Abstract:Deep Neural Networks (DNNs) have been shown to be vulnerable to adversarial examples. The existence of adversarial examples significantly hinders the development of deep learning technologies in domains with high-security requirements. However, current defense methods often lack universality, being effective only against specific adversarial attacks. This study focuses on analyzing adversarial examples through changes in model attention, classifying attack algorithms into attention-shifting and attention-attenuation categories. To counter attention-shifting attacks, a defense module named Feature Pyramid-based Attention Space-guided (FPAS) is proposed, which spatially retracts the shifting attention in adversarial examples, thereby enhancing the model's overall defense capability. Attention-based Non-Local (ANL) is a proposed defense module to counter attention-attenuation attacks. This module enhances the model's focus on critical features, efficiently constructing a robust defense model with low implementation cost and minimal intrusion into the original model. By integrating FPAS and ANL into the Wide-ResNet model within a boosting framework, the study demonstrates their synergistic defense capability. Even with eight adversarial samples embedded with adversarial patches, our FPAS_at and ANL_at models demonstrated significant improvements over the baseline, enhancing the average defense rate by 5.47% and 7.74%, respectively. Extensive experiments confirm that this universal defense strategy offers comprehensive protection against adversarial attacks at a lower implementation cost compared to current mainstream defense methods, while also being adaptable for integration with existing defense strategies to further enhance adversarial robustness.

DPAttack: Diffused Patch Attacks against Universal Object Detection

Object Hider: Adversarial Patch Attack Against Object Detectors

DPatch: An Adversarial Patch Attack on Object Detectors

ADVERSARIAL ATTACKS ON OBJECT DETECTORS WITH LIMITED PERTURBATIONS

Adversarial patch attacks against aerial imagery object detectors

RPATTACK: Refined Patch Attack on General Object Detectors

You Cannot Easily Catch Me: A Low-Detectable Adversarial Patch for Object Detectors

A Universal Defense Strategy Against Adversarial Attacks Based on Attention-Guided

Adversarial Patch Attacks Against Aerial Imagery Object Detectors Based on Interpretable Guidance

PAD: Patch-Agnostic Defense against Adversarial Patch Attacks

Adversarial Patch Attack on Multi-Scale Object Detection for UAV Remote Sensing Images

Playing Against Deep-Neural-Network-Based Object Detectors: A Novel Bidirectional Adversarial Attack Approach

I Don't Know You, But I Can Catch You: Real-Time Defense against Diverse Adversarial Patches for Object Detectors

DIFFender: Diffusion-Based Adversarial Defense against Patch Attacks

Object-Aware Transfer-Based Black-Box Adversarial Attack on Object Detector.

Mitigating Adversarial Attacks in Object Detection through Conditional Diffusion Models

Adversarial Attack for Object Detectors under Complex Conditions.

Understanding Object Detection Through An Adversarial Lens

A Transferable Adversarial Attack Against Object Detection Networks

D-UAP: Initially Diversified Universal Adversarial Patch Generation Method

Patch Attack for Automatic Check-out