Prototype 'adversarial' t-shirt makes its wearer invisible to facial recognition software: Researchers create design to confuse AI used to identify individuals in public
- Researchers at devised a way to get around facial recognition without a mask
- They created a graphic design t-shirt that disrupts facial recognition software
- The design tricks the software into thinking the wearer is part of the background
- They hope the shirts will help facial recognition companies close security holes
As facial recognition software has spread into the public sphere, some people have relied on masks to protect themselves but new research from Northeastern University suggests a graphic t-shirt could also do the job.
Described as an 'adversarial t-shirt,' the piece of clothing works by scrambling the facial recognition software's capacity to single out individuals in the area it's recording.
The team behind the t-shirt have so far tested it on two common neural network AIs used for facial recognition software and found it successfully prevents identification a little over half of the time.
A new t-shirt design from Northeastern University could allow people to short-circuit facial recognition software without needing to actually cover their faces
'Deep neural networks are very powerful, but also can be vulnerable to adversarial attacks,' Northeastern's Shelley Lin told the university news blog.
'When you wear the T-shirt, it’s highly possible that the deep neural network won’t identify you in an image.'
Before facial recognition software can begin analyzing a person's face, it first need to identify an individual person within the frame.
Most programs do this by drawing a bounding box around individual people or objects to separate it from the general background.
The t-shirt's abstract, pixellated pattern was specifically designed to prevent the facial recognition software from drawing a bounding box around the individual wearing it, meaning the AI can't move forward to the next step of analyzing the person's face.
In preliminary testing, the team found the t-shirt had a success rate of between 11 and 63 percent with two specific pieces of object recognition software, YOLOv2 and Faster R-CNN.
The graphic design is intended to prevent facial recognition software from drawing a bounding box around individuals to separate them from the background of a scene and preventing subsequent analysis of their face
One of the initial challenges was accounting for the fact that t-shirts bend and deform as a person moves, meaning the disruptive effects might not be consistent in every frame of video.
To avoid this effect, the team first recorded a test subject walking through a camera wearing a t-shirt with a standard checkboard pattern.
The team then analyzed how each square on the checkboard was shifted or distorted and recalibrated their graphic accordingly.
'We still have difficulties in making it work in the real world because there’s that strong assumption that we know everything about the detection algorithm,' Lin told Wired.
'It’s not perfect, so there may be problems here or there.'
The team says they hope their research will ultimately be useful for facial recognition software companies trying to fix technical loopholes in their products.
Most watched News videos
- Shocking moment woman is abducted by man in Oregon
- Moment Alec Baldwin furiously punches phone of 'anti-Israel' heckler
- Moment escaped Household Cavalry horses rampage through London
- New AI-based Putin biopic shows the president soiling his nappy
- Vacay gone astray! Shocking moment cruise ship crashes into port
- Sir Jeffrey Donaldson arrives at court over sexual offence charges
- Rayner says to 'stop obsessing over my house' during PMQs
- Ammanford school 'stabbing': Police and ambulance on scene
- Columbia protester calls Jewish donor 'a f***ing Nazi'
- MMA fighter catches gator on Florida street with his bare hands
- Helicopters collide in Malaysia in shocking scenes killing ten
- Prison Break fail! Moment prisoners escape prison and are arrested
