Abstract:While deep neural networks (DNNs) have made remarkable advancements in various fields recently, the latest research indicates that DNNs are susceptible to disruptions from minor perturbations. However, conventional physical attacks employing stickers as physical perturbations to deceive classifiers encounter challenges in achieving stealthiness and are susceptible to issues such as printing quality loss. Recent advancements in physical attacks have harnessed light beams to execute attacks, producing artificial optical patterns rather than natural ones. In this study, we introduce a black-box projector-based physical attack called Adversarial Color Projection (AdvCP), which manipulates the physical parameters of color projection to execute adversarial attacks. AdvCP revolves around three pivotal criteria: effectiveness, stealthiness, and robustness. In a digital environment, our approach attains an impressive attack success rate of 97.60% on a subset of ImageNet. In the physical realm, we achieve a remarkable 100% attack success rate in indoor testing and 82.14% in outdoor testing. To underscore the stealthiness of our approach, we juxtapose the adversarial samples generated by AdvCP with baseline samples. When applied to challenge advanced and robust DNNs, our experimental results reveal that our method achieves an attack success rate exceeding 85% across most all of the models, establishing the robustness of AdvCP. Finally, we contemplate the potential threats posed by AdvCP to future vision-based systems and applications, and proffer some innovative concepts pertaining to light-based physical attacks. Our code can be accessed from the following link: https://github.com/ChengYinHu/AdvCP.git

Patch of Invisibility: Naturalistic Physical Black-Box Adversarial Attacks on Object Detectors

Towards a Physical-World Adversarial Patch for Blinding Object Detection Models.

AdvART: Adversarial Art for Camouflaged Object Detection Attacks

Adversarial Attack for Object Detectors under Complex Conditions.

Adversarial Camera Patch: An Effective and Robust Physical-World Attack on Object Detectors

Empirical Evaluation of Physical Adversarial Patch Attacks Against Overhead Object Detection Models

Contextual Adversarial Attack Against Aerial Detection in the Physical World

Physical Adversarial Attack Scheme on Object Detectors using 3D Adversarial Object

Camouflaged Adversarial Patch Attack on Object Detector

Object-Aware Transfer-Based Black-Box Adversarial Attack on Object Detector.

Unified Adversarial Patch for Visible-Infrared Cross-modal Attacks in the Physical World

Physical Adversarial Attacks on an Aerial Imagery Object Detector

Adversarial Color Projection: A Projector-Based Physical-World Attack to DNNs

Transferable Physical Attack against Object Detection with Separable Attention

Unified Adversarial Patch for Cross-modal Attacks in the Physical World

An Adversarial Attack on DNN-based Black-Box Object Detectors

Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectors.

Misleading attention and classification: An adversarial attack to fool object detection models in the real world

Universal Physical Camouflage Attacks on Object Detectors

Black-Box Attack Against GAN-Generated Image Detector with Contrastive Perturbation

Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World