Anonymization Defense GUARD (GUarding Anonymization pRoceDures)

Purpose and goal: Investigate and address vulnerabilities in using facial manipulation-based anonymisation methods. Expected results and effects:

The project is expected to help Sweden and Swedish industry to comply with privacy legislations while facilitating data sharing and collaboration on data driven and AI tasks. Establishing a strong basis to commercialise anonymization-based technology specifically designed to minimise the impact on data quality.

Approach and implementation: The project is a cooperation between Halmstad University, RISE and the consultancy Engage Studios. The work will

1)investigate possible types of attacks (such as reconstruction or adversarial attacks) that may cause risks with regards to the anonymization method. 2)develop defense mechanisms to prevent the attack types investigated in the previous step.

3)explore the robustness of the anonymization method. Two groups of robustness insurance are targeted: (i) robustness to changes in input data and (ii) robustness in the case of insufficient anonymizations.