Fooling OCR Systems with Adversarial Text Images

Congzheng Song; Vitaly Shmatikov

Fooling OCR Systems with Adversarial Text Images

Not yet reviewed by Pith; the record is open.

Re-run · record.json Download PDF Read on arXiv ↗

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 1802.05385 v1 pith:2MNMX7XJ submitted 2018-02-15 cs.LG cs.AIcs.CRcs.CV

Fooling OCR Systems with Adversarial Text Images

Congzheng Song , Vitaly Shmatikov This is my paper

classification cs.LG cs.AIcs.CRcs.CV

keywords textimagesadversarialmeaningsystemadversaryapplicationscause

verification ladder T0 review T1 audit T2 compute T3 formal T4 reserved

0 comments

read the original abstract

We demonstrate that state-of-the-art optical character recognition (OCR) based on deep learning is vulnerable to adversarial images. Minor modifications to images of printed text, which do not change the meaning of the text to a human reader, cause the OCR system to "recognize" a different text where certain words chosen by the adversary are replaced by their semantic opposites. This completely changes the meaning of the output produced by the OCR system and by the NLP applications that use OCR for preprocessing their inputs.

discussion (0)

Forward citations

Cited by 1 Pith paper

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score.

Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering
cs.CV 2025-12 conditional novelty 6.0

Small, mostly invisible pixel changes to document images can force DocVQA models Pix2Struct and Donut to output attacker-selected answers or fail to answer.