Definition
Plain language
A printed sticker or image that, when placed in a camera's view, makes a vision system misidentify what it is looking at.
As stated in the literature
A physically realizable adversarial perturbation optimized to be robust across viewpoints, lighting, and scale, causing misclassification or misdetection when placed in a scene.
Also called: adversarial patches
Why it matters: It moves attacks out of the lab and into the physical world, meaning anyone who can print a piece of paper and place it in view can potentially fool a deployed camera system.
For example, a driver could tape a specially patterned sticker onto a stop sign so a car's camera system reads it as a speed limit sign instead.
Heard on the show
“An adversarial patch is an optical illusion.”Episode 236 — Why a Printed 'OPERATOR OVERRIDE' Note Redirects Robot Planners