State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems
Fuente:
arXiv
Guardado en:
| Autores principales: | , , , , , |
|---|---|
| Formato: | Preprint |
| Publicado: |
2023
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
| _version_ | 1866917814900621312 |
|---|---|
| author | Fang, Junbin Jiang, You Jiang, Canjian Jiang, Zoe L. Yiu, Siu-Ming Liu, Chuanyi |
| author_facet | Fang, Junbin Jiang, You Jiang, Canjian Jiang, Zoe L. Yiu, Siu-Ming Liu, Chuanyi |
| contents | Adversarial attacks can mislead deep learning models to make false predictions by implanting small perturbations to the original input that are imperceptible to the human eye, which poses a huge security threat to the computer vision systems based on deep learning. Physical adversarial attacks, which is more realistic, as the perturbation is introduced to the input before it is being captured and converted to a binary image inside the vision system, when compared to digital adversarial attacks. In this paper, we focus on physical adversarial attacks and further classify them into invasive and non-invasive. Optical-based physical adversarial attack techniques (e.g. using light irradiation) belong to the non-invasive category. As the perturbations can be easily ignored by humans as the perturbations are very similar to the effects generated by a natural environment in the real world. They are highly invisibility and executable and can pose a significant or even lethal threats to real systems. This paper focuses on optical-based physical adversarial attack techniques for computer vision systems, with emphasis on the introduction and discussion of optical-based physical adversarial attack techniques. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2303_12249 |
| institution | arXiv |
| publishDate | 2023 |
| record_format | arxiv |
| spellingShingle | State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems Fang, Junbin Jiang, You Jiang, Canjian Jiang, Zoe L. Yiu, Siu-Ming Liu, Chuanyi Computer Vision and Pattern Recognition Cryptography and Security Image and Video Processing Adversarial attacks can mislead deep learning models to make false predictions by implanting small perturbations to the original input that are imperceptible to the human eye, which poses a huge security threat to the computer vision systems based on deep learning. Physical adversarial attacks, which is more realistic, as the perturbation is introduced to the input before it is being captured and converted to a binary image inside the vision system, when compared to digital adversarial attacks. In this paper, we focus on physical adversarial attacks and further classify them into invasive and non-invasive. Optical-based physical adversarial attack techniques (e.g. using light irradiation) belong to the non-invasive category. As the perturbations can be easily ignored by humans as the perturbations are very similar to the effects generated by a natural environment in the real world. They are highly invisibility and executable and can pose a significant or even lethal threats to real systems. This paper focuses on optical-based physical adversarial attack techniques for computer vision systems, with emphasis on the introduction and discussion of optical-based physical adversarial attack techniques. |
| title | State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems |
| topic | Computer Vision and Pattern Recognition Cryptography and Security Image and Video Processing |
| url | https://arxiv.org/abs/2303.12249 |