Slashdot Mirror
Researchers Create 'Psychedelic' Stickers That Confuse AI Image Recognition (techcrunch.com)
"Researchers at Google were able to create little stickers with 'psychedelic'-looking patterns on them that could trick computer AI image-classifying algorithms into mis-classifying images of objects that it would normally be able to recognize," writes amxcoder:
The patterned stickers work by tricking the image recognition algorithm into focusing on, and studying, the little pattern on the small sticker -- and ignoring the rest of the image, including the actual object in the picture... The images on the stickers were created by the researchers using knowledge of features and shapes, patterns, and colors that the image recognition algorithms look for and focus on.
These stickers were created so that the algorithm finds them 'more interesting' than the rest of the image and will focus most of it's attention on analyzing the pattern, while giving the rest of the image content a lower importance, thus ignoring it or confusing it.
The technique "works in the real world, and can be disguised as an innocuous sticker," note the researchers -- describing them as "targeted adversarial image patches."
These stickers were created so that the algorithm finds them 'more interesting' than the rest of the image and will focus most of it's attention on analyzing the pattern, while giving the rest of the image content a lower importance, thus ignoring it or confusing it.
The technique "works in the real world, and can be disguised as an innocuous sticker," note the researchers -- describing them as "targeted adversarial image patches."
Humans have similar problems. Instead of stop sign, they sometimes concentrate on areas with the most detail, like a smartphone.
1. Add stickers to images.
2. Retrain network
3. Stickers useless.
Our "real" human visual algorithms are distracted by bright, shiny objects in a similar way. It's not just AI that can be fooled.
Trying to confuse a self driving car is dangerous and stupid
Not necessarily. It could be useful for sabotage against other countries, or for stopping/disabling a car that has lost its mind, so to speak.
To add to my previous comment: I regularly use parking garages that read my plate to know that I already paid at the kiosk. Again, no humans involved. Sounds like you live in the 80s. Not sure if that's 1980s or 1880s.