USENIX Security '23 - Squint Hard Enough: Attacking Perceptual Hashing with Adversarial Machine...

USENIX Security '23 - Squint Hard Enough: Attacking Perceptual Hashing with Adversarial Machine Learning

Jonathan Prokos, Johns Hopkins University; Neil Fendley, Johns Hopkins University Applied Physics Laboratory; Matthew Green, Johns Hopkins University; Roei Schuster, Vector Institute; Eran Tromer, Tel Aviv University and Columbia University; Tushar Jois and Yinzhi Cao, Johns Hopkins University

Many online communications systems use perceptual hash matching systems to detect illicit files in user content. These systems employ specialized perceptual hash functions such as Microsoft's PhotoDNA or …

adversarial columbia columbia university green hard hashing machine machine learning matthew matthew green neil physics security tel aviv tel aviv university university usenix usenix security