电磁干扰可在图像传感器中生成彩虹伪影,导致目标检测错误。
Rainbow Artifacts from Electromagnetic Signal Injection Attacks on Image Sensors
- 用特定电磁信号干扰图像传感器模拟域,生成视觉伪影。
- 攻击使先进目标检测模型误判率显著上升。
- 揭示了物理层攻击在视觉系统中的严重威胁,适合安全研究者关注。
图像传感器广泛应用于安防、自动驾驶和工业自动化等关键系统中,其视觉数据完整性至关重要。本文研究了一类针对图像传感器模拟域的新型电磁信号注入攻击,使攻击者可操纵原始视觉输入而不触发传统数字完整性检查。我们首次发现一种未被记录的攻击现象:通过精心调制的电磁干扰,在CMOS图像传感器捕获的图像中产生类似彩虹的颜色伪影。进一步评估表明,这些伪影会沿图像信号处理链路传播,显著影响当前最先进的目标检测模型,导致严重误判。研究揭示了视觉感知栈中一个关键且未被充分重视的漏洞,凸显了对这类物理层攻击加强防御的迫切需求。
原文摘要 · Abstract (English)
Image sensors are integral to a wide range of safety- and security-critical systems, including surveillance infrastructure, autonomous vehicles, and industrial automation. These systems rely on the integrity of visual data to make decisions. In this work, we investigate a novel class of electromagnetic signal injection attacks that target the analog domain of image sensors, allowing adversaries to manipulate raw visual inputs without triggering conventional digital integrity checks. We uncover a previously undocumented attack phenomenon on CMOS image sensors: rainbow-like color artifacts induced in images captured by image sensors through carefully tuned electromagnetic interference. We further evaluate the impact of these attacks on state-of-the-art object detection models, showing that the injected artifacts propagate through the image signal processing pipeline and lead to significant mispredictions. Our findings highlight a critical and underexplored vulnerability in the visual perception stack, highlighting the need for more robust defenses against physical-layer attacks in such systems.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。