX-det' in Section 4.5 should be 'ChestX-Det' to match the earlier description.
  3. [Section 3.3] In the paragraph on codelength estimation, 'We not that the CDF' should be 'We note that the CDF'; in Eq. (3), 'H( ˜Qid)' appears to be a typo and should be 'H(Qid)'.
  4. [Figure 6] The bar chart is unclear: it is not obvious whether the identity and semantic bars for each dataset are stacked or grouped, and the y-axis label 'bpp' is only defined in the caption. Please clarify the visualization.
  5. [Section 4.7] The 'Discussion with Label-Conditioned Diffusion Models' paragraph reports a fine-tuned single-task variant (81.92% AUROC at CMC-R1=0.30%) without implementation details; provide the setup or remove this comparison.
  6. [Section 4.1] The mechanism for mapping the threshold r to the reported attack success rates (10%, 20%, 40%) is under-specified; please state explicitly whether the SR values are targets achieved by tuning r for each method or simply the resulting values.
  7. [General] The PDF contains several garbled '/uni...' strings in the text (e.g., around Figure 3 and in Section 4.7); these appear to be rendering artifacts and should be removed or fixed.

Circularity Check

1 steps flagged · score 2.0 of 10

No significant circularity; one self-referential identity-information measurement is not load-bearing for the SOTA claim.

  1. self definitional [Section 4.7, Figure 6 and caption]
    "Furthermore, we quantitatively compare the overall and identity-related information in MFM features, as shown in Figure 6. First, we notice that a significant portion is identity-related, i.e., around 44% and 55% for X-ray and fundus images."

    The reported 'identity-related information' share is measured with the same learned mask M that defines the identity codes Qid = Q ⊙ M in Eq. (3). The mask is trained so that Qid reconstructs the identity embedding, so the measured bpp share of 'identity codes' is, by construction, the share of codes the network was forced to allocate to identity reconstruction. It is not an independent confirmation that Qsem = (1-M) ⊗ Q is identity-free. This measurement appears only as an analysis result, not as evidence for the headline SOTA comparison, which is evaluated with a held-out VisionMamba ReID model and external downstream tasks.

full rationale

The paper's central empirical claim is tested against independent evidence: downstream classification, captioning, and segmentation on held-out datasets, and attack success measured with a VisionMamba ReID model different from the ViT used to build the ID-blocking and decoupling losses. The decoupling loss (Eq. 3) enforces that Qid predicts the training identity embedding, and the final privacy evaluation uses an external attacker, so the core result does not reduce to its own training objective. The only self-referential element is the Figure 6 'identity share' measurement, which quantifies the codelength of the codes already labeled as identity-associated by the learned mask; it is not used to justify the SOTA performance claim. Self-citations appear only in related-work and background contexts, not as load-bearing support for the method's validity. Residual-identity risk in Qsem is a correctness limitation rather than a circular derivation: the paper asserts, but does not prove, that the complement of the identity mask is identity-free.

Assumptions & free parameters 3 free parameters · 5 assumptions · 0 invented entities

The central privacy utility claim rests on an untested separability assumption between identity and semantics in a learned code space, plus the use of pretrained MFMs and a ViT ReID model to define identity. No new physical entities are introduced; free parameters are the codelength weight, identity-blocking thresholds, and privacy metric thresholds.

free parameters (3)
  • Codelength loss weight beta = 0.5
    Balances reconstruction and codelength in Equations (1) and (3); the ablation in Figure 7 shows strong sensitivity, with beta=0.1 raising CMC-R1 from 5.85% to 12.34%.
  • Identity-blocking threshold quantiles r = [0.95, 0.7, 0.4, 0.2]
    The r-th quantile of the identity similarity map defines the privacy level in ID-Blocking; these values are user-selected to cover the tested privacy range.
  • ID-R privacy thresholds = 1.1 (X-ray), 1.35 (fundus)
    Distance thresholds for the recognition-rate privacy metric on ChestX-Det and REFUGE2 are set from validation statistics of MIMIC-X and EyePACS, directly affecting reported privacy numbers.
assumptions (5)
  • ad hoc to paper MDL/minimum-codelength optimization separates identity and semantic information into distinct code groups.
    Section 3.3 states that MDL representations tend to capture independent information parts, then uses this to justify learning a mask M that removes identity; no formal theorem links codelength minimization to identity semantic separability.
  • domain assumption Identity-relevant regions in a medical image are localized by cosine similarity between local features and a global identity embedding from a ViT ReID model.
    Section 3.2 defines S[i] = cos(f[i], id) and blocks the top-similarity regions; this assumes spatial identity cues align with a single global identity embedding.
  • domain assumption Medical foundation model features (MGCA, RetFound) contain sufficient medical semantics to compensate blocked regions after identity codes are discarded.
    Section 3.2 and 3.4 rely on MFM features as the semantic source; if MFM features are too coarse or not aligned with the masked image, re-synthesis loses diagnostic detail.
  • standard math A learned GMM over integer codes approximates the true codelength H(Q).
    Borrowed from neural compression, e.g., Ballé et al., with K=3 components; this is a standard approximation but is not validated in the medical setting beyond the reported ablations.
  • domain assumption Diffusion re-synthesis transfers the provided semantics and blocked image into a realistic image without reintroducing identity.
    Section 3.4 assumes the dual-conditioned diffusion model maintains the privacy level of XnoID; the only evidence is the downstream ReID evaluation on limited attacker models.

how reviews work

0 comments
Cite this review

Pith. "Pith review of Semantics versus Identity: A Divide-and-Conquer Approach towards Adjustable Medical Image De-Identification." pith.science (2026). https://pith.science/paper/4WYYORXL

@misc{pith2026250721703,
  author       = {Pith},
  title        = {Pith review of: Semantics versus Identity: A Divide-and-Conquer Approach towards Adjustable Medical Image De-Identification},
  year         = {2026},
  howpublished = {\url{https://pith.science/paper/4WYYORXL}},
  note         = {Machine review of arXiv:2507.21703}
}
read the original abstract

Medical imaging has significantly advanced computer-aided diagnosis, yet its re-identification (ReID) risks raise critical privacy concerns, calling for de-identification (DeID) techniques. Unfortunately, existing DeID methods neither particularly preserve medical semantics, nor are flexibly adjustable towards different privacy levels. To address these issues, we propose a divide-and-conquer framework comprising two steps: (1) Identity-Blocking, which blocks varying proportions of identity-related regions, to achieve different privacy levels; and (2) Medical-Semantics-Compensation, which leverages pre-trained Medical Foundation Models (MFMs) to extract medical semantic features to compensate the blocked regions. Moreover, recognizing that features from MFMs may still contain residual identity information, we introduce a Minimum Description Length principle-based feature decoupling strategy, to effectively decouple and discard such identity components. Extensive evaluations against existing approaches across seven datasets and three downstream tasks, demonstrates our state-of-the-art performance.

Figures

Figures reproduced from arXiv: 2507.21703 by the authors.

Figure 1
Figure 1. (a) Given the query medical image, the ReID model can [PITH_FULL_IMAGE:figures/full_fig_p001_1.png] view at source ↗
Figure 2
Figure 2. Overview of the proposed divide-and-conquer framework, DCM-DeID. (a) [PITH_FULL_IMAGE:figures/full_fig_p003_2.png] view at source ↗
Figure 3
Figure 3. Identity-performance trade-off curves of various medical privacy protection methods. [PITH_FULL_IMAGE:figures/full_fig_p005_3.png] view at source ↗
Figures from the paper (3 more)
Figure 4
Figure 4. Figure 4: (Left) Ablation on the framework design. (Right) Abla￾tion study on the feature decoupling strategy. Original Ours w/oSem w/oDecouple /root/autodl-tmp/patient_triple/universal_identity/nih-chest- xrays_256px_protected0.7/images/00016313_000.png [PITH_FULL_IMAGE:figure…
Figure 5
Figure 5. Figure 5: Qualitative comparison of different variant models. The [PITH_FULL_IMAGE:figures/full_fig_p007_5.png]
Figure 6
Figure 6. Figure 6: Comparison of semantic and identity information in [PITH_FULL_IMAGE:figures/full_fig_p008_6.png]

Review history (2 revisions) →

Discussion (0). Continue with ORCID to comment.

Reference graph

Works this paper leans on

126 extracted references · 63 canonical work pages

  1. [1]

    Implementation of an anonymi- sation tool for clinical trials using a clinical trial proces- sor integrated with an existing trial patient data information system

    Kadek YE Aryanto, Andr ´e Broekema, Matthijs Oudkerk, and Peter MA van Ooijen. Implementation of an anonymi- sation tool for clinical trials using a clinical trial proces- sor integrated with an existing trial patient data information system. European radiology, 22:144–151, 2012. 1

    2012

  2. [2]

    End-to-end optimized image compression

    Johannes Ball ´e, Valero Laparra, and Eero P Simoncelli. End-to-end optimized image compression. arXiv preprint arXiv:1611.01704, 2016. 2, 4

    arXiv 2016

  3. [3]

    Variational image compression with a scale hyperprior

    Johannes Ball ´e, David Minnen, Saurabh Singh, Sung Jin Hwang, and Nick Johnston. Variational image compression with a scale hyperprior. arXiv preprint arXiv:1802.01436,

    arXiv

  4. [4]

    The min- imum description length principle in coding and model- ing

    Andrew Barron, Jorma Rissanen, and Bin Yu. The min- imum description length principle in coding and model- ing. IEEE transactions on information theory, 44(6):2743– 2760, 1998. 4

    1998

  5. [5]

    Rate-distortion theory

    Toby Berger. Rate-distortion theory. Wiley Encyclopedia of Telecommunications, 2003. 4

    2003

  6. [6]

    Digi- tal ocular fundus imaging: a review

    Rui Bernardes, Pedro Serranho, and Conceic ¸˜ao Lobo. Digi- tal ocular fundus imaging: a review. Ophthalmologica, 226 (4):161–181, 2011. 1

    2011

  7. [7]

    Optimizing the dice score and jaccard in- dex for medical image segmentation: Theory and prac- tice

    Jeroen Bertels, Tom Eelbode, Maxim Berman, Dirk Van- dermeulen, Frederik Maes, Raf Bisschops, and Matthew B Blaschko. Optimizing the dice score and jaccard in- dex for medical image segmentation: Theory and prac- tice. In Medical Image Computing and Computer Assisted Intervention–MICCAI 2019: 22nd International Confer- ence, Shenzhen, China, October 13–17...

    2019

  8. [8]

    Discriminative kernel convolution network for multi-label ophthalmic disease detection on imbalanced fundus image dataset

    Amit Bhati, Neha Gour, Pritee Khanna, and Aparajita Ojha. Discriminative kernel convolution network for multi-label ophthalmic disease detection on imbalanced fundus image dataset. Computers in Biology and Medicine, 153:106519,

Show all 126 references
  1. [9]

    The tao of inference in privacy-protected databases

    Vincent Bindschaedler, Paul Grubbs, David Cash, Thomas Ristenpart, and Vitaly Shmatikov. The tao of inference in privacy-protected databases. Cryptology ePrint Archive,

  2. [10]

    The relation be- tween the roc curve and the cmc

    Ruud M Bolle, Jonathan H Connell, Sharath Pankanti, Nalini K Ratha, and Andrew W Senior. The relation be- tween the roc curve and the cmc. In Fourth IEEE work- shop on automatic identification advanced technologies (AutoID’05), pages 15–20. IEEE, 2005. 6

    2005

  3. [11]

    The use of the area under the roc curve in the evaluation of machine learning algorithms

    Andrew P Bradley. The use of the area under the roc curve in the evaluation of machine learning algorithms. Pattern recognition, 30(7):1145–1159, 1997. 6

    1997

  4. [12]

    Personalized and invertible face de-identification by disen- tangled identity information manipulation

    Jingyi Cao, Bo Liu, Yunqian Wen, Rong Xie, and Li Song. Personalized and invertible face de-identification by disen- tangled identity information manipulation. In Proceedings of the IEEE/CVF international conference on computer vi- sion, pages 3334–3342, 2021. 1, 2

    2021

  5. [13]

    Crossvit: Cross-attention multi-scale vision transformer for image classification

    Chun-Fu Richard Chen, Quanfu Fan, and Rameswar Panda. Crossvit: Cross-attention multi-scale vision transformer for image classification. In Proceedings of the IEEE/CVF in- ternational conference on computer vision, pages 357–366,

  6. [14]

    Infogan: Interpretable rep- resentation learning by information maximizing generative adversarial nets

    Xi Chen, Yan Duan, Rein Houthooft, John Schulman, Ilya Sutskever, and Pieter Abbeel. Infogan: Interpretable rep- resentation learning by information maximizing generative adversarial nets. Advances in neural information process- ing systems, 29, 2016. 2

    2016

  7. [15]

    Generative ai in medical practice: in-depth exploration of privacy and se- curity challenges

    Yan Chen and Pouyan Esmaeilzadeh. Generative ai in medical practice: in-depth exploration of privacy and se- curity challenges. Journal of Medical Internet Research , 26:e53008, 2024. 2

    2024

  8. [16]

    Gaia: Rethinking action quality as- sessment for ai-generated videos

    Zijian Chen, Wei Sun, Yuan Tian, Jun Jia, Zicheng Zhang, Wang Jiarui, Ru Huang, Xiongkuo Min, Guangtao Zhai, and Wenjun Zhang. Gaia: Rethinking action quality as- sessment for ai-generated videos. Advances in Neural In- formation Processing Systems, 37:40111–40144, 2024. 2

    2024

  9. [17]

    Learned image compression with discretized gaus- sian mixture likelihoods and attention modules

    Zhengxue Cheng, Heming Sun, Masaru Takeuchi, and Jiro Katto. Learned image compression with discretized gaus- sian mixture likelihoods and attention modules. InProceed- ings of the IEEE/CVF conference on computer vision and pattern recognition, pages 7939–7948, 2020. 4

    2020

  10. [18]

    Big data, big tech, and protecting patient privacy

    I Glenn Cohen and Michelle M Mello. Big data, big tech, and protecting patient privacy. Jama, 322(12):1141–1142,

  11. [19]

    Elements of information theory

    Thomas M Cover. Elements of information theory . John Wiley & Sons, 1999. 4

    1999

  12. [20]

    Obfusca- tion of images via differential privacy: From facial images to general images

    William L Croft, J ¨org-R¨udiger Sack, and Wei Shi. Obfusca- tion of images via differential privacy: From facial images to general images. Peer-to-Peer Networking and Applica- tions, 14:1705–1733, 2021. 1, 2

    2021

  13. [21]

    Towards privacy-preserving recognition of human activities

    Ji Dai, Behrouz Saghafi, Jonathan Wu, Janusz Konrad, and Prakash Ishwar. Towards privacy-preserving recognition of human activities. In 2015 IEEE international conference on image processing (ICIP), pages 4238–4242. IEEE, 2015. 2

    2015

  14. [22]

    Imagenet: A large-scale hierarchical im- age database

    Jia Deng, Wei Dong, Richard Socher, Li-Jia Li, Kai Li, and Li Fei-Fei. Imagenet: A large-scale hierarchical im- age database. In 2009 IEEE conference on computer vision and pattern recognition, pages 248–255. Ieee, 2009. 5

    2009

  15. [23]

    Arcface: Additive angular margin loss for deep face recognition

    Jiankang Deng, Jia Guo, Niannan Xue, and Stefanos Zafeiriou. Arcface: Additive angular margin loss for deep face recognition. In Proceedings of the IEEE/CVF con- ference on computer vision and pattern recognition , pages 4690–4699, 2019. 2

    2019

  16. [24]

    Disentangled and controllable face image genera- tion via 3d imitative-contrastive learning

    Yu Deng, Jiaolong Yang, Dong Chen, Fang Wen, and Xin Tong. Disentangled and controllable face image genera- tion via 3d imitative-contrastive learning. In Proceedings of the IEEE/CVF conference on computer vision and pat- tern recognition, pages 5154–5163, 2020. 2

    2020

  17. [25]

    An im- age is worth 16x16 words: Transformers for image recog- nition at scale

    Alexey Dosovitskiy, Lucas Beyer, Alexander Kolesnikov, Dirk Weissenborn, Xiaohua Zhai, Thomas Unterthiner, Mostafa Dehghani, Matthias Minderer, Georg Heigold, Sylvain Gelly, Jakob Uszkoreit, and Neil Houlsby. An im- age is worth 16x16 words: Transformers for image recog- nitio...

    2021

  18. [26]

    Di- abetic retinopathy detection

    Emma Dugas, Jared, Jorge, and Will Cukierski. Di- abetic retinopathy detection. https : / / kaggle . com / competitions / diabetic - retinopathy - detection, 2015. Kaggle. 6

    2015

  19. [27]

    Overcoming barriers to data sharing with med- ical image generation: a comprehensive evaluation

    August DuMont Sch ¨utte, J ¨urgen Hetzel, Sergios Gatidis, Tobias Hepp, Benedikt Dietz, Stefan Bauer, and Patrick Schwab. Overcoming barriers to data sharing with med- ical image generation: a comprehensive evaluation. NPJ digital medicine, 4(1):141, 2021. 2

    2021

  20. [28]

    Differential privacy

    Cynthia Dwork. Differential privacy. In International col- loquium on automata, languages, and programming, pages 1–12. Springer, 2006. 1, 2

    2006

  21. [29]

    A deep-learning-based framework for identify- ing and localizing multiple abnormalities and assessing car- diomegaly in chest x-ray

    Weijie Fan, Yi Yang, Jing Qi, Qichuan Zhang, Cuiwei Liao, Li Wen, Shuang Wang, Guangxian Wang, Yu Xia, Qihua Wu, et al. A deep-learning-based framework for identify- ing and localizing multiple abnormalities and assessing car- diomegaly in chest x-ray. Nature Communications, 1...

    2024

  22. [30]

    Refuge2 challenge: A treasure trove for multi-dimension analysis and evaluation in glaucoma screening

    Huihui Fang, Fei Li, Junde Wu, Huazhu Fu, Xu Sun, Jaemin Son, Shuang Yu, Menglu Zhang, Chenglang Yuan, Cheng Bian, et al. Refuge2 challenge: A treasure trove for multi-dimension analysis and evaluation in glaucoma screening. arXiv preprint arXiv:2202.08994, 2022. 6

    2022 arXiv

  23. [31]

    Freesurfer

    Bruce Fischl. Freesurfer. Neuroimage, 62(2):774–781,

  24. [32]

    Deepfixcx: Explainable privacy- preserving image compression for medical image analysis

    Alex Gaudio, Asim Smailagic, Christos Faloutsos, Shreshta Mohan, Elvin Johnson, Yuhao Liu, Pedro Costa, and Aur´elio Campilho. Deepfixcx: Explainable privacy- preserving image compression for medical image analysis. Wiley interdisciplinary reviews: Data mining and knowl- edge ...

    2023

  25. [33]

    pydeface: A tool to remove facial features from mri images, 2012

    Satrajit Ghosh, Chris Gorgolewski, et al. pydeface: A tool to remove facial features from mri images, 2012. 1, 2

    2012

  26. [34]

    The minimum description length princi- ple

    Peter D Gr ¨unwald. The minimum description length princi- ple. MIT press, 2007. 2, 4

    2007

  27. [35]

    Password-conditioned anonymization and deanonymiza- tion with face identity transformers

    Xiuye Gu, Weixin Luo, Michael S Ryoo, and Yong Jae Lee. Password-conditioned anonymization and deanonymiza- tion with face identity transformers. In European confer- ence on computer vision , pages 727–743. Springer, 2020. 2

    2020

  28. [36]

    Anatomy-based registration of ct-scan and intraoperative x-ray images for guiding a sur- gical robot

    A Gueziec and P Kazanzides. Anatomy-based registration of ct-scan and intraoperative x-ray images for guiding a sur- gical robot. IEEE Transactions on Medical Imaging, 17(5): 715–728, 1998. 1

    1998

  29. [37]

    Deep residual learning for image recognition

    Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun. Deep residual learning for image recognition. In Proceed- ings of the IEEE conference on computer vision and pattern recognition, pages 770–778, 2016. 4

    2016

  30. [38]

    Masked autoencoders are scal- able vision learners

    Kaiming He, Xinlei Chen, Saining Xie, Yanghao Li, Piotr Doll´ar, and Ross Girshick. Masked autoencoders are scal- able vision learners. In Proceedings of the IEEE/CVF con- ference on computer vision and pattern recognition , pages 16000–16009, 2022. 5, 6

    2022

  31. [39]

    Transreid: Transformer-based object re- identification

    Shuting He, Hao Luo, Pichao Wang, Fan Wang, Hao Li, and Wei Jiang. Transreid: Transformer-based object re- identification. In Proceedings of the IEEE/CVF interna- tional conference on computer vision, pages 15013–15022,

  32. [40]

    In defense of the triplet loss for person re-identification

    Alexander Hermans, Lucas Beyer, and Bastian Leibe. In defense of the triplet loss for person re-identification. arXiv preprint arXiv:1703.07737, 2017. 3

    2017 arXiv

  33. [41]

    beta-vae: Learning ba- sic visual concepts with a constrained variational frame- work

    Irina Higgins, Loic Matthey, Arka Pal, Christopher Burgess, Xavier Glorot, Matthew Botvinick, Shakir Mo- hamed, and Alexander Lerchner. beta-vae: Learning ba- sic visual concepts with a constrained variational frame- work. In International conference on learning represen- tati...

    2017

  34. [42]

    On the (in) effectiveness of mosaicing and blur- ring as tools for document redaction

    Steven Hill, Zhimin Zhou, Lawrence Saul, and Hovav Shacham. On the (in) effectiveness of mosaicing and blur- ring as tools for document redaction. Proceedings on Pri- vacy Enhancing Technologies, 2016. 1, 2

    2016

  35. [43]

    Denoising dif- fusion probabilistic models

    Jonathan Ho, Ajay Jain, and Pieter Abbeel. Denoising dif- fusion probabilistic models. Advances in neural informa- tion processing systems, 33:6840–6851, 2020. 2, 4

    2020

  36. [44]

    3d-stylegan: A style-based genera- tive adversarial network for generative modeling of three- dimensional medical images

    Sungmin Hong, Razvan Marinescu, Adrian V Dalca, Anna K Bonkhoff, Martin Bretzner, Natalia S Rost, and Polina Golland. 3d-stylegan: A style-based genera- tive adversarial network for generative modeling of three- dimensional medical images. In Deep Generative Mod- els, and Data...

    2021

  37. [45]

    Synthstrip: skull-stripping for any brain image

    Andrew Hoopes, Jocelyn S Mora, Adrian V Dalca, Bruce Fischl, and Malte Hoffmann. Synthstrip: skull-stripping for any brain image. NeuroImage, 260:119474, 2022. 1, 2

    2022

  38. [46]

    Varfvv: View- adaptive real-time interactive free-view video streaming with edge computing

    Qiang Hu, Qihan He, Houqiang Zhong, Guo Lu, Xiaoyun Zhang, Guangtao Zhai, and Yanfeng Wang. Varfvv: View- adaptive real-time interactive free-view video streaming with edge computing. arXiv preprint arXiv:2501.13630 ,

    arXiv

  39. [47]

    4dgc: Rate-aware 4d gaussian compression for ef- ficient streamable free-viewpoint video

    Qiang Hu, Zihan Zheng, Houqiang Zhong, Sihua Fu, Li Song, Xiaoyun Zhang, Guangtao Zhai, and Yanfeng Wang. 4dgc: Rate-aware 4d gaussian compression for ef- ficient streamable free-viewpoint video. In Proceedings of the Computer Vision and Pattern Recognition Conference , pages ...

    2025

  40. [48]

    Vrvvc: Variable-rate nerf-based volumetric video compression

    Qiang Hu, Houqiang Zhong, Zihan Zheng, Xiaoyun Zhang, Zhengxue Cheng, Li Song, Guangtao Zhai, and Yanfeng Wang. Vrvvc: Variable-rate nerf-based volumetric video compression. In Proceedings of the AAAI Conference on Artificial Intelligence, pages 3563–3571, 2025. 2

    2025

  41. [49]

    Chest-diffusion: a light- weight text-to-image model for report-to-cxr generation

    Peng Huang, Xue Gao, Lihong Huang, Jing Jiao, Xiaokang Li, Yuanyuan Wang, and Yi Guo. Chest-diffusion: a light- weight text-to-image model for report-to-cxr generation. In 2024 IEEE International Symposium on Biomedical Imag- ing (ISBI), pages 1–5. IEEE, 2024. 8

    2024

  42. [50]

    nnu-net: a self- configuring method for deep learning-based biomedical im- age segmentation

    Fabian Isensee, Paul F Jaeger, Simon AA Kohl, Jens Petersen, and Klaus H Maier-Hein. nnu-net: a self- configuring method for deep learning-based biomedical im- age segmentation. Nature methods, 18(2):203–211, 2021. 6

    2021

  43. [51]

    Categorical reparameterization with gumbel-softmax

    Eric Jang, Shixiang Gu, and Ben Poole. Categorical reparameterization with gumbel-softmax. arXiv preprint arXiv:1611.01144, 2016. 4

    2016 arXiv

  44. [52]

    Mimic-cxr, a de- identified publicly available database of chest radiographs with free-text reports

    Alistair EW Johnson, Tom J Pollard, Seth J Berkowitz, Nathaniel R Greenbaum, Matthew P Lungren, Chih-ying Deng, Roger G Mark, and Steven Horng. Mimic-cxr, a de- identified publicly available database of chest radiographs with free-text reports. Scientific data, 6(1):317, 2019. 6

    2019

  45. [53]

    Secure, privacy-preserving and fed- erated machine learning in medical imaging

    Georgios A Kaissis, Marcus R Makowski, Daniel R ¨uckert, and Rickmer F Braren. Secure, privacy-preserving and fed- erated machine learning in medical imaging. Nature Ma- chine Intelligence, 2(6):305–311, 2020. 1

    2020

  46. [54]

    A style-based generator architecture for generative adversarial networks

    Tero Karras, Samuli Laine, and Timo Aila. A style-based generator architecture for generative adversarial networks. In Proceedings of the IEEE/CVF conference on computer vision and pattern recognition, pages 4401–4410, 2019. 2

    2019

  47. [55]

    Analyzing and im- proving the image quality of stylegan

    Tero Karras, Samuli Laine, Miika Aittala, Janne Hell- sten, Jaakko Lehtinen, and Timo Aila. Analyzing and im- proving the image quality of stylegan. In Proceedings of the IEEE/CVF conference on computer vision and pattern recognition, pages 8110–8119, 2020. 2

    2020

  48. [56]

    Privacy-net: an adversarial approach for identity-obfuscated segmentation of medical images

    Bach Ngoc Kim, Jose Dolz, Pierre-Marc Jodoin, and Chris- tian Desrosiers. Privacy-net: an adversarial approach for identity-obfuscated segmentation of medical images. IEEE Transactions on Medical Imaging, 40(7):1737–1749, 2021. 2, 5, 6

    2021

  49. [57]

    Patient privacy, pho- tographs, and publication

    Cody A Koch and Wayne F Larrabee. Patient privacy, pho- tographs, and publication. JAMA facial plastic surgery, 15 (5):335–336, 2013. 1

    2013

  50. [58]

    A novel cloud- assisted secure deep feature classification framework for cancer histopathology images

    Abhinav Kumar, Sanjay Kumar Singh, K Lakshmanan, Sonal Saxena, and Sameer Shrivastava. A novel cloud- assisted secure deep feature classification framework for cancer histopathology images. ACM Transactions on In- ternet Technology (TOIT), 21(2):1–22, 2021. 1, 2

    2021

  51. [59]

    Cxr-llava: a multimodal large language model for interpreting chest x-ray images

    Seowoo Lee, Jiwon Youn, Hyungjin Kim, Mansu Kim, and Soon Ho Yoon. Cxr-llava: a multimodal large language model for interpreting chest x-ray images. European Radi- ology, pages 1–13, 2025. 6

    2025

  52. [60]

    Agiqa-3k: An open database for ai-generated image quality assessment

    Chunyi Li, Zicheng Zhang, Haoning Wu, Wei Sun, Xiongkuo Min, Xiaohong Liu, Guangtao Zhai, and Weisi Lin. Agiqa-3k: An open database for ai-generated image quality assessment. IEEE Transactions on Circuits and Sys- tems for Video Technology, 34(8):6833–6846, 2023. 2

    2023

  53. [61]

    Information density principle for mllm benchmarks

    Chunyi Li, Xiaozhe Li, Zicheng Zhang, Yuan Tian, Ziheng Jia, Xiaohong Liu, Xiongkuo Min, Jia Wang, Haodong Duan, Kai Chen, et al. Information density principle for mllm benchmarks. arXiv preprint arXiv:2503.10079, 2025. 2

    2025 arXiv

  54. [62]

    Image quality assessment: From human to machine preference

    Chunyi Li, Yuan Tian, Xiaoyue Ling, Zicheng Zhang, Haodong Duan, Haoning Wu, Ziheng Jia, Xiaohong Liu, Xiongkuo Min, Guo Lu, et al. Image quality assessment: From human to machine preference. In Proceedings of the Computer Vision and Pattern Recognition Conference , pages 7570...

    2025

  55. [63]

    Perceptual quality assessment for embodied ai

    Chunyi Li, Jiaohao Xiao, Jianbo Zhang, Farong Wen, Zicheng Zhang, Yuan Tian, Xiangyang Zhu, Xiaohong Liu, Zhengxue Cheng, Weisi Lin, et al. Perceptual quality assessment for embodied ai. arXiv preprint arXiv:2505.16815, 2025. 2

    2025

  56. [64]

    Mixnmatch: Multifactor disentanglement and encoding for conditional image generation

    Yuheng Li, Krishna Kumar Singh, Utkarsh Ojha, and Yong Jae Lee. Mixnmatch: Multifactor disentanglement and encoding for conditional image generation. In Pro- ceedings of the IEEE/CVF conference on computer vision and pattern recognition, pages 8039–8048, 2020. 2

    2020

  57. [65]

    A structure-aware relation network for thoracic diseases detection and segmentation

    Jie Lian, Jingyu Liu, Shu Zhang, Kai Gao, Xiaoqing Liu, Dingwen Zhang, and Yizhou Yu. A structure-aware relation network for thoracic diseases detection and segmentation. IEEE Transactions on Medical Imaging, 40(8):2042–2052,

  58. [66]

    Adaptive downsampling to improve image compression at low bit rates

    Weisi Lin and Li Dong. Adaptive downsampling to improve image compression at low bit rates. IEEE Transactions on Image Processing, 15(9):2513–2521, 2006. 8

    2006

  59. [67]

    Decoupled weight decay regularization

    I Loshchilov. Decoupled weight decay regularization. arXiv preprint arXiv:1711.05101, 2017. 5, 6

    2017 arXiv

  60. [68]

    Sgdr: Stochastic gradient descent with warm restarts

    Ilya Loshchilov and Frank Hutter. Sgdr: Stochastic gradient descent with warm restarts. arXiv preprint arXiv:1608.03983, 2016. 6

    2016 arXiv

  61. [69]

    Introduction to continuous entropy

    Charles Marsh. Introduction to continuous entropy. De- partment of Computer Science, Princeton University, 1034,

  62. [70]

    Cia- gan: Conditional identity anonymization generative adver- sarial networks

    Maxim Maximov, Ismail Elezi, and Laura Leal-Taix ´e. Cia- gan: Conditional identity anonymization generative adver- sarial networks. In Proceedings of the IEEE/CVF confer- ence on computer vision and pattern recognition , pages 5447–5456, 2020. 2

    2020

  63. [71]

    Conditional probabil- ity models for deep image compression

    Fabian Mentzer, Eirikur Agustsson, Michael Tschannen, Radu Timofte, and Luc Van Gool. Conditional probabil- ity models for deep image compression. In Proceedings of the IEEE conference on computer vision and pattern recog- nition, pages 4394–4402, 2018. 4

    2018

  64. [72]

    Finite scalar quantization: Vq-vae made simple

    Fabian Mentzer, David Minnen, Eirikur Agustsson, and Michael Tschannen. Finite scalar quantization: Vq-vae made simple. arXiv preprint arXiv:2309.15505, 2023. 4

    2023 arXiv

  65. [73]

    Joint autoregressive and hierarchical priors for learned im- age compression

    David Minnen, Johannes Ball ´e, and George D Toderici. Joint autoregressive and hierarchical priors for learned im- age compression. Advances in neural information process- ing systems, 31, 2018. 4

    2018

  66. [74]

    A de-identification pipeline for ultrasound medical images in dicom format

    Eriksson Monteiro, Carlos Costa, and Jos ´e Lu´ıs Oliveira. A de-identification pipeline for ultrasound medical images in dicom format. Journal of Medical Systems, 41(5):89, 2017. 1

    2017

  67. [75]

    Foundation models for generalist medical artificial intelligence

    Michael Moor, Oishi Banerjee, Zahra Shakeri Hossein Abad, Harlan M Krumholz, Jure Leskovec, Eric J Topol, and Pranav Rajpurkar. Foundation models for generalist medical artificial intelligence. Nature, 616(7956):259–265,

  68. [76]

    Context-guided spatial feature recon- struction for efficient semantic segmentation

    Zhenliang Ni, Xinghao Chen, Yingjie Zhai, Yehui Tang, and Yunhe Wang. Context-guided spatial feature recon- struction for efficient semantic segmentation. In European Conference on Computer Vision, pages 239–255. Springer,

  69. [77]

    Deep learning-based patient re-identification is able to ex- ploit the biometric nature of medical chest x-ray data

    Kai Packh ¨auser, Sebastian G ¨undel, Nicolas M ¨unster, Christopher Syben, Vincent Christlein, and Andreas Maier. Deep learning-based patient re-identification is able to ex- ploit the biometric nature of medical chest x-ray data. Sci- entific Reports, 12(1):14851, 2022. 1

    2022

  70. [78]

    Deep learning-based anonymization of chest radiographs: a utility-preserving measure for patient privacy

    Kai Packh ¨auser, Sebastian G ¨undel, Florian Thamm, Fe- lix Denzinger, and Andreas Maier. Deep learning-based anonymization of chest radiographs: a utility-preserving measure for patient privacy. In International Conference on Medical Image Computing and Computer-Assisted In-...

    2023

  71. [79]

    Public-key cryptosystems based on compos- ite degree residuosity classes

    Pascal Paillier. Public-key cryptosystems based on compos- ite degree residuosity classes. In International conference on the theory and applications of cryptographic techniques, pages 223–238. Springer, 1999. 2

    1999

  72. [80]

    Bleu: a method for automatic evaluation of machine translation

    Kishore Papineni, Salim Roukos, Todd Ward, and Wei-Jing Zhu. Bleu: a method for automatic evaluation of machine translation. In Proceedings of the 40th annual meeting of the Association for Computational Linguistics, pages 311– 318, 2002. 6

    2002

  73. [81]

    Pytorch: An imperative style, high-performance deep learning library

    Adam Paszke, Sam Gross, Francisco Massa, Adam Lerer, James Bradbury, Gregory Chanan, Trevor Killeen, Zeming Lin, Natalia Gimelshein, Luca Antiga, et al. Pytorch: An imperative style, high-performance deep learning library. Advances in neural information processing systems , 32,

  74. [82]

    Nicholson Price and I

    W. Nicholson Price and I. Glenn Cohen. Privacy in the age of medical big data. Nature Medicine, 25(1):37–43, 2019. 1

    2019

  75. [83]

    P3: Toward{Privacy-Preserving} photo sharing

    Moo-Ryong Ra, Ramesh Govindan, and Antonio Ortega. P3: Toward{Privacy-Preserving} photo sharing. In 10th USENIX Symposium on Networked Systems Design and Im- plementation (NSDI 13), pages 515–528, 2013. 2

    2013

  76. [84]

    Learn- ing transferable visual models from natural language super- vision

    Alec Radford, Jong Wook Kim, Chris Hallacy, Aditya Ramesh, Gabriel Goh, Sandhini Agarwal, Girish Sastry, Amanda Askell, Pamela Mishkin, Jack Clark, et al. Learn- ing transferable visual models from natural language super- vision. In International conference on machine learning...

    2021

  77. [85]

    Gaussian mixture models

    Douglas A Reynolds et al. Gaussian mixture models. En- cyclopedia of biometrics, 741(659-663):3, 2009. 4

    2009

  78. [86]

    An open source toolkit for medical imaging de-identification

    David Rodr ´ıguez Gonz ´alez, Trevor Carpenter, Jano I van Hemert, and Joanna Wardlaw. An open source toolkit for medical imaging de-identification. European radiology, 20: 1896–1904, 2010. 1

    1904

  79. [87]

    High-resolution image synthesis with latent diffusion models

    Robin Rombach, Andreas Blattmann, Dominik Lorenz, Patrick Esser, and Bj ¨orn Ommer. High-resolution image synthesis with latent diffusion models. In Proceedings of the IEEE/CVF conference on computer vision and pattern recognition, pages 10684–10695, 2022. 2, 4, 5

    2022

  80. [88]

    Under- diagnosis bias of artificial intelligence algorithms applied to chest radiographs in under-served patient populations

    Laleh Seyyed-Kalantari, Haoran Zhang, Matthew BA Mc- Dermott, Irene Y Chen, and Marzyeh Ghassemi. Under- diagnosis bias of artificial intelligence algorithms applied to chest radiographs in under-served patient populations. Na- ture medicine, 27(12):2176–2182, 2021. 1

    2021

  81. [89]

    Rethinking controllable variational autoencoders

    Huajie Shao, Yifei Yang, Haohong Lin, Longzhong Lin, Yizhuo Chen, Qinmin Yang, and Han Zhao. Rethinking controllable variational autoencoders. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, pages 19250–19259, 2022. 2

    2022

  82. [90]

    Taitsman, Christi Macrina Grimm, and Shantanu Agrawal

    Julie K. Taitsman, Christi Macrina Grimm, and Shantanu Agrawal. Protecting patient privacy and data security. New England Journal of Medicine, 368(11):977–979, 2013. 1

    2013

  83. [91]

    Our bodies, our data: how companies make billions selling our medical records

    Adam Tanner. Our bodies, our data: how companies make billions selling our medical records. Beacon Press, 2017. 1

    2017

  84. [92]

    Fairness and privacy preservation for facial images: Gan-based methods

    Huan Tian, Tianqing Zhu, and Wanlei Zhou. Fairness and privacy preservation for facial images: Gan-based methods. Computers & Security, 122:102902, 2022. 2

    2022

  85. [93]

    Self- conditioned probabilistic learning of video rescaling

    Yuan Tian, Guo Lu, Xiongkuo Min, Zhaohui Che, Guang- tao Zhai, Guodong Guo, and Zhiyong Gao. Self- conditioned probabilistic learning of video rescaling. In Proceedings of the IEEE/CVF international conference on computer vision, pages 4490–4499, 2021. 2

    2021

  86. [94]

    Ean: event adaptive network for enhanced action recognition

    Yuan Tian, Yichao Yan, Guangtao Zhai, Guodong Guo, and Zhiyong Gao. Ean: event adaptive network for enhanced action recognition. International Journal of Computer Vi- sion, 130(10):2453–2471, 2022. 2

    2022

  87. [95]

    Non-semantics suppressed mask learning for unsupervised video semantic compression

    Yuan Tian, Guo Lu, Guangtao Zhai, and Zhiyong Gao. Non-semantics suppressed mask learning for unsupervised video semantic compression. In Proceedings of the IEEE/CVF International Conference on Computer Vision , pages 13610–13622, 2023. 2

    2023

  88. [96]

    Clsa: a contrastive learning framework with se- lective aggregation for video rescaling

    Yuan Tian, Yichao Yan, Guangtao Zhai, Li Chen, and Zhiy- ong Gao. Clsa: a contrastive learning framework with se- lective aggregation for video rescaling. IEEE Transactions on Image Processing, 32:1300–1314, 2023. 2

    2023

  89. [97]

    A coding framework and benchmark to- wards low-bitrate video understanding

    Yuan Tian, Guo Lu, Yichao Yan, Guangtao Zhai, Li Chen, and Zhiyong Gao. A coding framework and benchmark to- wards low-bitrate video understanding. IEEE Transactions on Pattern Analysis and Machine Intelligence, 2024. 2

    2024

  90. [98]

    Free-vsc: Free semantics from visual foundation models for unsupervised video semantic compression

    Yuan Tian, Guo Lu, and Guangtao Zhai. Free-vsc: Free semantics from visual foundation models for unsupervised video semantic compression. In European Conference on Computer Vision, pages 163–183. Springer, 2024

    2024

  91. [99]

    Smc++: Masked learning of unsupervised video semantic compression

    Yuan Tian, Guo Lu, and Guangtao Zhai. Smc++: Masked learning of unsupervised video semantic compression. arXiv preprint arXiv:2406.04765, 2024. 2

    2024

  92. [100]

    Towards all-in-one medical image re-identification

    Yuan Tian, Kaiyuan Ji, Rongzhao Zhang, Yankai Jiang, Chunyi Li, Xiaosong Wang, and Guangtao Zhai. Towards all-in-one medical image re-identification. In Proceedings of the Computer Vision and Pattern Recognition Confer- ence, pages 30774–30786, 2025. 1

    2025

  93. [101]

    Medi- cal manifestation-aware de-identification

    Yuan Tian, Shuo Wang, and Guangtao Zhai. Medi- cal manifestation-aware de-identification. In Proceedings of the AAAI Conference on Artificial Intelligence , pages 26363–26372, 2025. 2

    2025

  94. [102]

    Cryptagram: Photo privacy for online social media

    Matt Tierney, Ian Spiro, Christoph Bregler, and Lakshmi- narayanan Subramanian. Cryptagram: Photo privacy for online social media. In Proceedings of the first ACM con- ference on Online social networks, pages 75–88, 2013. 2

    2013

  95. [103]

    Automatic selective re- moval of embedded patient information from image content of dicom files

    Gary Kin-wai Tsui and Tao Chan. Automatic selective re- moval of embedded patient information from image content of dicom files. American Journal of Roentgenology, 198(4): 769–772, 2012. 1

    2012

  96. [104]

    Nishant Vishwamitra, Bart Knijnenburg, Hongxin Hu, Yi- fang P Kelly Caine, et al. Blur vs. block: Investigating the effectiveness of privacy-enhancing obfuscation for images. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition Workshops, pages 39–4...

    2017

  97. [105]

    Med-unic: Unifying cross-lingual medical vision- language pre-training by diminishing bias

    Zhongwei Wan, Che Liu, Mi Zhang, Jie Fu, Benyou Wang, Sibo Cheng, Lei Ma, C ´esar Quilodr´an-Casas, and Rossella Arcucci. Med-unic: Unifying cross-lingual medical vision- language pre-training by diminishing bias. Advances in Neural Information Processing Systems, 36, 2024. 6

    2024

  98. [106]

    Multi-granularity cross-modal alignment for generalized medical visual representation learning

    Fuying Wang, Yuyin Zhou, Shujun Wang, Varut Vardhan- abhuti, and Lequan Yu. Multi-granularity cross-modal alignment for generalized medical visual representation learning. Advances in Neural Information Processing Sys- tems, 35:33536–33549, 2022. 3, 5

    2022

  99. [107]

    A deep-learning pipeline for the diagnosis and discrimination of viral, non-viral and covid- 19 pneumonia from chest x-ray images

    Guangyu Wang, Xiaohong Liu, Jun Shen, Chengdi Wang, Zhihuan Li, Linsen Ye, Xingwang Wu, Ting Chen, Kai Wang, Xuan Zhang, et al. A deep-learning pipeline for the diagnosis and discrimination of viral, non-viral and covid- 19 pneumonia from chest x-ray images. Nature biomedical ...

    2021

  100. [108]

    Self-improving generative foundation model for synthetic medical image generation and clinical applications

    Jinzhuo Wang, Kai Wang, Yunfang Yu, Yuxing Lu, Wen- chao Xiao, Zhuo Sun, Fei Liu, Zixing Zou, Yuanxu Gao, Lei Yang, et al. Self-improving generative foundation model for synthetic medical image generation and clinical applications. Nature Medicine, pages 1–9, 2024. 8

    2024

  101. [109]

    Face- mae: Privacy-preserving face recognition via masked au- toencoders

    Kai Wang, Bo Zhao, Xiangyu Peng, Zheng Zhu, Jiankang Deng, Xinchao Wang, Hakan Bilen, and Yang You. Face- mae: Privacy-preserving face recognition via masked au- toencoders. arXiv preprint arXiv:2205.11090, 2022. 1, 6

    2022 arXiv

  102. [110]

    A semantic conditional diffusion model for enhanced personal privacy preservation in medical images

    Shudong Wang, Zhiyuan Zhao, Yawu Zhao, Luqi Wang, Yuanyuan Zhang, Jiehuan Wang, Sibo Qiao, and Zhihan Lyu. A semantic conditional diffusion model for enhanced personal privacy preservation in medical images. IEEE Journal of Biomedical and Health Informatics, 2024. 2

    2024

  103. [111]

    Encrypted image classification based on multilayer extreme learning machine

    Weiru Wang, Chi-Man V ong, Yilong Yang, and Pak-Kin Wong. Encrypted image classification based on multilayer extreme learning machine. Multidimensional Systems and Signal Processing, 28(3):851–865, 2017. 2

    2017

  104. [112]

    Mm-retinal: Knowledge-enhanced foundational pretraining with fundus image-text expertise

    Ruiqi Wu, Chenran Zhang, Jianle Zhang, Yi Zhou, Tao Zhou, and Huazhu Fu. Mm-retinal: Knowledge-enhanced foundational pretraining with fundus image-text expertise. In International Conference on Medical Image Comput- ing and Computer-Assisted Intervention , pages 722–732. Sprin...

    2024

  105. [113]

    Dp-image: Differential privacy for image data in feature space

    Hanyu Xue, Bo Liu, Ming Ding, Tianqing Zhu, Dayong Ye, Li Song, and Wanlei Zhou. Dp-image: Differential privacy for image data in feature space. arXiv preprint arXiv:2103.07073, 2021. 1, 2

    2021 arXiv

  106. [114]

    One-step diffusion with distribution matching distillation

    Tianwei Yin, Micha ¨el Gharbi, Richard Zhang, Eli Shecht- man, Fredo Durand, William T Freeman, and Taesung Park. One-step diffusion with distribution matching distillation. In Proceedings of the IEEE/CVF conference on computer vision and pattern recognition, pages 6613–6623, 2024. 8

    2024

  107. [115]

    Privacy-preserving photo sharing based on a secure jpeg

    Lin Yuan, Pavel Korshunov, and Touradj Ebrahimi. Privacy-preserving photo sharing based on a secure jpeg. In 2015 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), pages 185–190. IEEE,

    2015

  108. [116]

    Se- cure jpeg scrambling enabling privacy in photo sharing

    Lin Yuan, Pavel Korshunov, and Touradj Ebrahimi. Se- cure jpeg scrambling enabling privacy in photo sharing. In 2015 11th IEEE International Conference and Workshops on Automatic Face and Gesture Recognition (FG) , pages 1–6. IEEE, 2015. 2

    2015

  109. [117]

    Autoencoder and its various variants

    Junhai Zhai, Sufang Zhang, Junfen Chen, and Qiang He. Autoencoder and its various variants. In 2018 IEEE in- ternational conference on systems, man, and cybernetics (SMC), pages 415–419. IEEE, 2018. 5, 6

    2018

  110. [118]

    On the challenges and perspectives of foundation models for medical image analysis

    Shaoting Zhang and Dimitris Metaxas. On the challenges and perspectives of foundation models for medical image analysis. Medical image analysis, 91:102996, 2024. 2

    2024

  111. [119]

    Adacos: Adaptively scaling cosine logits for effectively learning deep face representations

    Xiao Zhang, Rui Zhao, Yu Qiao, Xiaogang Wang, and Hongsheng Li. Adacos: Adaptively scaling cosine logits for effectively learning deep face representations. In Pro- ceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, pages 10823–10832, 2019. 2

    2019

  112. [120]

    Aibench: Towards trustworthy evaluation under the 45° law

    Zicheng Zhang, Junying Wang, Yijin Guo, Farong Wen, Zijian Chen, Hanqing Wang, Wenzhe Li, Lu Sun, Yingjie Zhou, Jianbo Zhang, Bowen Yan, Ziheng Jia, Jiahao Xiao, Yuan Tian, Xiangyang Zhu, Kaiwei Zhang, Chunyi Li, Xi- aohong Liu, Xiongkuo Min, Qi Jia, and Guangtao Zhai. Aibench...

    2025

  113. [121]

    Generalized ra- diograph representation learning via cross-supervision be- tween images and free-text radiology reports

    Hong-Yu Zhou, Xiaoyu Chen, Yinghao Zhang, Ruibang Luo, Liansheng Wang, and Yizhou Yu. Generalized ra- diograph representation learning via cross-supervision be- tween images and free-text radiology reports. Nature Ma- chine Intelligence, 4(1):32–40, 2022. 1

    2022

  114. [122]

    Ctrl-genaug: Controllable generative augmen- tation for medical sequence classification

    Xinrui Zhou, Yuhao Huang, Haoran Dou, Shijing Chen, Ao Chang, Jia Liu, Weiran Long, Jian Zheng, Erjiao Xu, Jie Ren, et al. Ctrl-genaug: Controllable generative augmen- tation for medical sequence classification. arXiv preprint arXiv:2409.17091, 2024. 8

    2024

  115. [123]

    A foundation model for generalizable disease detection from retinal images

    Yukun Zhou, Mark A Chia, Siegfried K Wagner, Murat S Ayhan, Dominic J Williamson, Robbert R Struyven, Tim- ing Liu, Moucheng Xu, Mateo G Lozano, Peter Woodward- Court, et al. A foundation model for generalizable disease detection from retinal images. Nature, 622(7981):156–163,

  116. [124]

    Vision mamba: Efficient visual representation learning with bidirectional state space model

    Lianghui Zhu, Bencheng Liao, Qian Zhang, Xinlong Wang, Wenyu Liu, and Xinggang Wang. Vision mamba: Efficient visual representation learning with bidirectional state space model. In Proceedings of the 41st International Conference on Machine Learning, pages 62429–62442. PMLR, 2024. 3

    2024

  117. [125]

    An automatic system to detect and extract texts in medical images for de-identification

    Yingxuan Zhu, PD Singh, Khan Siddiqui, and Michael Gillam. An automatic system to detect and extract texts in medical images for de-identification. In Medical Imag- ing 2010: Advanced PACS-based Imaging Informatics and Therapeutic Applications, page 762803. SPIE, 2010. 1

    2010

  118. [126]

    Cryptoimg: Privacy preserving process- ing over encrypted images

    M Tarek Ibn Ziad, Amr Alanwar, Moustafa Alzantot, and Mani Srivastava. Cryptoimg: Privacy preserving process- ing over encrypted images. In 2016 IEEE Conference on Communications and Network Security (CNS), pages 570–

    2016

Pith tools

Reviewed August 15, 2026 · model on record in the stance chip above.