Abstract:In synthetic aperture radar (SAR) imaging, intelligent object detection methods are facing significant challenges in terms of model robustness and application security, which are posed by adversarial examples. The existing adversarial example generation methods for SAR object detection can be divided into two main types: global perturbation attacks and local perturbation attacks. Due to the dynamic changes and irregular spatial distribution of SAR coherent speckle backgrounds, the attack effectiveness of global perturbation attacks is significantly reduced by coherent speckle. In contrast, by focusing on the image objects, local perturbation attacks achieve targeted and effective advantages over global perturbations by minimizing interference from the SAR coherent speckle background. However, the adaptability of conventional local perturbations is limited because they employ a fixed size without considering the diverse sizes and shapes of SAR objects under various conditions. This paper presents a framework for region-adaptive local perturbations (RaLP) specifically designed for SAR object detection tasks. The framework consists of two modules. To address the issue of coherent speckle noise interference in SAR imagery, we develop a local perturbation generator (LPG) module. By filtering the original image, this module reduces the speckle features introduced during perturbation generation. It then superimposes adversarial perturbations in the form of local perturbations on areas of the object with weaker speckles, thereby reducing the mutual interference between coherent speckles and adversarial perturbation. To address the issue of insufficient adaptability in terms of the size variation in local adversarial perturbations, we propose an adaptive perturbation optimizer (APO) module. This optimizer adapts the size of the adversarial perturbations based on the size and shape of the object, effectively solving the problem of adaptive perturbation size and enhancing the universality of the attack. The experimental results show that RaLP reduces the detection accuracy of the YOLOv3 detector by 29.0%, 29.9%, and 32.3% on the SSDD, SAR-Ship, and AIR-SARShip datasets, respectively, and the model-to-model and dataset-to-dataset transferability of RaLP attacks are verified.

Conditional Random Field-Based Adversarial Attack Against SAR Target Detection

Contextual Adversarial Attack Against Aerial Detection in the Physical World

SAR-PAA: A Physically Adversarial Attack Approach Against SAR Intelligent Target Recognition

Target Segmentation Based Adversarial Attack for SAR Images

Target Partial-Occlusion: an Adversarial Examples Generation Approach Against SAR Target Recognition Networks

Fast sparse adversarial attack for synthetic aperture radar target recognition

Generating Adversarial Examples Against Remote Sensing Scene Classification Via Feature Approximation

A Region-Adaptive Local Perturbation-Based Method for Generating Adversarial Examples in Synthetic Aperture Radar Object Detection

SAR-AE-SFP: SAR Imagery Adversarial Example in Real Physics domain with Target Scattering Feature Parameters

Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defense

Target Detection from SAR Images Based on Wavelet Transform De-Noise and Improved CFAR

Boosting Adversarial Transferability with Shallow-Feature Attack on SAR Images

Fast C&W: A Fast Adversarial Attack Algorithm to Fool SAR Target Recognition With Deep Convolutional Neural Networks

A Novel Sar Target Detection Algorithm Based on Contextual Knowledge

Universal Adversarial Perturbation of SAR Images for Deep Learning Based Target Classification

SCMA: A Scattering Center Model Attack on CNN-SAR Target Recognition

Impact Investigation of Adversarial Samples on CNN-Based SAR Image Target Detectors

Attributed Scattering Center Guided Adversarial Attack for DCNN SAR Target Recognition

Speckle-Variant Attack: Toward Transferable Adversarial Attack to SAR Target Recognition

CMA: A Cross-Modal Attack on Radar Signal Recognition Model Based on Time-Frequency Analysis

SAR-PeGA: A Generation Method of Adversarial Examples for SAR Image Target Recognition Network