Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink
Though it is well known that the performance of deep neural networks (DNNs) degrades under certain light conditions, there exists no study on the threats of light beams emitted from some physical source as adversarial attacker on DNNs in a real-world scenario. In this work, we show by simply using a laser beam that DNNs are easily fooled. To this end, we propose a novel attack method called Adversarial Laser Beam (AdvLB), which enables manipulation of laser beam's physical parameters to perform adversarial attack. Experiments demonstrate the effectiveness of our proposed approach in both digital- and physical-settings. We further empirically analyze the evaluation results and reveal that the proposed laser beam attack may lead to some interesting prediction errors of the state-of-the-art DNNs. We envisage that the proposed AdvLB method enriches the current family of adversarial attacks and builds the foundation for future robustness studies for light.
Cite this item
Duan, R., Mao, X., Qin, A. K., Chen, Y., Ye, S., He, Y., & Yang, Y. (2021). Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink. 2021 Ieee/Cvf Conference on Computer Vision and Pattern Recognition, Cvpr 2021, IEEE Conference on Computer Vision and Pattern Recognition, 16057–16066. https://doi.org/10.1109/CVPR46437.2021.01580
Click Copy to copy the citation, or select the text manually.
WOS:000742075000065
2021-01-01
Los Alamitos
978-1-6654-4509-2
IEEE Conference on Computer Vision and Pattern Recognition
16057
16066
REVIEWED
EPFL
| Event name | Event place | Event date |
ELECTR NETWORK | Jun 19-25, 2021 | |