Adversarial Color Film: Effective Physical-World Attack to DNNs

Understand

It is well known that the performance of deep neural networks (DNNs) is susceptible to subtle interference.

• So far, camera-based physical adversarial attacks haven't gotten much attention, but it is the vacancy of physical attack.
• In this paper, we propose a simple and efficient camera-based physical attack called Adversarial Color Film (AdvCF), which manipulates the physical parameters of color film to perform attacks.
• Carefully designed experiments show the effectiveness of the proposed method in both digital and physical environments.