论文标题

对抗机器学习攻击视频异常检测系统

Adversarial Machine Learning Attacks Against Video Anomaly Detection Systems

论文作者

Mumcu, Furkan, Doshi, Keval, Yilmaz, Yasin

论文摘要

视频中的异常检测是重要的计算机视觉问题,其中包括自动视频监视在内的各种应用程序。尽管对图像理解模型的对抗性攻击已经进行了大量研究,但对抗机器学习的目标并不多,以视频理解模型为目标,而没有专注于视频异常检测的工作。为此,我们研究了针对视频异常检测系统的对抗机器学习攻击,该攻击可以通过易于执行的网络攻击来实现。由于监视摄像机通常通过无线网络连接到运行异常检测模型的服务器,因此它们容易针对针对无线连接的网络攻击。我们演示了Wi-Fi脱依性攻击是如何利用臭名昭著的易于执行和有效的服务(DOS)攻击的,用于生成视频异常检测系统的对抗数据。具体而言,我们将视频质量攻击(例如,放慢速度,冻结,快进,低分辨率)对视频质量攻击造成的几种效果用于视频异常检测。我们对几个最先进的异常检测模型进行的实验表明,攻击者可以通过引起频繁的错误警报和隐藏监视系统的物理异常来大大破坏视频异常检测系统的可靠性。

Anomaly detection in videos is an important computer vision problem with various applications including automated video surveillance. Although adversarial attacks on image understanding models have been heavily investigated, there is not much work on adversarial machine learning targeting video understanding models and no previous work which focuses on video anomaly detection. To this end, we investigate an adversarial machine learning attack against video anomaly detection systems, that can be implemented via an easy-to-perform cyber-attack. Since surveillance cameras are usually connected to the server running the anomaly detection model through a wireless network, they are prone to cyber-attacks targeting the wireless connection. We demonstrate how Wi-Fi deauthentication attack, a notoriously easy-to-perform and effective denial-of-service (DoS) attack, can be utilized to generate adversarial data for video anomaly detection systems. Specifically, we apply several effects caused by the Wi-Fi deauthentication attack on video quality (e.g., slow down, freeze, fast forward, low resolution) to the popular benchmark datasets for video anomaly detection. Our experiments with several state-of-the-art anomaly detection models show that the attackers can significantly undermine the reliability of video anomaly detection systems by causing frequent false alarms and hiding physical anomalies from the surveillance system.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源