Privacy-Preserving Action Recognition (Supplementary) 1 Additional Ablation Studies

Impact of constructing attribute-different (and model-different) support set and query set. As shown in Tab. 1, our framework ( Attribute/Model-Different Set Construction) achieves better performance than this variant, which demonstrates the Here we test two variants. As shown in Tab. 3, our Since our approach does not change the anonymization model's Face and Gender are novel attributes that are unknown during training. In our proposed framework, we first train the model using the support set (i.e., virtual training), and We explain the two reasons in more details below. The list of training/testing attributes and attack models.