灯光，摄像，攻击：利用脉冲光攻击时间高动态范围融合

中文摘要 AI 辅助

现代相机广泛使用时间高动态范围（HDR）技术，通过捕获具有不同积分时间的一系列曝光并将其融合为单张图像来提高可见性。该过程隐式假设场景照明在捕获期间保持足够稳定。我们提出FLASH（通过饱和HDR的融合级攻击），一种外部脉冲光攻击，通过在下游感知之前制造跨曝光不一致性，故意攻击这一假设。FLASH利用算法假设而非依赖传感器损坏或硬件故障，且既不需要物理访问相机、访问原始曝光括号、了解融合算法，也不需要与相机精确锁相。在跨越嵌入式、监控、摄影、智能手机和汽车用例的八个物理相机平台上，以及匹配的光学对照中，FLASH导致依赖于流水线的变暗、过曝和可见性损失。这包括在iPhone 16 Pro上50.0%的极端变暗率，以及在Wyze电池摄像头Pro上33.7%的极端变暗率。在Wyze相机上，FLASH在10/10次试验中触发系统级低可见性响应，而连续光和随机频率闪烁对照为0/10次。在一项受控的静态OpenPilot案例研究中，23.0%的帧在交通锥目标区域表现出严重变暗，目标-背景对比度（CNR）最多降低90.8%。在FLASH下，OpenPilot界面也未能显示对应对照试验中观察到的系统级路径状态。在一项受控的仅夜间HDR重建压力测试中，一种概念验证的曝光拒绝防御将输出亮度偏差的中位数降低了79.16%。这些结果表明，时间HDR融合本身需要对曝光证据进行安全感知的验证。

英文摘要

Modern cameras widely use temporal High Dynamic Range (HDR) to improve visibility by capturing a sequence of exposures with different integration times and fusing them into a single image. This process implicitly assumes that scene illumination remains sufficiently stable during capture. We introduce FLASH (Fusion-Level Attack by Saturating HDR), an external pulsed-light attack that deliberately attacks this assumption by creating cross-exposure inconsistency before downstream perception. FLASH exploits an algorithmic assumption rather than relying on sensor damage or hardware failure, and requires neither physical camera access, access to raw exposure brackets, knowledge of the fusion algorithm, nor exact phase lock to the camera. Across eight physical camera platforms spanning embedded, surveillance, photography, smartphone, and automotive use cases, and matched optical controls, FLASH causes pipeline-dependent darkening, overexposure, and visibility loss. This includes extreme-darkening rates of 50.0% on an iPhone 16 Pro and 33.7% on a Wyze Battery Cam Pro. On the Wyze camera, FLASH triggers the system-level low-visibility response in 10/10 trials, compared with 0/10 continuous-light and randomized-frequency flashing controls. In a controlled stationary OpenPilot case study, 23.0% of frames exhibit severe darkening in the traffic-cone target region, with target-background CNR decreasing by up to 90.8%. Under FLASH, the OpenPilot interface also fails to display the system-level path state observed in the corresponding control trials. In a controlled night-only HDR reconstruction stress test, a proof-of-concept exposure-rejection defense reduces median output-brightness deviation by 79.16%. These results show that temporal HDR fusion itself requires security-aware validation of exposure evidence.

发表机构

• Clemson University（克莱姆森大学）
• Technical University of Munich（慕尼黑工业大学）

机构由 AI 辅助整理，请以论文原文为准。