Abstract:Deep neural networks (DNNs) have become essential for aerial detection. However, DNNs are vulnerable to adversarial examples, which pose great security concerns for security-critical systems. Researchers recently devised adversarial patches to evaluate the vulnerability of DNN-based aerial detection methods physically. Nonetheless, adversarial patches generated by the existing algorithms are not strong enough and extremely time-consuming. Moreover, complicated physical factors are not accommodated well during the optimization process. In this article, a novel adaptive-patch-based physical attack (AP-PA) framework is proposed to alleviate the above problems, which achieves state-of-the-art performance in both accuracy and efficiency. Specifically, AP-PA aims to generate adversarial patches that are adaptive in both physical dynamics and varying scales, and by which the particular targets can be hidden from being detected. Furthermore, the adversarial patch is also gifted with attack effectiveness against all targets of the same class with a patch outside the target (no need to smear targeted objects) and robust enough in the physical world. In addition, a new loss is devised to consider more available information of detected objects to optimize the adversarial patch, which can significantly improve the patch's attack efficacy (average precision drop up to 87.86% and 85.48% in white-box and black-box settings, respectively) and optimizing efficiency. We also establish one of the first comprehensive, coherent, and rigorous benchmarks to evaluate the attack efficacy of adversarial patches on aerial detection tasks. Finally, several proportionally scaled experiments are performed physically to demonstrate that the elaborated adversarial patches can successfully deceive aerial detection algorithms in dynamic physical circumstances. The code is available at https://github.com/JiaweiLian/AP-PA.

Towards Neural Network Patching: Evaluating Engagement-Layers and Patch-Architectures

Interpretability Based Neural Network Repair

PatchNAS: Repairing DNNs in Deployment with Patched Network Architecture Search.

Efficient Adversarial Input Generation via Neural Net Patching

PatchNet: A Tool for Deep Patch Classification

<i>DeepPatch</i>: A Patching-Based Method for Repairing Deep Neural Networks

Defending Adversarial Patches via Joint Region Localizing and Inpainting

Patchnet: Interpretable Neural Networks for Image Classification

Patching in Order: Efficient On-Device Model Fine-Tuning for Multi-DNN Vision Applications

DePatch: Towards Robust Adversarial Patch for Evading Person Detectors in the Real World

Network transferability of adversarial patches in real-time object detection

Benchmarking Adversarial Patch Against Aerial Detection

Neural Architecture Search for Visual Anomaly Segmentation

Repairing Deep Neural Networks Based on Behavior Imitation

Detecting Adversarial Patches with Class Conditional Reconstruction Networks

Simultaneously Optimizing Perturbations and Positions for Black-box Adversarial Patch Attacks.

A Recurrent Neural Network Based Patch Recommender for Linux Kernel Bugs

P2ExNet: Patch-based Prototype Explanation Network

Causality-based Neural Network Repair

NNrepair: Constraint-based Repair of Neural Network Classifiers

Defensive Patches for Robust Recognition in the Physical World