# Signal Injection Attacks against CCD Image Sensors

arXiv: https://arxiv.org/abs/2108.08881 · HTML: https://mlsanity.com/paper/2108.08881/

## Key facts

- Cited by 6 papers in the map (data through 14 Oct 2026).
- Builds on 6 of its 47 references that are in the map.
- First posted on arXiv 19 Aug 2021.

## Builds on (most cited first, 6 of 6)

- [Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving](https://mlsanity.com/paper/1907.06826/) (2019)
- [Invisible Perturbations: Physical Adversarial Examples Exploiting the Rolling Shutter Effect](https://mlsanity.com/paper/2011.13375/) (2020)
- [Light Commands: Laser-Based Audio Injection Attacks on Voice-Controllable Systems](https://mlsanity.com/paper/2006.11946/) (2020)
- [They See Me Rollin': Inherent Vulnerability of the Rolling Shutter in CMOS Image Sensors](https://mlsanity.com/paper/2101.10011/) (2021)
- [Injected and Delivered: Fabricating Implicit Control over Actuation Systems by Spoofing Inertial Sensors](https://mlsanity.com/paper/1806.07558/) (2018)
- [Taxonomy and Challenges of Out-of-Band Signal Injection Attacks and Defenses](https://mlsanity.com/paper/1901.06935/) (2019)

## Built on by (most cited first, 6 of 6)

- [Enhancing LLM-based Autonomous Driving Agents to Mitigate Perception Attacks](https://mlsanity.com/paper/2409.14488/) (2024)
- [Understanding Impacts of Electromagnetic Signal Injection Attacks on Object Detection](https://mlsanity.com/paper/2407.16327/) (2024)
- [RoVISQ: Reduction of Video Service Quality via Adversarial Attacks on Deep Learning-based Video Compression](https://mlsanity.com/paper/2203.10183/) (2022)
- [PhantomLiDAR: Cross-modality Signal Injection Attacks against LiDAR](https://mlsanity.com/paper/2409.17907/) (2024)
- [A Simulation Framework for Electromagnetic Signal Injection Attacks on Image Sensors](https://mlsanity.com/paper/2408.05124/) (2024)
- [Rainbow Artifacts from Electromagnetic Signal Injection Attacks on Image Sensors](https://mlsanity.com/paper/2507.07773/) (2025)

## Abstract (arXiv)

Since cameras have become a crucial part in many safety-critical systems and applications, such as autonomous vehicles and surveillance, a large body of academic and non-academic work has shown attacks against their main component - the image sensor. However, these attacks are limited to coarse-grained and often suspicious injections because light is used as an attack vector. Furthermore, due to the nature of optical attacks, they require the line-of-sight between the adversary and the target camera. In this paper, we present a novel post-transducer signal injection attack against CCD image sensors, as they are used in professional, scientific, and even military settings. We show how electromagnetic emanation can be used to manipulate the image information captured by a CCD image sensor with the granularity down to the brightness of individual pixels. We study the feasibility of our attack and then demonstrate its effects in the scenario of automatic barcode scanning. Our results indicate that the injected distortion can disrupt automated vision-based intelligent systems.