arXiv:2606.14658cs.CVcs.AI2026-06

用声音干扰摄像头,让AI误识别物体

Giving AI a Headache: Acoustic Adversarial Attacks to Computer Vision Applications

论文配图:Giving AI a Headache: Acoustic Adversarial Attacks to Computer Vision Applications
图 1 · 摘自论文原文
  • 用可听声波共振摄像头,引发物理振动
  • 实测导致YOLO11模型漏检或误检目标
  • 揭示频率与物体特征影响攻击效果

人工智能正广泛应用于自动驾驶、人脸识别和安防监控等计算机视觉场景。最新研究发现,声波振动可引发摄像头物理运动,干扰其内部防抖机制。由于运动超出防抖系统设计范围,画面中出现伪影,导致基于AI的视觉模型误分类、漏检目标或产生幻觉。以往工作使用超声波(>20 kHz)进行短距离攻击,受限于高频衰减。本文改用可听声波(<20 kHz),通过物理实验验证对现成摄像头的攻击可行性,并测试了不同频率对目标检测模型YOLO11的影响。结果表明,特定频率能有效诱发振动,进而影响图像与物体特征的识别。研究还分析了多个使系统更易受攻击的因素,为未来防御策略提供参考。

原文摘要 · Abstract (English)

Artificial Intelligence (AI) is increasingly used to automate a variety of real-world computer vision (CV) applications, such as autonomous vehicle control, facial recognition, and security cameras. Recent research has shown that acoustic vibration can induce real physical motion in cameras, interfering with their internal stabilization mechanisms. Because the motion falls outside the conditions the stabilization system was designed to handle, the system introduces artifacts into the frame, causing AI-based CV models to misclassify, miss targets, or hallucinate objects. Previous work used ultrasonic frequencies (>20 kHz) to perform short-range attacks, which limits them to short distances due to the attenuation exhibited by high frequencies. In this work, we investigate acoustic attacks using lower frequencies in the audible range (<20 kHz), and we further expand our analysis to include how various image and object features are affected by the attacks. Specifically, we performed physical experiments to demonstrate the viability of our attacks on an off-the-shelf object detection model (YOLO11) by resonating a commercially available camera with various frequencies. Based on our results, we provide insights into several factors that make an AI CV system more vulnerable to these attacks, which could help inform the development of future mitigation strategies.

声学攻击目标检测物理攻击对抗样本

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。