arXiv:2501.15653cs.CV2025-01

利用行人检测器的盲区弱点,无需伪装即可躲避街景摄像头追踪。

A Privacy Enhancing Technique to Evade Detection by Street Video Cameras Without Using Adversarial Accessories

  • 基于检测器在真实环境中的位置敏感性,找到低置信度盲区
  • 规划路径可使最高/平均置信度降低0.09和0.13
  • 适合关注隐私但不想用对抗性装备的人群

本文提出一种隐私保护技术,利用深度神经网络行人检测器在实验室训练与现实部署之间的差异。研究表明,行人的位置(距离、角度、高度)和光照水平直接影响检测置信度。在静态行人场景中,存在检测置信度低的盲区。我们证明,隐私敏感者可通过构建最低置信度路径,使路径最大置信度和平均置信度分别降低0.09和0.13,优于直接路径或随机路径。为应对该漏洞,我们提出新对策,使检测器在盲区的置信度提升0.09(最大)和0.05(平均)。实验显示,该对策使基于Faster R-CNN的检测器真正率(TPR)提升0.03,平均真阳性置信度提升0.15。

原文摘要 · Abstract (English)

In this paper, we propose a privacy-enhancing technique leveraging an inherent property of automatic pedestrian detection algorithms, namely, that the training of deep neural network (DNN) based methods is generally performed using curated datasets and laboratory settings, while the operational areas of these methods are dynamic real-world environments. In particular, we leverage a novel side effect of this gap between the laboratory and the real world: location-based weakness in pedestrian detection. We demonstrate that the position (distance, angle, height) of a person, and ambient light level, directly impact the confidence of a pedestrian detector when detecting the person. We then demonstrate that this phenomenon is present in pedestrian detectors observing a stationary scene of pedestrian traffic, with blind spot areas of weak detection of pedestrians with low confidence. We show how privacy-concerned pedestrians can leverage these blind spots to evade detection by constructing a minimum confidence path between two points in a scene, reducing the maximum confidence and average confidence of the path by up to 0.09 and 0.13, respectively, over direct and random paths through the scene. To counter this phenomenon, and force the use of more costly and sophisticated methods to leverage this vulnerability, we propose a novel countermeasure to improve the confidence of pedestrian detectors in blind spots, raising the max/average confidence of paths generated by our technique by 0.09 and 0.05, respectively. In addition, we demonstrate that our countermeasure improves a Faster R-CNN-based pedestrian detector's TPR and average true positive confidence by 0.03 and 0.15, respectively.

隐私保护行人检测盲区利用无对抗

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。