{
 "id": "AIR-2023-0015",
 "slug": "mitre-ai-red-team-demonstrates-physical-evasion-attack-on-fa",
 "title": "MITRE AI Red Team demonstrates physical evasion attack on face identification",
 "summary": "Researchers demonstrated a physical-domain evasion attack on a commercial face identification service to induce misclassification. The exercise combined traditional enterprise techniques with adversarial machine learning steps.",
 "type": "attack_on_ai",
 "categories": [
  "adversarial_evasion"
 ],
 "severity": 1,
 "targets": [
  "enterprise_deployment"
 ],
 "products": [
  "Commercial Face Identification Service"
 ],
 "incident_date": "2023-03-31",
 "incident_date_precision": "day",
 "first_reported": "2023-03-31",
 "sources": [
  {
   "url": "https://github.com/avidml/avid-db/blob/main/vulnerabilities/2023/AVID-2023-V012.json",
   "publisher": "AVID",
   "title": "AVID-2023-V012: MITRE's AI Red Team demonstrated a physical-domain evasion attack on a commercial face identification service with the intention of inducing a targeted misclassification.",
   "published_at": "2023-03-31"
  },
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0012",
   "publisher": "MITRE ATLAS",
   "title": "Face Identification System Evasion via Physical Countermeasures",
   "published_at": "2023-03-31"
  }
 ],
 "source_count": 2,
 "confidence": 0.9,
 "status": "published",
 "origin": "seed_avid",
 "tags": [
  "mitre",
  "adversarial-ml",
  "evasion",
  "avid"
 ],
 "created_at": "2026-10-18T06:56:23.100Z",
 "updated_at": "2026-10-18T06:56:23.100Z"
}