Abstract:Deep neural networks have made tremendous progress in 3D object detection, which is an important task especially in autonomous driving scenarios. Benefited from the breakthroughs in deep learning and sensor technologies, 3D object detection methods based on different sensors, such as camera and LiDAR, have developed rapidly. Meanwhile, more and more researches notice that the abundant information contained in the multi-view data can be used to obtain more accurate understanding of the 3D surrounding environment. Therefore, many sensor-fusion 3D object detection methods have been proposed. As safety is critical in autonomous driving and the deep neural networks are known to be vulnerable to adversarial examples with visually imperceptible perturbations, it is significant to investigate adversarial attacks for 3D object detection. Recent works have shown that both image-based and LiDAR-based networks can be attacked by the adversarial examples while the attacks to the sensor-fusion models, which tend to be more robust, haven't been studied. To this end, we propose a simple multi-view correlation based adversarial attack method for the camera-LiDAR fusion 3D object detection models and focus on the black-box attack setting which is more practical in real-world systems. Specifically, we first design a generative network to generate image adversarial examples based on an auxiliary image semantic segmentation network. Then, we develop a cross-view perturbation projection method by exploiting the camera-LiDAR correlations to map each image adversarial example to the space of the point cloud data to form the point cloud adversarial examples in the LiDAR view. Extensive experiments on the KITTI dataset demonstrate the effectiveness of the proposed method.

A CMA‐ES‐Based Adversarial Attack Against Black‐Box Object Detectors

A CMA-ES-Based Adversarial Attack on Black-Box Deep Neural Networks

Object-Aware Transfer-Based Black-Box Adversarial Attack on Object Detector.

An Adversarial Attack on DNN-based Black-Box Object Detectors

A Large-Scale Multiple-objective Method for Black-box Attack Against Object Detection.

A discrete cosine transform-based query efficient attack on black-box object detectors

Multi-view Correlation Based Black-box Adversarial Attack for 3D Object Detection

Playing Against Deep-Neural-Network-Based Object Detectors: A Novel Bidirectional Adversarial Attack Approach

DIMBA: Discretely Masked Black-Box Attack in Single Object Tracking

Object-Attentional Untargeted Adversarial Attack

Adversarial Attacks to Manipulate Target Localization of Object Detector

Adversarial Example Generation Method for Object Detection in Remote Sensing Images

Misleading attention and classification: An adversarial attack to fool object detection models in the real world

Learning Coated Adversarial Camouflages for Object Detectors

Object Hider: Adversarial Patch Attack Against Object Detectors

Can You Spot the Chameleon? Adversarially Camouflaging Images from Co-Salient Object Detection

Understanding Object Detection Through An Adversarial Lens

Staying in the Cat-and-Mouse Game: Towards Black-box Adversarial Example Detection

Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection

On the Adversarial Robustness of Camera-based 3D Object Detection

Ensemble-based Blackbox Attacks on Dense Prediction