EE Seminar: Physical Projector-Based Patch Attack
Electrical Engineering Systems Seminar
Speaker: Daniel Niskhizov
M.Sc. student under the supervision of Prof. Amit Bermano
Monday, 25th May 2026, at 14:00
Room 011, Kitot Building, Faculty of Engineering
Physical Projector-Based Patch Attack
Abstract
Physical adversarial attacks on vision systems manipulate the scene prior to image capture and therefore pose a significant threat to vision-based systems. While printed adversarial patches are easy to deploy, their fixed appearance limits robustness to changes in viewpoint and illumination. Projector-based attacks provide a contact-free and adaptable alternative, but existing methods are often impractical for real use cases due to slow calibration procedures, projection onto background regions, and unstable success rates, especially in continuous and dynamic scenarios. We propose 3PA(Physical Projector-Based Patch Attack), an efficient and robust framework for projection-based adversarial attacks tailored for real-world conditions and motion. The method uses a rapid scene acquisition stage for joint photometric and geometric calibration, with only a few dozens of calibration projections and less than 15 seconds of acquisition time. This stage enables a fully differentiable simulation of the projection-capture process across viewpoints. The lightweight simulator integrates directly with existing adversarial objectives, supporting multi-view and multi-objective patch optimization. We further stabilize optimization via a rejuvenation strategy that improves convergence and attack success. Coupled with real-time object tracking, the system maintains consistent adversarial projections under motion. Experimental results show that 3PA improves robustness to novel viewpoints and sensor noise over time across seen and unseen classifiers, while reducing setup time by orders of magnitude. These findings reframe projector-based attacks from a theoretical possibility into an operational capability, and highlight the need for defenses against this underexplored threat to real-world vision systems.
-סמינר זה ייחשב כסמינר שמיעה לתלמידי תואר שני ושלישי-
This Seminar Is Considered A Hearing Seminar For Msc/Phd Students-
הרישום לסמינר יבוצע בתחילת הסמינר באמצעות סריקת הברקוד למודל (יש להיכנס לפני כן למודל, לא באמצעות האפליקציה)
Registration to the seminar is done at the beginning of the seminar by scanning the barcode for the Moodle (Please enter ahead to the Moodle, NOT by application)
