Abstract:While deep neural networks (DNNs) have made remarkable advancements in various fields recently, the latest research indicates that DNNs are susceptible to disruptions from minor perturbations. However, conventional physical attacks employing stickers as physical perturbations to deceive classifiers encounter challenges in achieving stealthiness and are susceptible to issues such as printing quality loss. Recent advancements in physical attacks have harnessed light beams to execute attacks, producing artificial optical patterns rather than natural ones. In this study, we introduce a black-box projector-based physical attack called Adversarial Color Projection (AdvCP), which manipulates the physical parameters of color projection to execute adversarial attacks. AdvCP revolves around three pivotal criteria: effectiveness, stealthiness, and robustness. In a digital environment, our approach attains an impressive attack success rate of 97.60% on a subset of ImageNet. In the physical realm, we achieve a remarkable 100% attack success rate in indoor testing and 82.14% in outdoor testing. To underscore the stealthiness of our approach, we juxtapose the adversarial samples generated by AdvCP with baseline samples. When applied to challenge advanced and robust DNNs, our experimental results reveal that our method achieves an attack success rate exceeding 85% across most all of the models, establishing the robustness of AdvCP. Finally, we contemplate the potential threats posed by AdvCP to future vision-based systems and applications, and proffer some innovative concepts pertaining to light-based physical attacks. Our code can be accessed from the following link: https://github.com/ChengYinHu/AdvCP.git

Adversarial Attacks on an Optical Neural Network

Countering Variations and Thermal Effects for Accurate Optical Neural Networks.

Fooling Neural Network Interpretations - Adversarial Noise to Attack Images.

Demons Hidden in the Light: Unrestricted Adversarial Illumination Attacks

Optical Adversarial Attack

State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems

Adversarial Cross-laser Attack: Effective Attack to DNNs in the Real World

Engineering pupil function for optical adversarial attacks

Light Lies: Optical Adversarial Attack

Advances and Marine Applications of Optical Neural Network

SafeLight: Enhancing Security in Optical Convolutional Neural Network Accelerators

Parity-time symmetric optical neural networks

Adversarial Laser Spot: Robust and Covert Physical-World Attack to DNNs

Low-Depth Optical Neural Networks

All-optical neural network with nonlinear activation functions

Adversarial Color Projection: A Projector-Based Physical-World Attack to DNNs

Adversarial Imaging Pipelines

A multichannel optical neural network for advanced machine vision

Advances and Challenges of Optical Neural Networks

Nonlinear Absorption of 2D Materials and Their Application in Optical Neural Networks