Communications of the ACM
Optical Adversarial Attack Can Change the Meaning of Road Signs
Perturbations on a sign, created by shining crafted light on it, distorts how it is interpreted in a machine learning system.
Credit: Optical Adversarial Attack, https://arxiv.org/pdf/2108.06247.pdf
Researchers in the US have developed an adversarial attack against the ability of machine learning systems to correctly interpret what they see – including mission-critical items such as road signs – by shining patterned light onto real world objects. In one experiment, the approach succeeded in causing the meaning of a 'STOP' roadside sign to be transformed into a '30mph' speed limit sign.
The research is entitled Optical Adversarial Attack, and comes from Purdue University in Indiana.
An OPtical ADversarial attack (OPAD), as proposed by the paper, uses structured illumination to alter the appearance of target objects, and requires only a commodity projector, a camera and a computer. The researchers were able to successfully undertake both white-box and black box attacks using this technique.
From Unite.AI
View Full Article
No entries found