用声音干扰云台,让无人机跟踪目标切换,成功率超95%。
Banshee: Target Switch Attacks on Gimbal-Stabilized Visual Tracking Systems via Acoustic Injection

- 通过定制声波引发云台振动,导致摄像头视角偏移。
- 仿真中对两个云台、五种追踪器成功率93.6%,实测达95.5%。
- 首次实现可落地的声学攻击,适用于无人机安全研究者。
云台稳定视觉追踪是现代自主系统(如无人机)的关键。尽管已有研究指出声波可扰动云台内部结构,但其对真实应用(如无人机追踪)的影响仍不明确。现有演示多忽略实际挑战,如目标运动不确定性与运行延迟。为此,我们提出Banshee——首个可物理实现的攻击,通过利用云台-相机系统的声学漏洞,诱导无人机视觉追踪系统发生目标切换。Banshee生成精心设计的声波信号,引发优化后的对抗性云台振荡,造成方向性偏移的摄像头视图漂移,破坏帧间目标关联。结果使机载追踪器以高概率切换至攻击者选定的目标,偶发目标丢失。在两种商用云台和五种追踪器的仿真中,成功率高达93.6%;在真实桌面及飞行黑盒测试中,对商用无人机在多种场景下整体成功率95.5%。研究揭示了声学与视觉间的实用跨域漏洞,凸显云台系统与应用需具备更强鲁棒性。代码已开源:https://github.com/U1ltra/Banshee。
原文摘要 · Abstract (English)
Gimbal-stabilized visual tracking is critical for modern autonomous systems such as Unmanned Aerial Vehicles (UAVs). While prior work shows acoustic signals can disturb gimbal internals, the impact of such attacks on real-world applications like UAV tracking and following remains underexplored. Existing demonstrations largely overlook practical challenges for real-world attacks, such as object-motion uncertainty and runtime latency. To bridge this gap, we present Banshee, the first physically realizable attack that induces target switching in UAV visual tracking systems by exploiting acoustic vulnerabilities in gimbal-camera systems. Banshee generates carefully crafted acoustic waveforms that induce optimized adversarial gimbal oscillations, causing directionally biased camera-view drifts that break inter-frame target associations. Consequently, the onboard tracker is driven to switch from the original target to an attacker-selected object with high probability, with occasional target loss. Banshee achieves a 93.6% success rate in simulation across two commercial gimbal systems and five trackers. Real-world benchtop and in-flight black-box attacks against a commercial drone across varied scenarios show an overall 95.5% attack success rate. Our results reveal a practical cross-domain vulnerability between acoustics and vision, highlighting the need for robust designs of gimbal systems and applications. Our code is available at: https://github.com/U1ltra/Banshee.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。