利用视频透明通道发动隐蔽攻击,让目标检测模型彻底失效。
Can You Trust What You See? Alpha Channel No-Box Attacks on Video Object Detection
- 通过透明通道融合恶意视频,实现无感知攻击
- 在5个主流检测器上达成100%成功率,零可见痕迹
- 适合关注视频安全、对抗样本防御的研究者
随着目标检测模型在自动驾驶和监控系统等网络物理系统中广泛应用,其面对对抗性威胁的安全性至关重要。尽管已有研究探索图像域的对抗攻击,但视频域尤其是无盒(no-box)设置下的攻击仍鲜有研究。本文提出α-Cloak,首个完全通过RGBA视频透明通道进行的无盒对抗攻击。该方法利用透明通道将恶意目标视频与正常视频融合,生成对人眼无害但持续欺骗目标检测器的合成视频。攻击无需访问模型架构、参数或输出,且不引入任何可见伪影。我们系统分析了常见视频格式与播放应用对透明通道的支持情况,并设计了确保视觉隐蔽性和兼容性的融合算法。在五个先进目标检测器、一个视觉语言模型及多模态大模型Gemini-2.0-Flash上评估,α-Cloak实现100%攻击成功率。研究揭示了视频感知系统中此前未被关注的漏洞,凸显了在对抗场景中考虑透明通道的紧迫性。
原文摘要 · Abstract (English)
As object detection models are increasingly deployed in cyber-physical systems such as autonomous vehicles (AVs) and surveillance platforms, ensuring their security against adversarial threats is essential. While prior work has explored adversarial attacks in the image domain, those attacks in the video domain remain largely unexamined, especially in the no-box setting. In this paper, we present α-Cloak, the first no-box adversarial attack on object detectors that operates entirely through the alpha channel of RGBA videos. α-Cloak exploits the alpha channel to fuse a malicious target video with a benign video, resulting in a fused video that appears innocuous to human viewers but consistently fools object detectors. Our attack requires no access to model architecture, parameters, or outputs, and introduces no perceptible artifacts. We systematically study the support for alpha channels across common video formats and playback applications, and design a fusion algorithm that ensures visual stealth and compatibility. We evaluate α-Cloak on five state-of-the-art object detectors, a vision-language model, and a multi-modal large language model (Gemini-2.0-Flash), demonstrating a 100% attack success rate across all scenarios. Our findings reveal a previously unexplored vulnerability in video-based perception systems, highlighting the urgent need for defenses that account for the alpha channel in adversarial settings.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。