Can You Trust What You See? Alpha Channel No-Box Attacks on Video Object Detection
Not on the map. Why?
Abstract (arXiv)
As object detection models are increasingly deployed in cyber-physical systems such as autonomous vehicles (AVs) and surveillance platforms, ensuring their security against adversarial threats is essential. While prior work has explored adversarial attacks in the image domain, those attacks in the video domain remain largely unexamined, especially in the no-box setting. In this paper, we present α-Cloak, the first no-box adversarial attack on object detectors that operates entirely through the alpha channel of RGBA videos. α-Cloak exploits the alpha channel to fuse a malicious target video with a benign video, resulting in a fused video that appears innocuous to human viewers but consistently fools object detectors. Our attack requires no access to model architecture, parameters, or outputs, and introduces no perceptible artifacts. We systematically study the support for alpha channels across common video formats and playback applications, and design a fusion algorithm that ensures visual stealth and compatibility. We evaluate α-Cloak on five state-of-the-art object detectors, a vision-language model, and a multi-modal large language model (Gemini-2.0-Flash), demonstrating a 100% attack success rate across all scenarios. Our findings reveal a previously unexplored vulnerability in video-based perception systems, highlighting the urgent need for defenses that account for the alpha channel in adversarial settings.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 15 of its 30 references that are in the map. First posted on arXiv 22 Oct 2025.
Builds on
15 of 30 references.
References · 15
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,639
- 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 685
- 2019Object Detection in 20 Years: A Surveycited by 531
- 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 462
- 2023A Comprehensive Survey on Pretrained Foundation Models: A History from BERT to ChatGPTcited by 368
- 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
- 2019Simple Black-box Adversarial Attackscited by 251
- 2018Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priorscited by 146
- 2018GenAttack: Practical Black-box Attacks with Gradient-Free Optimizationcited by 82
- 2023Open-VCLIP: Transforming CLIP to an Open-vocabulary Video Model via Interpolated Weight Optimizationcited by 55
- 2019Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimizationcited by 49
- 2024What is YOLOv5: A deep look into the internal features of the popular object detectorcited by 37
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Comprehensive Evaluation of Cloaking Backdoor Attacks on Object Detector in Real-World
- 2022Dangerous Cloaking: Natural Trigger based Backdoor Attacks on Object Detectors in the Physical World
- 2024A Survey and Evaluation of Adversarial Attacks for Object Detection
- 2025DisPatch: Disarming Adversarial Patches in Object Detection with Diffusion Models
- 2024Mask-based Invisible Backdoor Attacks on Object Detection
- 2024Exploiting Alpha Transparency In Language And Vision-Based AI Systems
- 2024On the Credibility of Backdoor Attacks Against Object Detectors in the Physical World
- 2024Detector Collapse: Physical-World Backdooring Object Detection to Catastrophic Overload or Blindness in Autonomous Driving