Adversarial Perturbation of Images

When an attacker adds a crafted perturbation to input images, causing a detection system to classify an item that should be intercepted as normal; due to unmitigated control gaps, the system output gives no indication of anomaly, and human review cannot detect the perturbation because it is imperceptible, triggering compliance exposure and operational reputational costs.