Abstract:In this paper, we propose a novel physical stealth attack against the person detectors in real world. The proposed method generates an adversarial patch, and prints it on real clothes to make a three dimensional (3D) invisible cloak. Anyone wearing the cloak can evade the detection of person detectors and achieve stealth. We consider the impacts of those 3D physical constraints (i.e., radian, wrinkle, occlusion, angle, etc.) on person stealth attacks, and propose 3D transformations to generate 3D invisible cloak. We launch the person stealth attacks in 3D physical space instead of 2D plane by printing the adversarial patches on real clothes under challenging and complex 3D physical scenarios. The conventional and 3D transformations are performed on the patch during its optimization process. Further, we study how to generate the optimal 3D invisible cloak. Specifically, we explore how to choose input images with specific shapes and colors to generate the optimal 3D invisible cloak. Besides, after successfully making the object detector misjudge the person as other objects, we explore how to make a person completely disappeared, i.e., the person will not be detected as any objects. Finally, we present a systematic evaluation framework to methodically evaluate the performance of the proposed attack in digital domain and physical world. Experimental results in various indoor and outdoor physical scenarios show that, the proposed person stealth attack method is robust and effective even under those complex and challenging physical conditions, such as the cloak is wrinkled, obscured, curved, and from different angles. The attack success rate in digital domain (Inria data set) is 86.56%, while the static and dynamic stealth attack performance in physical world is 100% and 77%, respectively, which are significantly better than existing works.

The Invisible Shadow - How Security Cameras Leak Private Activities.

EM Eye: Characterizing Electromagnetic Side-channel Eavesdropping on Embedded Cameras

DepthFake: Spoofing 3D Face Authentication with a 2D Photo

On Detecting Hidden Wireless Cameras: A Traffic Pattern-based Approach.

Demons Hidden in the Light: Unrestricted Adversarial Illumination Attacks

Invisible Mask: Practical Attacks on Face Recognition with Infrared.

Multi-modal Spoofing Attacks on 3D Face Liveness Detection Via a Single 2D Photo

Adversarial Infrared Blocks: A Multi-view Black-box Attack to Thermal Infrared Detectors in Physical World

Adversarial Infrared Curves: An attack on infrared pedestrian detectors in the physical world

Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenon

aIR-Jumper: Covert Air-Gap Exfiltration/Infiltration via Security Cameras & Infrared (IR)

3D Invisible Cloak

Homespy: Inferring User Presence Via Encrypted Traffic Of Home Surveillance Camera

Side-Channel Information Leakage Of Encrypted Video Stream In Video Surveillance Systems

Physical Adversarial Attacks for Infrared Object Detection

IRShield: A Countermeasure Against Adversarial Physical-Layer Wireless Sensing

Moiré Backdoor Attack (MBA): A Novel Trigger for Pedestrian Detectors in the Physical World

Physically Adversarial Infrared Patches with Learnable Shapes and Locations

User Presence Inference Via Encrypted Traffic of Wireless Camera in Smart Homes.

Shadow-Catcher: Looking Into Shadows to Detect Ghost Objects in Autonomous Vehicle 3D Sensing

Invisible Perturbations: Physical Adversarial Examples Exploiting the Rolling Shutter Effect