Internship | From digital to physical: can adversarial patches fool AI?

The robustness of object detection models is crucial for them to be usable in a military context. Adversarial patches, designed to mislead models, are a threat to this robustness. These patches are usually generated and evaluated in the digital domain and using bright colors. In this research project, you will investigate if these patches work in the real world. You will create adversarial patches, create a copy of them in the real world and make recordings of these patches to validate how effective they are in the real world. Your work will be crucial in assessing the threat of adversarial AI to the Dutch Ministry of Defense.

You will study different methods to generate adversarial patches that can be used to hide objects from object detection models (e.g. YOLO, RT-DETR). You will optimize these patches for one or more models and find a way to transfer these digital patches to the physical domain (e.g. by printing them onto a board or creating a T-shirt). You will then investigate how well these physical patches work compared to their digital counterparts. One crucial aspect that you could evaluate is how distance between patch and camera influences the effectiveness of the patch to hide the object from detection. Another interesting aspect is balancing the stealthiness of the patch to both a human observer and an AI. You could also consider varying the angles you are recording from, the lighting conditions, the method of creating the physical patch, and the model the patch is optimized and evaluated on.

You will perform this assignment within TNO’s Intelligent Imaging department. The Intelligent Imaging department is a passionate, creative, and dedicated team of professionals (60 people) specialized in developing groundbreaking applications in the field of computer vision. Our team members have diverse backgrounds, ranging from the medical field to artificial intelligence. Intelligent Imaging is a young and growing department which has built up a lot of expertise over the past years in AI and deep learning.

You are in the final stages of your master's degree in artificial intelligence, computer science, physics, mathematics, electrical engineering, or a similar degree. You have some experience in computer vision, artificial intelligence, specifically deep learning and programming in Python. In addition to technical experience, we value clear communication, a result-driven attitude, and a motivation to publish the work.

Please include the following practical information in your cover letter:

• Whether you are looking for an internship or a graduation project.
• The preferred duration of your project (flexible in the range of 6 to 12 months).
• Your desired start date (flexible, but due to the required security screening the earliest possible start date is three months after submitting your application).

You want an internship opportunity on the precursor of your career; an internship gives you an opportunity to take a good look at your prospective future employer. TNO goes a step further. It’s not just looking that interests us; you and your knowledge are essential to our innovation. That’s why we attach a great deal of value to your personal and professional development. You will, of course, be properly supervised during your work placement and be given the scope for you to get the best out of yourself. Furthermore, we provide:

• A highly professional, innovative internship environment, within a team of top experts.
• A suitable internship allowance (615 euro for wo-, hbo- and mbo-students, for a full-time internship).
• Possibility of eight hours of free leave per internship month (for a full-time internship).
• A free membership of Jong TNO, where you can meet other TNO professionals and join several activities, such as sports activities, (work-related) courses or the yearly ski-trip.
• Use of a laptop.
• An allowance for travel expenses in case you don’t receive an OV-card.

At TNO, we innovate for a healthier, safer and more sustainable life. And for a strong economy. Since 1932, we have been making knowledge and technology available for the common good. We find each other in wonder and ingenuity. We are driven to push boundaries. There is all the space and support for your talent and ambition. You work with people who will challenge you: who inspire you and want to learn from you. Our state-of-the-art facilities are there to realize your vision. What you do at TNO matters: impact makes the difference. Because with every innovation you contribute to tomorrow’s world. Read more about TNO as an employer.

At TNO we encourage an inclusive work environment, where you can be yourself. Whatever your story and whatever unique qualities you bring to the table. It is by combining our unique strengths and perspectives that we are able to develop innovations that make a real difference in society. Want to know more? Read what steps we are taking in the area of diversity, equity and inclusion.

After the first CV selection, the application process will be conducted by the concerning department. TNO will provide a suitable internship agreement. If you have any questions about this vacancy, you can contact the contact person mentioned below.

For this internship vacancy it is required that the AIVD issues a security clearance (VGB) after conducting a security screening. Take into account that this process may take about 8 weeks. If you have been abroad for more than 6 consecutive months, or if you do not have the Dutch nationality, it may take longer. Read more about security screening on the AIVD website.

Important to be aware of before applying:

• Before the start of the internship, the internship agreement from TNO needs to be signed. For students at a college or university based in the Netherlands, TNO uses the UNL-template (supplemented with a number of specific agreements from TNO). For students of foreign and MBO educational institutions, the TNO internship agreement applies. TNO does not sign any other internship agreements.
• Before the start of the internship, the educational institution will need to confirm in writing that:
  • you are enrolled at the educational institution during the internship, and;
  • the internship takes place as part of the programme of the study.

• The confirmation of educational institution takes place by signing the UNL template or forms prepared by TNO.
• Interns at TNO must be in possession of a Dutch residential address at the start of the internship. Performance of internship activities from abroad is not possible.