Abstract:Deep learning has shown superiority in dealing with complicated and professional tasks (e.g., computer vision, audio, and language processing). However, research works have confirmed that Deep Neural Networks (DNNs) are vulnerable to carefully crafted adversarial perturbations, which cause DNNs confusion on specific tasks. In object detection domain, the background has little contributions to object classification, and the crafted adversarial perturbations added to the background do not improve the adversary effect in fooling deep neural detection models yet induce substantial distortions in generated examples. Based on such situation, we introduce an adversarial attack algorithm named Adaptive Object-oriented Adversarial Method (AO 2 AM). It aims to fool deep neural object detection networks with the adversarial examples by applying the adaptive cumulation of object-based gradients and adding the adaptive object-based adversarial perturbations merely onto objects rather than the whole frame of input images. AO 2 AM can effectively make the representations of generated adversarial samples close to the decision boundary in the latent space, and force deep neural detection networks to yield inaccurate locations and false classification in the process of object detection. Compared with existing adversarial attack methods which generate adversarial perturbations acting on the global scale of the original inputs, the adversarial examples produced by AO 2 AM can effectively fool deep neural object detection networks and maintain a high structural similarity with corresponding clean inputs. Performing adversarial attacks on Faster R-CNN, AO 2 AM gains attack success rate (ASR) over 98.00% on pre-processed Pascal VOC 2007&2012 (Val), and reaches SSIM over 0.870. In Fooling SSD, AO 2 AM receives SSIM exceeding 0.980 on L 2 norm constraint. On SSIM and Mean Attack Ratio, AO 2 AM outperforms adversarial attack methods based on global scale perturbations.

Detecting Adversarial Data via Perturbation Forgery

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

Detecting Adversarial Faces Using Only Real Face Self-Perturbations

Adversarial Robust Safeguard for Evading Deep Facial Manipulation

Anti-Forgery: Towards a Stealthy and Robust DeepFake Disruption Attack Via Adversarial Perceptual-aware Perturbations

General Adversarial Perturbation Simulating: Protect Unknown System by Detecting Unknown Adversarial Faces.

Detection of Adversarial Attacks via Disentangling Natural Images and Perturbations

On the Universal Adversarial Perturbations for Efficient Data-free Adversarial Detection

Attacking Adversarial Attacks as A Defense

Adversarial Examples Detection Beyond Image Space.

Data-Free Adversarial Perturbations for Practical Black-Box Attack

Frequency-constrained transferable adversarial attack on image manipulation detection and localization

Perception Matters: Exploring Imperceptible and Transferable Anti-forensics for GAN-generated Fake Face Imagery Detection

Inspector for Face Forgery Detection: Defending Against Adversarial Attacks From Coarse to Fine

On the (Statistical) Detection of Adversarial Examples

Detecting Adversarial Image Examples in Deep Neural Networks with Adaptive Noise Reduction

Imperceptible Face Forgery Attack via Adversarial Semantic Mask

Exploring Frequency Adversarial Attacks for Face Forgery Detection

Fooling deep neural detection networks with adaptive object-oriented adversarial perturbation

Adversarial Detection from Derived Models

Adversarial Attack for Object Detectors under Complex Conditions.