Abstract:Object detection algorithms based on convolutional neural networks (CNNs) have achieved remarkable success in remote sensing images (RSIs), such as aircraft and ship detection, which play a vital role in military and civilian fields. However, CNNs are fragile and can be easily fooled. There have been a series of studies on adversarial attacks for image classification in RSIs. However, the existing gradient attack algorithms designed for classification cannot achieve excellent performance when directly applied to object detection, which is an essential task in RSI understanding. Although we can find some works on adversarial attacks for object detection, they are weak in concealment and easily detected by the naked eye. To handle these problems, we propose a target camouflage network for object detection in RSIs, called CamoNet, to deceive CNN-based detectors by adding imperceptible perturbation to the image. In addition, we propose a detection space initialization strategy to maximize the diversity in the detector’s outputs among the generated samples. It can enhance the performance of the gradient attack algorithms in the object detection task. Moreover, a key pixel distillation module is employed, which can further reduce the modified pixels without weakening the concealment effect. Compared with several of the most advanced adversarial attacks, the proposed attack has advantages in terms of both peak signal-to-noise ratio (PSNR) and attack success rate. The transferability of the proposed target camouflage network is evaluated on three dominant detection algorithms (RetinaNet, Faster R-CNN, and RTMDet) with two commonly used remote sensing datasets (i.e., DOTA and DIOR).

Camou: learning a vehicle camouflage

FCA: Learning a 3D Full-Coverage Vehicle Camouflage for Multi-View Physical Adversarial Attack

Learning Coated Adversarial Camouflages for Object Detectors

CamoEnv: Transferable and environment-consistent adversarial camouflage in autonomous driving

Dual Attribute Adversarial Camouflage toward camouflaged object detection

Differential evolution based dual adversarial camouflage: Fooling human eyes and object detectors

Full-coverage Invisible Camouflage for Adversarial Targeted Attack

Camouflaged Adversarial Patch Attack on Object Detector

CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectors

Toward Robust and Accurate Adversarial Camouflage Generation Against Vehicle Detectors

CCA: Exploring the Possibility of Contextual Camouflage Attack on Object Detection

Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles

CamoNet: A Target Camouflage Network for Remote Sensing Images Based on Adversarial Attack

Physical Adversarial Attack on Vehicle Detector in the Carla Simulator

Developing Imperceptible Adversarial Patches to Camouflage Military Assets From Computer Vision Enabled Technologies

RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generation

Deep Camouflage Images

The Weaknesses of Adversarial Camouflage in Overhead Imagery

Simulation Learning Method For Discovery Of Camouflage Targets Based On Deep Neural Networks

DTA: Physical Camouflage Attacks using Differentiable Transformation Network

Adversarial Patch Camouflage against Aerial Detection