PROTheft: A Projector-Based Model Extraction Attack in the Physical World

Summary

PROTheft is a model extraction attack that extends digital-domain attacks to vision-based devices in the physical world. An attacker uses a projector placed in front of the on-board camera to feed attack samples to a black-box target, and a simulation module compensates for detail loss in the digital-to-physical-to-digital transformation. On a public autonomous driving dataset, the authors report over 80% fidelity with the target model and an mAP 50 above 0.85.

Topics

• Adversarial machine learning

Related items

• InfoModel Extraction of Convolutional Neural Networks with Max-PoolingSimilar attack · OpenAlex (peer-reviewed AI security)
• InfoTrustworthy Distributed Machine Learning in Cloud-Edge-IoT Systems: A Heterogeneity-Aware Survey of Security, Privacy, and RobustnessSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoPreventing Model Extraction in Contextual Linear OptimizationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoMapSteal: Map-based Autonomous Knowledge Stealing Attack Against Large Language ModelsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoHow to Secure AI Models in Production Environments | Endor LabsSimilar attack · Endor Labs Blog