Abstract:In this paper, we propose a novel physical stealth attack against the person detectors in real world. The proposed method generates an adversarial patch, and prints it on real clothes to make a three dimensional (3D) invisible cloak. Anyone wearing the cloak can evade the detection of person detectors and achieve stealth. We consider the impacts of those 3D physical constraints (i.e., radian, wrinkle, occlusion, angle, etc.) on person stealth attacks, and propose 3D transformations to generate 3D invisible cloak. We launch the person stealth attacks in 3D physical space instead of 2D plane by printing the adversarial patches on real clothes under challenging and complex 3D physical scenarios. The conventional and 3D transformations are performed on the patch during its optimization process. Further, we study how to generate the optimal 3D invisible cloak. Specifically, we explore how to choose input images with specific shapes and colors to generate the optimal 3D invisible cloak. Besides, after successfully making the object detector misjudge the person as other objects, we explore how to make a person completely disappeared, i.e., the person will not be detected as any objects. Finally, we present a systematic evaluation framework to methodically evaluate the performance of the proposed attack in digital domain and physical world. Experimental results in various indoor and outdoor physical scenarios show that, the proposed person stealth attack method is robust and effective even under those complex and challenging physical conditions, such as the cloak is wrinkled, obscured, curved, and from different angles. The attack success rate in digital domain (Inria data set) is 86.56%, while the static and dynamic stealth attack performance in physical world is 100% and 77%, respectively, which are significantly better than existing works.

Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectors.

You Cannot Easily Catch Me: A Low-Detectable Adversarial Patch for Object Detectors

Learning Coated Adversarial Camouflages for Object Detectors

Transferable Physical Attack against Object Detection with Separable Attention

Understanding Object Detection Through An Adversarial Lens

A Comprehensive Study and Comparison of the Robustness of 3D Object Detectors Against Adversarial Attacks

Towards a Physical-World Adversarial Patch for Blinding Object Detection Models.

Learning Transferable 3D Adversarial Cloaks for Deep Trained Detectors

Transferable Adversarial Attacks for Object Detection Using Object-Aware Significant Feature Distortion

Object-Aware Transfer-Based Black-Box Adversarial Attack on Object Detector.

Unified Adversarial Patch for Visible-Infrared Cross-modal Attacks in the Physical World

Object Hider: Adversarial Patch Attack Against Object Detectors

OptiCloak: Blinding Vision-Based Autonomous Driving Systems Through Adversarial Optical Projection

Network transferability of adversarial patches in real-time object detection

Dangerous Cloaking: Natural Trigger Based Backdoor Attacks on Object Detectors in the Physical World

Unified Adversarial Patch for Cross-modal Attacks in the Physical World

InvisibiliTee: Angle-agnostic Cloaking from Person-Tracking Systems with a Tee

Patch of Invisibility: Naturalistic Physical Black-Box Adversarial Attacks on Object Detectors

Universal Physical Camouflage Attacks on Object Detectors

3D Invisible Cloak

Misleading attention and classification: An adversarial attack to fool object detection models in the real world