Abstract:Although deep learning has received extensive attention and achieved excellent performance in various scenarios, it suffers from adversarial examples to some extent. In particular, physical attack poses a greater threat than digital attack. However, existing research has paid less attention to the physical attack of object detection in UAV remote sensing images (RSIs). In this work, we carefully analyze the universal adversarial patch attack for multi-scale objects in the field of remote sensing. There are two challenges faced by an adversarial attack in RSIs. On one hand, the number of objects in remote sensing images is more than that of natural images. Therefore, it is difficult for an adversarial patch to show an adversarial effect on all objects when attacking a detector of RSIs. On the other hand, the wide height range of the photography platform causes the size of objects to vary a great deal, which presents challenges for the generation of universal adversarial perturbation for multi-scale objects. To this end, we propose an adversarial attack method of object detection for remote sensing data. One of the key ideas of the proposed method is the novel optimization of the adversarial patch. We aim to attack as many objects as possible by formulating a joint optimization problem. Furthermore, we raise the scale factor to generate a universal adversarial patch that adapts to multi-scale objects, which ensures that the adversarial patch is valid for multi-scale objects in the real world. Extensive experiments demonstrate the superiority of our method against state-of-the-art methods on YOLO-v3 and YOLO-v5. In addition, we also validate the effectiveness of our method in real-world applications.

Efficient Adversarial Attack Strategy Against 3D Object Detection in Autonomous Driving Systems

Adversarial Robustness Analysis of LiDAR-included Models in Autonomous Driving

Improving Adversarial Robustness of 3D Point Cloud Classification Models

Generating 3D Adversarial Point Clouds under the Principle of LiDARs

Unity is Strength? Benchmarking the Robustness of Fusion-based 3D Object Detection Against Physical Sensor Attack

On the Adversarial Robustness of Camera-based 3D Object Detection

A Comprehensive Study of the Robustness for LiDAR-Based 3D Object Detectors Against Adversarial Attacks

Transient Adversarial 3D Projection Attacks on Object Detection in Autonomous Driving

A Comprehensive Study and Comparison of the Robustness of 3D Object Detectors Against Adversarial Attacks

Adversarial Attack and Defense on Point Sets

Understanding Object Detection Through An Adversarial Lens

Towards Universal Physical Attacks On Cascaded Camera-Lidar 3D Object Detection Models

Adversarial Attack Against Urban Scene Segmentation for Autonomous Vehicles

AdvMono3D: Advanced Monocular 3D Object Detection with Depth-Aware Robust Adversarial Training

A Survey and Evaluation of Adversarial Attacks for Object Detection

Adversarial Attack and Defense of YOLO Detectors in Autonomous Driving Scenarios

Adversarial Patch Attack on Multi-Scale Object Detection for UAV Remote Sensing Images

The Art of Defense: Letting Networks Fool the Attacker

Adversarial Detection: Attacking Object Detection in Real Time

DetectS Ec: Evaluating the Robustness of Object Detection Models to Adversarial Attacks

Exploring Adversarial Robustness of LiDAR Semantic Segmentation in Autonomous Driving