Abstract:Although deep learning has received extensive attention and achieved excellent performance in various scenarios, it suffers from adversarial examples to some extent. In particular, physical attack poses a greater threat than digital attack. However, existing research has paid less attention to the physical attack of object detection in UAV remote sensing images (RSIs). In this work, we carefully analyze the universal adversarial patch attack for multi-scale objects in the field of remote sensing. There are two challenges faced by an adversarial attack in RSIs. On one hand, the number of objects in remote sensing images is more than that of natural images. Therefore, it is difficult for an adversarial patch to show an adversarial effect on all objects when attacking a detector of RSIs. On the other hand, the wide height range of the photography platform causes the size of objects to vary a great deal, which presents challenges for the generation of universal adversarial perturbation for multi-scale objects. To this end, we propose an adversarial attack method of object detection for remote sensing data. One of the key ideas of the proposed method is the novel optimization of the adversarial patch. We aim to attack as many objects as possible by formulating a joint optimization problem. Furthermore, we raise the scale factor to generate a universal adversarial patch that adapts to multi-scale objects, which ensures that the adversarial patch is valid for multi-scale objects in the real world. Extensive experiments demonstrate the superiority of our method against state-of-the-art methods on YOLO-v3 and YOLO-v5. In addition, we also validate the effectiveness of our method in real-world applications.

Universal Physical Camouflage Attacks on Object Detectors

Unified Adversarial Patch for Visible-Infrared Cross-modal Attacks in the Physical World

Universal Physical Adversarial Attack via Background Image

Unified Adversarial Patch for Cross-modal Attacks in the Physical World

Contextual Adversarial Attack Against Aerial Detection in the Physical World

Transferable Physical Attack against Object Detection with Separable Attention

Physical Adversarial Attack Scheme on Object Detectors using 3D Adversarial Object

Adversarial Camera Patch: An Effective and Robust Physical-World Attack on Object Detectors

Towards Universal Physical Attacks on Single Object Tracking

Learning Coated Adversarial Camouflages for Object Detectors

FCA: Learning a 3D Full-Coverage Vehicle Camouflage for Multi-View Physical Adversarial Attack

Physical Strip Attack for Object Detection in Optical Remote Sensing

Pattern Corruption-Assisted Physical Attacks Against Object Detection in UAV Remote Sensing

Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World

Physically Adversarial Infrared Patches with Learnable Shapes and Locations

Empirical Evaluation of Physical Adversarial Patch Attacks Against Overhead Object Detection Models

A Survey on Physical Adversarial Attack in Computer Vision

Adversarial Patch Attack on Multi-Scale Object Detection for UAV Remote Sensing Images

Physical Adversarial Attack on Vehicle Detector in the Carla Simulator

Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectors.

Camouflaged Adversarial Patch Attack on Object Detector