When appearance and motion disagree: evaluating class--motion consistency against disguised uncrewed surface vessels
When appearance and motion disagree: evaluating class--motion consistency against disguised uncrewed surface vessels
This research paper evaluates defenses against disguised uncrewed surface vessels (USVs) by testing adversarial hull patches and physical disguises. The study finds that while adversarial hull patches suppress detection in up to 29% of attempts, they never cause misclassification as benign. Physical disguises can bypass both camera and radar checks. A hybrid replay protocol combining AIS tracks with recorded benign motion is developed for evaluation. For recreational-labeled vessels attacking via direct run-in within 4 nautical miles, an asset-relative closing-rate check flags 94-95% of threats at 15-20 knots, compared with 12% for a track-only speed check. The checks are complementary on off-axis approaches, constraining the attacker and extending response time. Flagging on either check has a 4.9% overall false-alarm rate and 12.3% on recreational traffic.
Source: arXiv Robotics — research abstracts · Read original article ↗
Loading article text…
What the source reports
Publisher-reported claims, with original evidence. These results have not been independently verified by RoboSignal.
Reported numbers
closing rate threshold
15–20
View original evidence
ia direct run-in within 4 nautical miles, an asset-relative closing-rate check flags 94-95% at 15-20 knots, compared with 12% for a track-only speed check. The checks are complementary on off-axis approaches, constraining the attacker to remain below both thresholds and extending the time required to reach the asset. Flagging on either check has a 4.9% held-out false-alarm rate overall and 12.3% on recreational traff
Open source S4distance threshold for direct run-in
4
View original evidence
ia direct run-in within 4 nautical miles, an asset-relative closing-rate check flags 94-95% at 15-20 knots, compared with 12% for a track-only speed check. The checks are complementary on off-axis approaches, constraining the attacker to remain below both thresholds and extending the time required to reach the asset. Flagging on either check has a 4.9% held-out false-alarm rate overall and 12.3% on recreational traff
Open source S4
- paper: not_reported
Source excerpts and review record
Automatically extracted; no manual editorial approval recorded.
ia direct run-in within 4 nautical miles, an asset-relative closing-rate check flags 94-95% at 15-20 knots, compared with 12% for a track-only speed check. The checks are complementary on off-axis approaches, constraining the attacker to remain below both thresholds and extending the time required to reach the asset. Flagging on either check has a 4.9% held-out false-alarm rate overall and 12.3% on recreational traff
Open source S4
y suppress detection in up to 29% of attempts but never cause misclassification as benign. Physical disguise, however, can bypass both a camera check and a radar presence check. To evaluate defenses, we develop a hybrid replay protocol from automatic identification system (AIS) tracks that combines recorded benign motion with direct or off-axis attack run-ins. We find that for recreational-labeled vessels attacking v
Open source S3
Source：arXiv Robotics — research abstracts · arxiv.org