Abstract:Deep neural networks, which can learn the representative and discriminative features from data in a hierarchical manner, have achieved state-of-the-art performance in the remote sensing scene classification task. Despite the great success that deep learning algorithms have obtained, their vulnerability toward adversarial examples deserves our special attention. In this article, we systematically analyze the threat of adversarial examples on deep neural networks for remote sensing scene classification. Both targeted and untargeted attacks are performed to generate subtle adversarial perturbations, which are imperceptible to a human observer but may easily fool the deep learning models. Simply adding these perturbations to the original high-resolution remote sensing (HRRS) images, adversarial examples can be generated, and there are only slight differences between the adversarial examples and the original ones. An intriguing discovery in our study shows that most of these adversarial examples may be misclassified into the wrong category by the state-of-the-art deep neural networks with very high confidence. This phenomenon, undoubtedly, may limit the practical deployment of these deep learning models in the safety-critical remote sensing field. To address this problem, the adversarial training strategy is further investigated in this article, which significantly increases the resistibility of deep models toward adversarial examples. Extensive experiments on three benchmark HRRS image data sets demonstrate that while most of the well-known deep neural networks are sensitive to adversarial perturbations, the adversarial training strategy helps to alleviate their vulnerability toward adversarial examples.

Adversarial Example Generation Method for Object Detection in Remote Sensing Images

Feature Decoupling Based Adversarial Examples Detection Method for Remote Sensing Scene Classification

Generating Adversarial Examples Against Remote Sensing Scene Classification Via Feature Approximation

CamoNet: A Target Camouflage Network for Remote Sensing Images Based on Adversarial Attack

Assessing the Threat of Adversarial Examples on Deep Neural Networks for Remote Sensing Scene Classification: Attacks and Defenses

An Adversarial Attack Method Against Specified Objects Based on Instance Segmentation

Generate More Imperceptible Adversarial Examples for Object Detection

Object Hider: Adversarial Patch Attack Against Object Detectors

Misleading attention and classification: An adversarial attack to fool object detection models in the real world

An Adversarial Attack on DNN-based Black-Box Object Detectors

A low-frequency adversarial attack method for object detection using generative model

Adversarial patch attacks against aerial imagery object detectors

Adversarial Patch Attack on Multi-Scale Object Detection for UAV Remote Sensing Images

Adversarial Pan-Sharpening Attacks for Object Detection in Remote Sensing

Playing Against Deep-Neural-Network-Based Object Detectors: A Novel Bidirectional Adversarial Attack Approach

Understanding Object Detection Through An Adversarial Lens

Learning Coated Adversarial Camouflages for Object Detectors

Adversarial Attacks to Manipulate Target Localization of Object Detector

Adversarial Patch Attacks Against Aerial Imagery Object Detectors Based on Interpretable Guidance

Generating Adversarial Remote Sensing Images via Pan-Sharpening Technique

Adversarial Examples based on Object Detection tasks: A Survey