Abstract:Adversarial attacks involve introducing minimal perturbations into the original input to manipulate deep learning models into making incorrect network predictions. Despite substantial interest, there remains insufficient research investigating the impact of adversarial attacks in real-world scenarios. Moreover, adversarial attacks have been extensively examined within the digital domain, but adapting them to realistic scenarios brings new challenges and opportunities. Existing physical world adversarial attacks often look perceptible and attention-grabbing, failing to imitate real-world scenarios credibly when tested on object detectors. This research attempts to craft a physical world adversarial attack that deceives object recognition systems and human observers to address the mentioned issues. The devised attacking approach tried to simulate the realistic appearance of stains left by rain particles on traffic signs, making the adversarial examples blend seamlessly into their environment. This work proposed a region reflection algorithm to localize the optimal perturbation points that reflected the trusted regions by employing the trust region optimization with a multi-quadratic function. The experimental evaluation reveals that the proposed work achieved an average attack success rate (ASR) of 94.18%. Experimentation underscores its applicability in a dynamic range of real-world settings through experiments involving distance and angle variations in physical world settings. However, the performance evaluation across various detection models reveals its generalizable and transferable nature. The outcomes of this study help to understand the vulnerabilities of object detectors and inspire AI (artificial intelligence) researchers to develop more robust and resilient defensive mechanisms.

Shadows Aren't So Dangerous After All: A Fast and Robust Defense Against Shadow-Based Adversarial Attacks

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenon

Towards Robustness against Unsuspicious Adversarial Examples

Building Robust Deep Neural Networks for Road Sign Detection

Robust width: A lightweight and certifiable adversarial defense

Benchmarking Adversarial Robustness of Image Shadow Removal with Shadow-adaptive Attacks

A New Defense Against Adversarial Images: Turning a Weakness into a Strength

Targeted Attention Attack on Deep Learning Models in Road Sign Recognition

Robust Image Classification: Defensive Strategies against FGSM and PGD Adversarial Attacks

Robust Physical-World Attacks on Deep Learning Models

Robustness Out of the Box: Compositional Representations Naturally Defend Against Black-Box Patch Attacks

Targeted Physical-World Attention Attack on Deep Learning Models in Road Sign Recognition

Adversary ML Resilience in Autonomous Driving Through Human Centered Perception Mechanisms

Time Traveling to Defend Against Adversarial Example Attacks in Image Classification

Fall Leaf Adversarial Attack on Traffic Sign Classification

Adversarial Robustness Through Artifact Design

Not So Robust After All: Evaluating the Robustness of Deep Neural Networks to Unseen Adversarial Attacks

Don't Look into the Sun: Adversarial Solarization Attacks on Image Classifiers

Shadow-Catcher: Looking Into Shadows to Detect Ghost Objects in Autonomous Vehicle 3D Sensing

A Reliable Approach for Generating Realistic Adversarial Attack via Trust Region-Based Optimization