可听声波让YOLO11误判
研究表明，针对计算机视觉应用的声学对抗攻击可利用20千赫兹以下的可听声波共振商用摄像头，导致AI模型（如YOLO11）出现误分类、漏检或幻觉。相比先前使用超声波（>20千赫兹）的短距离攻击，低频声波传播距离更远。实验分析了图像分辨率、目标尺寸等特征对攻击成功率的影响，为防御策略提供了依据。
Giving AI a Headache: Acoustic Adversarial Attacks to Computer Vision Applications
Artificial Intelligence (AI) is increasingly used to automate a variety of real-world computer vision (CV) applications, such as autonomous vehicle control, facial recognition, and security cameras. Recent research has shown that acoustic vibration can induce real physical motion in cameras, interfering with their internal stabilization mechanisms. Because the motion falls outside the conditions the stabilization system was designed to handle, the system introduces artifacts into the frame, causing AI-based CV models to misclassify, miss targets, or hallucinate objects. Previous work used ultrasonic frequencies (>20 kHz) to perform short-range attacks, which limits them to short distances due to the attenuation exhibited by high frequencies. In this work, we investigate acoustic attacks using lower frequencies in the audible range (<20 kHz), and we further expand our analysis to include how various image and object features are affected by the attacks. Specifically, we performed physical experiments to demonstrate the viability of our attacks on an off-the-shelf object detection model (YOLO11) by resonating a commercially available camera with various frequencies. Based on our results, we provide insights into several factors that make an AI CV system more vulnerable to these attacks, which could help inform the development of future mitigation strategies.