Face Identification System Evasion via Physical Countermeasures
Attack on AI1 Research / proof of conceptAdversarial evasion
MITRE's AI Red Team demonstrated a physical-domain evasion attack to induce targeted misclassification in a face identification service. The operation combined adversarial machine learning techniques with API exploitation.
Details
- type
- Attack on AIAn AI model, agent or AI-powered product was the thing exploited, abused or leaked.
- categories
- Adversarial evasionInputs crafted to make a model misclassify or miss detections (perturbations, evasion of AI-based defences).
- Adversarial evasion
- owasp llm top 10
- no entry for these categories
- mitre atlas
- Both rows are derived from the type and categories (OWASP 2025 edition, ATLAS release 2026.09), not classified per record. How
- severity
- 1 · Research / proof of conceptDemonstrated by researchers; no known real-world exploitation.
- targets
- Enterprise deployment
- products
- Commercial Face Identification Service
- incident date
- 1 Jan 2020
- first reported
- 23 Oct 2020
- origin
- MITRE ATLASDerived from MITRE ATLAS (Apache 2.0, © MITRE).
- classifier confidence
- 0.95 · published at or above 0.80; see the methodology
- tags
- red-team · facial-recognition · evasion
- record
- created 2026-10-18 06:55Z · updated 2026-10-18 06:55Z · json
Sources · 1
- 2020-10-23Face Identification System Evasion via Physical CountermeasuresMITRE ATLAS · atlas.mitre.org/studies/AML.CS0012
Titles and links belong to their publishers. The summary above is written by GCD AI RADAR in its own words; data is CC BY-SA 4.0.
Related incidents
- 2020-10-23Microsoft Edge AI Product Evasion Red Team Exercise1 Researchon AIEvasion1 src
- 2020-10-23Microsoft Internal Azure AI Service Red Team Exercise1 Researchon AIEvasion1 src
- 2020-10-23ProofPoint Email Protection Evasion via Surrogate Model1 Researchon AIEvasion6 src
- 2020-12-15Botnet DGA Detection Evasion Using Domain Mutation1 Researchon AIEvasion3 src
- 2020-12-15Evasion of Deep Learning Detector for Malware C&C Traffic1 Researchon AIEvasion2 src
- 2020-12-03Bypassing Cylance AI Malware Detection via Universal String1 Researchon AIEvasion3 src