Face Identification System Evasion via Physical Countermeasures
Commercial Face Identification Service
MITRE's AI Red Team demonstrated a physical-domain evasion attack to induce targeted misclassification in a face identification service. The operation combined adversarial machine learning techniques with API exploitation.
- first report
- 23 Oct 2020
- last update
- 23 Oct 2020
Timeline · 1
Sources · 1
Research and catalogues
- 2020-10-23Face Identification System Evasion via Physical CountermeasuresMITRE ATLAS · atlas.mitre.org/studies/AML.CS0012
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Research
- AI role
- Attack on AI
- categories
- Adversarial evasion
- severity
- 1 · Research / proof of concept
- targets
- Enterprise deployment
- owasp llm top 10
- no entry for these categories
- dates
- happened 1 Jan 2020 · first reported 23 Oct 2020
- origin
- MITRE ATLASDerived from MITRE ATLAS (Apache 2.0, © MITRE).
- record
- confidence 0.95 · created 2026-10-18 06:55Z · updated 2026-10-18 06:55Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Face Identification System Evasion via Physical Countermeasures https://gcdradar.vercel.app/incidents/face-identification-system-evasion-via-physical-countermeasu · AIR-2020-0026 · closed 2020-11-06 - Lane: Research - Severity: 1 (Research / proof of concept) - Fix status: Fix status unknown - First reported: 2020-10-23 (happened 2020-01-01) - AI role: Attack on AI - Products: Commercial Face Identification Service ## Summary MITRE's AI Red Team demonstrated a physical-domain evasion attack to induce targeted misclassification in a face identification service. The operation combined adversarial machine learning techniques with API exploitation. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2020-10-23: Face Identification System Evasion via Physical Countermeasures (https://atlas.mitre.org/studies/AML.CS0012) ## Sources - 2020-10-23 MITRE ATLAS: Face Identification System Evasion via Physical Countermeasures https://atlas.mitre.org/studies/AML.CS0012 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedEdge AI Product Microsoft Edge AI Product Evasion Red Team Exercise
Research · since Feb 2020 (approx.)
AI - closedAzure Microsoft Internal Azure AI Service Red Team Exercise
Research · since Jan 2020 (approx.)
AI - closed3.7ProofPoint Email Protection ProofPoint Email Protection Evasion via Surrogate Model
Research · since 9 Sep 2019 · updated 31 Mar 2023 · CVE-2019-20634
AI - closedDGA detector Botnet DGA Detection Evasion Using Domain Mutation
Research · since 1 Jan 2020
AI - closedPalo Alto Networks malware detection system Evasion of Deep Learning Detector for Malware C&C Traffic
Research · since 1 Jan 2020
AI - closedCylancePROTECT Bypassing Cylance AI Malware Detection via Universal String
Research · since 7 Sep 2019
AI