arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2501.14005cs.CVcs.AI
收藏

面向便携式投影仪-相机系统的设备感知光学对抗攻击

Device-aware Optical Adversarial Attack for a Portable Projector-camera System

School of Software & Microelectronics, Peking University(北京大学软件与微电子学院);Mashang Consumer Finance Co., Ltd.(马上消费金融股份有限公司)

Ning Jiang, Yanhong Liu, Dingheng Zeng, Yue Feng, Weihong Deng, Ying Li

AI总结:

本文提出一种设备感知的光学对抗攻击方法,通过分辨率与颜色调整减轻数字到物理域退化,在真实与欺骗对手下实现高物理相似度,平均分数仅降14%,白盒与黑盒攻击成功率均高。

摘要:

基于深度学习的人脸识别(FR)系统在数字域和物理域中都容易受到对抗样本的影响。物理攻击对已部署系统构成更大的威胁,因为攻击者可以轻松访问输入通道,从而提供恶意输入以冒充受害者。本文解决了现有基于投影仪-相机系统的对抗光攻击在实际人脸识别设置中的局限性。通过将设备感知适应纳入数字攻击算法,例如分辨率感知和颜色感知调整,我们减轻了从数字域到物理域的退化。实验验证展示了我们提出的算法在真实和欺骗对手面前的有效性,在人脸识别模型和最先进的商业系统中实现了高物理相似度分数。平均而言,从数字攻击到物理攻击的分数仅下降14%,在白盒和黑盒场景中均具有高攻击成功率。

英文摘要:

Deep-learning-based face recognition (FR) systems are susceptible to adversarial examples in both digital and physical domains. Physical attacks present a greater threat to deployed systems as adversaries can easily access the input channel, allowing them to provide malicious inputs to impersonate a victim. This paper addresses the limitations of existing projector-camera-based adversarial light attacks in practical FR setups. By incorporating device-aware adaptations into the digital attack algorithm, such as resolution-aware and color-aware adjustments, we mitigate the degradation from digital to physical domains. Experimental validation showcases the efficacy of our proposed algorithm against real and spoof adversaries, achieving high physical similarity scores in FR models and state-of-the-art commercial systems. On average, there is only a 14% reduction in scores from digital to physical attacks, with high attack success rate in both white- and black-box scenarios.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑