AI RESEARCH

From Pixels to Reality: Physical-Digital Patch Attacks on Real-World Camera

arXiv CS.CV

ArXi:2603.28425v1 Announce Type: new This nstration presents Digital-Physical Adversarial Attacks (DiPA), a new class of practical adversarial attacks against pervasive camera-based authentication systems, where an attacker displays an adversarial patch directly on a smartscreen instead of relying on printed artifacts. This digital-only physical presentation enables rapid deployment, removes the need for total-variation regularization, and improves patch transferability in black-box conditions.