|
|
|
|
|
|
by DannyBee
3251 days ago
|
|
|
So, as a preliminary, you can conduct these kind of attacks against humans as well. It just often isn't as subtle a change to the sign. Among other things, though, these types of attacks make a lot of assumptions.
For example, they assume the only input to "what is that" is a classifier that looks at the image. Given simple data and previous classification of the image, for example, one can easily determine "hey does it make sense for an added lane sign to appear at a 4 way intersection with no apparent added lane". Heck, you don't even need to go that far.
Given previous, before vandalism classification of the sign, and no change in any terrain/mapping data, ... So yes, i'd pretty much say "there is no need to worry about such physical attacks", as long as you are not directly hooking up an image classifier to the steering wheel. The likelihood that this ends up a major problem for self driving cars seems pretty low. |
|
|