arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2202.10080cs.CR
收藏

bAdvertisement:利用印刷广告攻击高级驾驶辅助系统

bAdvertisement: Attacking Advanced Driver-Assistance Systems Using Print Advertisements

Ben Nassi, Jacob Shams, Raz Ben Netanel, Yuval Elovici

摘要:

在本文中,我们提出了bAdvertisement,一种针对高级驾驶辅助系统(ADAS)的新型攻击方法。bAdvertisement作为供应链攻击,通过印刷厂中的受损计算机,通过在印刷广告中嵌入“幻影”对象来执行。当经过的汽车中的ADAS观察到受损的印刷广告时,从ADAS触发不期望的反应。我们分析了国家的最先进的对象检测器,并表明,他们不考虑颜色或上下文的目标检测。我们在Mobileye 630 PRO上对这些发现的验证表明,这种ADAS也没有考虑颜色或背景。然后,我们展示了攻击者如何利用这些发现对商业ADAS进行攻击,通过在印刷广告中嵌入幻影路标,这会导致配备Mobileye 630 PRO的汽车触发错误通知以减速。最后,我们讨论了多种对策,可以部署,以减轻我们提出的攻击的影响。

英文摘要:

In this paper, we present bAdvertisement, a novel attack method against advanced driver-assistance systems (ADASs). bAdvertisement is performed as a supply chain attack via a compromised computer in a printing house, by embedding a "phantom" object in a print advertisement. When the compromised print advertisement is observed by an ADAS in a passing car, an undesired reaction is triggered from the ADAS. We analyze state-of-the-art object detectors and show that they do not take color or context into account in object detection. Our validation of these findings on Mobileye 630 PRO shows that this ADAS also fails to take color or context into account. Then, we show how an attacker can take advantage of these findings to execute an attack on a commercial ADAS, by embedding a phantom road sign in a print advertisement, which causes a car equipped with Mobileye 630 PRO to trigger a false notification to slow down. Finally, we discuss multiple countermeasures which can be deployed in order to mitigate the effect of our proposed attack.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑