Abstract:Deep learning has shown superiority in dealing with complicated and professional tasks (e.g., computer vision, audio, and language processing). However, research works have confirmed that Deep Neural Networks (DNNs) are vulnerable to carefully crafted adversarial perturbations, which cause DNNs confusion on specific tasks. In object detection domain, the background has little contributions to object classification, and the crafted adversarial perturbations added to the background do not improve the adversary effect in fooling deep neural detection models yet induce substantial distortions in generated examples. Based on such situation, we introduce an adversarial attack algorithm named Adaptive Object-oriented Adversarial Method (AO 2 AM). It aims to fool deep neural object detection networks with the adversarial examples by applying the adaptive cumulation of object-based gradients and adding the adaptive object-based adversarial perturbations merely onto objects rather than the whole frame of input images. AO 2 AM can effectively make the representations of generated adversarial samples close to the decision boundary in the latent space, and force deep neural detection networks to yield inaccurate locations and false classification in the process of object detection. Compared with existing adversarial attack methods which generate adversarial perturbations acting on the global scale of the original inputs, the adversarial examples produced by AO 2 AM can effectively fool deep neural object detection networks and maintain a high structural similarity with corresponding clean inputs. Performing adversarial attacks on Faster R-CNN, AO 2 AM gains attack success rate (ASR) over 98.00% on pre-processed Pascal VOC 2007&2012 (Val), and reaches SSIM over 0.870. In Fooling SSD, AO 2 AM receives SSIM exceeding 0.980 on L 2 norm constraint. On SSIM and Mean Attack Ratio, AO 2 AM outperforms adversarial attack methods based on global scale perturbations.

Adversarial defenses for object detectors based on Gabor convolutional layers

F&F Attack: Adversarial Attack Against Multiple Object Trackers by Inducing False Negatives and False Positives

Adversarial Attack and Defense of YOLO Detectors in Autonomous Driving Scenarios

Understanding Object Detection Through An Adversarial Lens

Playing Against Deep-Neural-Network-Based Object Detectors: A Novel Bidirectional Adversarial Attack Approach

Fooling deep neural detection networks with adaptive object-oriented adversarial perturbation

AT-BOD: An Adversarial Attack on Fool DNN-Based Blackbox Object Detection Models

Adversarial YOLO: Defense Human Detection Patch Attacks via Detecting Adversarial Patches

Building Towards "Invisible Cloak": Robust Physical Adversarial Attack on YOLO Object Detector

Improving Adversarial Robustness of Detector Via Objectness Regularization

Physical Adversarial Attack Scheme on Object Detectors using 3D Adversarial Object

A Survey and Evaluation of Adversarial Attacks for Object Detection

An adversarial example attack method based on predicted bounding box adaptive deformation in optical remote sensing images

Adversarial Detection: Attacking Object Detection in Real Time

A Comprehensive Study and Comparison of the Robustness of 3D Object Detectors Against Adversarial Attacks

Misleading attention and classification: An adversarial attack to fool object detection models in the real world

Mitigating Adversarial Attacks in Object Detection through Conditional Diffusion Models

Object-Attentional Untargeted Adversarial Attack

Camouflaged Adversarial Patch Attack on Object Detector

TOG: Targeted Adversarial Objectness Gradient Attacks on Real-time Object Detection Systems

Towards Generic and Controllable Attacks Against Object Detection