SIA-GAN: Scrambling Inversion Attack Using Generative Adversarial Network

Koki Madono*, Masayuki Tanaka, Masaki Onishi, Tetsuji Ogawa

*Corresponding author for this work

Research output: Contribution to journalArticlepeer-review

14 Citations (Scopus)


This paper presents a scrambling inversion attack using a generative adversarial network (SIA-GAN). This method aims to evaluate the privacy protection level achieved by image scrambling method. For privacy-preserving machine learning, scrambled images are often used to protect visual information, assuming that searching the scramble parameters is highly difficult for an attacker due to the application of complex image scrambling operations. However, the security of such methods has not been thoroughly investigated. SIA-GAN learns the mapping between pairs of scrambled images and original images, then attempts to invert image scrambling. Therefore, the attacker is assumed to have real images whose domain is the same as that of scrambled images. Experimental results demonstrate that scrambled images cannot be recovered if block shuffling is applied as a scrambling operation. The experimental code of SIA-GAN is available at

Original languageEnglish
Pages (from-to)129385-129393
Number of pages9
JournalIEEE Access
Publication statusPublished - 2021


  • Artificial intelligence
  • computer vision
  • image scrambling
  • machine learning
  • visual information hiding

ASJC Scopus subject areas

  • General Computer Science
  • General Materials Science
  • General Engineering


Dive into the research topics of 'SIA-GAN: Scrambling Inversion Attack Using Generative Adversarial Network'. Together they form a unique fingerprint.

Cite this