create account

Can AI Defeat Image Obfuscation? by condra

View this thread on: hive.blogpeakd.comecency.com
· @condra ·
$7.29
Can AI Defeat Image Obfuscation?
It's easy to obfuscate an image beyond recognition. But what if you want to discriminate only against robots?
-

<center>
![ttt.jpg](https://images.hive.blog/DQmeJkgaSwfFowF8idEJGhC8KqFBpsNj8L3Syww48zGmRwq/ttt.jpg)</center>

Much like humans, AI doesn't tend to "un-grow". Academic studies are shared, experiments are conducted, and the capability of your average artificial neural network, swells, year on year. The field of automated image analysis has broad applications, such as [reconstructing images after common obfuscation techniques, such as pixilation or blurring have been applied.](https://deepai.org/publication/defeating-image-obfuscation-with-deep-learning) The ability of artificial intelligence to make sense of images has [improved a great deal in recent years,](https://www.wired.com/2016/09/machine-learning-can-identify-pixelated-faces-researchers-show/) as can be demonstrated by uploading an image to [Googles Vision AI.](https://cloud.google.com/vision/)

I recently wondered how well a tool like Vision AI might cope with obfuscated images. Sure, if you don't want an image to be recognizable to AI, you can use any number of tools, to destroy any semblance of the original, but what if you want an image that makes sense to humans, while mystifying AI? One application for this need would be in a [HOSP, or a Human-Only Solvable Puzzle, a bit like a CAPTCHA.](https://www.gizmodo.com.au/2013/10/these-rorschach-ink-tests-could-replace-the-good-old-captcha/)

So let's have a look at what Vision AI can do, with a photo I took of the wonderful @eriluks...

<center>
![99999990.jpg](https://images.hive.blog/DQmcZfZZVBAo4eSU4KKU7K8ULazrioDPrsTUDLT7Eqw8K9u/99999990.jpg)
</center>

How would you describe this photo? Your description most likely weighs the significant elements perfectly, and even infers some *meaning*. Let's see what Vision AI thinks. 


<center>
![888i8i8i.jpg](https://images.hive.blog/DQmVWC6JFjv6mg4vBXQ7CGddBdFe9cVsrKxAE4vPSLcWwYm/888i8i8i.jpg)</center>

Great job at analyzing the objects, but what about the story/meaning?

<center>
![555tt.jpg](https://images.hive.blog/DQmTc7cJaWS7gYUwrxZXLg1w7ThjohhMaTxnVtECgvyMV8d/555tt.jpg)
</center>

I don't know about you, but I'm impressed. I tried this with a number of images, and it did really well almost every time. As you can see below, it can also analyze facial expression to conclude that "confidence" is the subjects mood. On it's own or even [as part of a sequence,](https://steemkr.com/blockchain/@condra/idena-network-how-to-make-a-good-flip) this image would surely be very easily "understood" by AI.

<center>
![77766.jpg](https://images.hive.blog/DQmamo93JEpiDAN62aULkt2PYVMV5Ztp4JaB1BPFeWRYGHM/77766.jpg)
</center>
 If the application is a Turing Test or HOSP, it would surely be ideal to use images that were more easily understood by humans, while remaining mysterious to AI. These semi-abstract images might have to be generated on the fly, or encrypted at the very least, as any image online for longer than a few minutes will likely get the full Google spider treatment, including SEO analysis of related text, links, etc. 

Below you can see some examples of distortions I made to the image. Keep in mind, the idea is to throw off images analysis while keeping the image coherent to humans. Techniques I tried were pixilation, line art, painting style, and Photoshops Cutout Filter. I've presented them in that order. 

<center>
![ffff.PNG](https://images.hive.blog/DQmNxxodNjN6BvMyCuhJkD2SqBNw8hAmFpWbH7syZNZmkuF/ffff.PNG)
</center>

<center>
![ff344t34.PNG](https://images.hive.blog/DQmQwBDmhayvt8m1FARe1WzBjQ48VJ4edjsHoWwjHqNcqak/ff344t34.PNG)
</center>


<center>
![444rrr.jpg](https://images.hive.blog/DQmVqpkjB3BDhPJLAgSPpDdkhLrZTGyqiS8PoiL2AeuLbiW/444rrr.jpg)
</center>


<center>
![fffreg.PNG](https://images.hive.blog/DQmaEba4TiqhdmvTFa1sJF32yH8AqUZYgRiQdjFpnkLDKpv/fffreg.PNG)</center>

Although the cutout filter threw AI the most, it also pushes the limits of human perception. Still, having only tried a handful of options out of an endless number of obfuscation methods, I'm hopeful that automated image obfuscation could be used to effectively discriminate against AI, at least for now!

***
Further reading:
[AI Can Recognize Your Face Even If You’re Pixelated](https://www.wired.com/2016/09/machine-learning-can-identify-pixelated-faces-researchers-show/)
[Vision AI](https://cloud.google.com/vision/)
[AI, Decentralization And The Captcha Arms Race](https://hive.blog/hive-122108/@condra/ai-decentralization-and-the-captcha-arms-race)
[Proof Of Person Blockchain Project](https://www.youtube.com/watch?v=8nsDJJzyth4)
πŸ‘  , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , and 398 others
properties (23)
authorcondra
permlinkcan-ai-defeat-image-obfuscation
categoryhive-122108
json_metadata{"tags":["science","blockchain","spam","life","technology"],"users":["eriluks"],"image":["https://images.hive.blog/DQmeJkgaSwfFowF8idEJGhC8KqFBpsNj8L3Syww48zGmRwq/ttt.jpg","https://images.hive.blog/DQmcZfZZVBAo4eSU4KKU7K8ULazrioDPrsTUDLT7Eqw8K9u/99999990.jpg","https://images.hive.blog/DQmVWC6JFjv6mg4vBXQ7CGddBdFe9cVsrKxAE4vPSLcWwYm/888i8i8i.jpg","https://images.hive.blog/DQmTc7cJaWS7gYUwrxZXLg1w7ThjohhMaTxnVtECgvyMV8d/555tt.jpg","https://images.hive.blog/DQmamo93JEpiDAN62aULkt2PYVMV5Ztp4JaB1BPFeWRYGHM/77766.jpg","https://images.hive.blog/DQmNxxodNjN6BvMyCuhJkD2SqBNw8hAmFpWbH7syZNZmkuF/ffff.PNG","https://images.hive.blog/DQmQwBDmhayvt8m1FARe1WzBjQ48VJ4edjsHoWwjHqNcqak/ff344t34.PNG","https://images.hive.blog/DQmVqpkjB3BDhPJLAgSPpDdkhLrZTGyqiS8PoiL2AeuLbiW/444rrr.jpg","https://images.hive.blog/DQmaEba4TiqhdmvTFa1sJF32yH8AqUZYgRiQdjFpnkLDKpv/fffreg.PNG"],"links":["https://deepai.org/publication/defeating-image-obfuscation-with-deep-learning","https://www.wired.com/2016/09/machine-learning-can-identify-pixelated-faces-researchers-show/","https://cloud.google.com/vision/","https://www.gizmodo.com.au/2013/10/these-rorschach-ink-tests-could-replace-the-good-old-captcha/","https://steemkr.com/blockchain/@condra/idena-network-how-to-make-a-good-flip","https://hive.blog/hive-122108/@condra/ai-decentralization-and-the-captcha-arms-race","https://www.youtube.com/watch?v=8nsDJJzyth4"],"app":"hiveblog/0.1","format":"markdown"}
created2020-04-15 01:12:03
last_update2020-04-15 01:12:03
depth0
children4
last_payout2020-04-22 01:12:03
cashout_time1969-12-31 23:59:59
total_payout_value3.670 HBD
curator_payout_value3.624 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length4,649
author_reputation56,189,611,335,832
root_title"Can AI Defeat Image Obfuscation?"
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id96,845,083
net_rshares22,056,712,870,956
author_curate_reward""
vote details (462)
@demotruk ·
I miss @eriluks being on here :-(
πŸ‘  
properties (23)
authordemotruk
permlinkre-condra-q8tqwv
categoryhive-122108
json_metadata{"tags":["hive-122108"],"app":"peakd/2020.03.14"}
created2020-04-15 10:10:09
last_update2020-04-15 10:10:09
depth1
children1
last_payout2020-04-22 10:10:09
cashout_time1969-12-31 23:59:59
total_payout_value0.000 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length33
author_reputation278,747,146,820,861
root_title"Can AI Defeat Image Obfuscation?"
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id96,849,695
net_rshares27,506,126,109
author_curate_reward""
vote details (1)
@condra ·
$0.14
Hey dude. Agreed. She ended up getting an IT job after graduation so she's been super busy, but we're still in touch.
πŸ‘  
properties (23)
authorcondra
permlinkq8tzmu
categoryhive-122108
json_metadata{"app":"hiveblog/0.1"}
created2020-04-15 13:18:33
last_update2020-04-15 13:18:33
depth2
children0
last_payout2020-04-22 13:18:33
cashout_time1969-12-31 23:59:59
total_payout_value0.070 HBD
curator_payout_value0.070 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length117
author_reputation56,189,611,335,832
root_title"Can AI Defeat Image Obfuscation?"
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id96,851,375
net_rshares678,606,286,069
author_curate_reward""
vote details (1)
@vikisecrets ·
Fascinating!
πŸ‘  
properties (23)
authorvikisecrets
permlinkre-condra-q8trfw
categoryhive-122108
json_metadata{"tags":["hive-122108"],"app":"peakd/2020.03.14"}
created2020-04-15 10:21:33
last_update2020-04-15 10:21:33
depth1
children1
last_payout2020-04-22 10:21:33
cashout_time1969-12-31 23:59:59
total_payout_value0.000 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length12
author_reputation1,186,995,091,736,203
root_title"Can AI Defeat Image Obfuscation?"
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id96,849,773
net_rshares26,955,386,311
author_curate_reward""
vote details (1)
@condra ·
$0.03
Thanks V!
πŸ‘  
properties (23)
authorcondra
permlinkq8u0sl
categoryhive-122108
json_metadata{"app":"hiveblog/0.1"}
created2020-04-15 13:43:36
last_update2020-04-15 13:43:36
depth2
children0
last_payout2020-04-22 13:43:36
cashout_time1969-12-31 23:59:59
total_payout_value0.013 HBD
curator_payout_value0.013 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length9
author_reputation56,189,611,335,832
root_title"Can AI Defeat Image Obfuscation?"
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id96,851,615
net_rshares141,822,142,529
author_curate_reward""
vote details (1)