CYBRARY Pixel Imperfect
A vision model gates physical access at a logistics site. Someone printed a patch that makes an unauthorised badge classify as staff. Harden the model and the process around it — the camera is not the only control you have.
Physical security PS-19 — 'tailgate-free entry with an unknown badge'
ML engineer
Physical security
Detection engineer
50 minutes · advanced
Execution trace
00:00:00enterprisegate-camera-3
attack step
Unknown badge presented
Printed patch occupies 6% of the frame.
00:00:01modelbadge-classifier@2025.11
attack step
Classified as staff at 0.97
Confidence is high and wrong — the failure mode that matters.
00:00:02enterprisedoor-controller
attack step
Door released
No second factor, no human in the loop.
00:15:00alertguard rounds
Unbadged person in a restricted aisle
Detected by a human, 15 minutes later.