Abstract:Deep neural networks have significantly advanced person re-identification (ReID) applications in the realm of the industrial internet, yet they remain vulnerable. Thus, it is crucial to study the robustness of ReID systems, as there are risks of adversaries using these vulnerabilities to compromise industrial surveillance systems. Current adversarial methods focus on generating attack samples using misclassification feedback from victim models (VMs), neglecting VM's cognitive processes. We seek to address this by producing authentic ReID attack instances through VM cognition decryption. This approach boasts advantages like better transferability to open-set ReID tests, easier VM misdirection, and enhanced creation of realistic and undetectable assault images. However, the task of deciphering the cognitive mechanism in VM is widely considered to be a formidable challenge. In this paper, we propose a novel inconspicuous and controllable ReID attack baseline, LCYE (Look Closer to Your Enemy), to generate adversarial query images. Specifically, LCYE first distills VM's knowledge via teacher-student memory mimicking the proxy task. This knowledge prior serves as an unambiguous cryptographic token, encapsulating elements deemed indispensable and plausible by the VM, with the intent of facilitating precise adversarial misdirection. Further, benefiting from the multiple opposing task framework of LCYE, we investigate the interpretability and generalization of ReID models from the view of the adversarial attack, including cross-domain adaption, cross-model consensus, and online learning process. Extensive experiments on four ReID benchmarks show that our method outperforms other state-of-the-art attackers with a large margin in white-box, black-box, and target attacks. The source code can be found at <a class="link-external link-https" href="https://github.com/MingjieWang0606/LCYE-attack_reid" rel="external noopener nofollow">this https URL</a>.

Towards Robust Person Re-Identification by Adversarial Training with Dynamic Attack Strategy

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

Image-Level Adaptive Adversarial Ranking for Person Re-Identification

Adversarial Metric Attack and Defense for Person Re-Identification

Joining Features by Global Guidance with Bi-Relevance Trihard Loss for Person Re-Identification

advPattern: Physical-World Attacks on Deep Person Re-Identification via Adversarially Transformable Patterns

Combining Two Adversarial Attacks Against Person Re-Identification Systems

Beyond Universal Person Re-ID Attack

Invisible Backdoor Attack with Dynamic Triggers Against Person Re-identification

Learning to Learn Transferable Generative Attack for Person Re-Identification

Look Closer to Your Enemy: Learning to Attack via Teacher-Student Mimicking

Adversarial Self-Attack Defense and Spatial-Temporal Relation Mining for Visible-Infrared Video Person Re-Identification

Interactive attack-defense for generalized person re-identification

Cross-Modality Perturbation Synergy Attack for Person Re-identification

Generative Adversarial Patches for Physical Attacks on Cross-Modal Pedestrian Re-Identification

Boosting Person Re-Identification with Viewpoint Contrastive Learning and Adversarial Training

QuEst: Adversarial Attack Intensity Estimation via Query Response Analysis

Re-ID-leak: Membership Inference Attacks Against Person Re-identification

Attack-Guided Perceptual Data Generation for Real-world Re-Identification

Dynamic Label Adversarial Training for Deep Learning Robustness Against Adversarial Attacks

Adversarial Feature Disentanglement for Long-Term Person Re-identification