Abstract:Deep neural networks (DNNs) have become essential for aerial detection. However, DNNs are vulnerable to adversarial examples, which pose great security concerns for security-critical systems. Researchers recently devised adversarial patches to evaluate the vulnerability of DNN-based aerial detection methods physically. Nonetheless, adversarial patches generated by the existing algorithms are not strong enough and extremely time-consuming. Moreover, complicated physical factors are not accommodated well during the optimization process. In this article, a novel adaptive-patch-based physical attack (AP-PA) framework is proposed to alleviate the above problems, which achieves state-of-the-art performance in both accuracy and efficiency. Specifically, AP-PA aims to generate adversarial patches that are adaptive in both physical dynamics and varying scales, and by which the particular targets can be hidden from being detected. Furthermore, the adversarial patch is also gifted with attack effectiveness against all targets of the same class with a patch outside the target (no need to smear targeted objects) and robust enough in the physical world. In addition, a new loss is devised to consider more available information of detected objects to optimize the adversarial patch, which can significantly improve the patch's attack efficacy (average precision drop up to 87.86% and 85.48% in white-box and black-box settings, respectively) and optimizing efficiency. We also establish one of the first comprehensive, coherent, and rigorous benchmarks to evaluate the attack efficacy of adversarial patches on aerial detection tasks. Finally, several proportionally scaled experiments are performed physically to demonstrate that the elaborated adversarial patches can successfully deceive aerial detection algorithms in dynamic physical circumstances. The code is available at https://github.com/JiaweiLian/AP-PA.

A Real-Time Defense Against Object Vanishing Adversarial Patch Attacks for Object Detection in Autonomous Vehicles

Model Agnostic Defense against Adversarial Patch Attacks on Object Detection in Unmanned Aerial Vehicles

You Cannot Easily Catch Me: A Low-Detectable Adversarial Patch for Object Detectors

Dynamic Adversarial Attacks on Autonomous Driving Systems

I Don't Know You, But I Can Catch You: Real-Time Defense against Diverse Adversarial Patches for Object Detectors

Improving the Robustness of Object Detection and Classification AI models against Adversarial Patch Attacks

DAP: A Dynamic Adversarial Patch for Evading Person Detectors

Evaluating Adversarial Attacks on Driving Safety in Vision-Based Autonomous Vehicles

STOP! Camera Spoofing via the in-Vehicle IP Network

Breaking the Illusion: Real-world Challenges for Adversarial Patches in Object Detection

Benchmarking Adversarial Patch Against Aerial Detection

Embodied Active Defense: Leveraging Recurrent Feedback to Counter Adversarial Patches

Adversarial Patch Camouflage against Aerial Detection

PAD: Patch-Agnostic Defense against Adversarial Patch Attacks

Robust Roadside Physical Adversarial Attack Against Deep Learning in Lidar Perception Modules

Adversarial patch attacks against aerial imagery object detectors

Adversarial Attack and Defense of YOLO Detectors in Autonomous Driving Scenarios

Detection of Adversarial Physical Attacks in Time-Series Image Data

Attention-Based Real-Time Defenses for Physical Adversarial Attacks in Vision Applications

Understanding Object Detection Through An Adversarial Lens

Transient Adversarial 3D Projection Attacks on Object Detection in Autonomous Driving