Abstract:Deep neural networks (DNNs) have been widely applied to salient object detection in optical remote sensing images (ORSIs-SOD) with significant progress. However, the introduction of adversarial perturbations can severely degrade their detection performance. Moreover, the relatively limited labeled samples in ORSI-SOD make the model more susceptible for overfitting, increasing sensitivity to adversarial perturbations. Therefore, researching defense algorithms against adversarial samples to enhance the robustness of salient object detection (SOD) models in the field of ORSIs is of great importance. However, existing defense studies have seldom focused on the ORSI-SOD task and have not considered the unique challenges it faces to propose effective defense solutions. Thus, this article proposes a robust adversarial defense algorithm specifically for ORSI-SOD for the first time. This algorithm first proposes a fixed luminance channel multimodal data random fusion adversarial defense strategy to enhance the model's robustness against the color and contour information of targets. Then, the algorithm proposes a sinusoidal noise-driven adversarial feature adaptive masking module, which adaptively reduces the impact of adversarial perturbations and enhances the model's generalization ability. In addition, the algorithm proposes a global context-aware denoising perception module (GCA-DPM) into the network to strengthen the model's understanding of the global content of images, further suppressing the impact of adversarial noise and enhancing the detection accuracy. Finally, experimental results demonstrate that the proposed defense algorithm effectively enhances the adversarial robustness of various SOD models. Against three different attack strategies, the algorithm increases the average F-beta of four SOD models by 23.94% and 21.98% on the optical remote sensing saliency detection (ORSSD) and extended ORSSD (EORSSD) datasets, respectively.

Improving Adversarial Robustness of Detector Via Objectness Regularization

Adversarially-Aware Robust Object Detector.

Adversarial YOLO: Defense Human Detection Patch Attacks via Detecting Adversarial Patches

What's Wrong with the Robustness of Object Detectors?

RPATTACK: Refined Patch Attack on General Object Detectors

Learning Adversarially Robust Object Detector with Consistency Regularization in Remote Sensing Images

Infrared Adversarial Patch Generation Based on Reinforcement Learning

Toward Improving Robustness of Object Detectors Against Domain Shift

Object Hider: Adversarial Patch Attack Against Object Detectors

Breaking the Illusion: Real-world Challenges for Adversarial Patches in Object Detection

A Comprehensive Study and Comparison of the Robustness of 3D Object Detectors Against Adversarial Attacks

Improving the Robustness of Object Detection and Classification AI models against Adversarial Patch Attacks

Sparse Adversarial Attack to Object Detection

AdvLogo: Adversarial Patch Attack against Object Detectors based on Diffusion Models

Towards a Physical-World Adversarial Patch for Blinding Object Detection Models.

Transferable Adversarial Attacks for Object Detection Using Object-Aware Significant Feature Distortion

Misleading attention and classification: An adversarial attack to fool object detection models in the real world

Adversarial Attack and Defense of YOLO Detectors in Autonomous Driving Scenarios

A Robust Adversarial Defense Algorithm for Enhancing Salient Object Detection in Remote Sensing Image

Adversarial defenses for object detectors based on Gabor convolutional layers

A Comprehensive Study of the Robustness for LiDAR-Based 3D Object Detectors Against Adversarial Attacks