Abstract:In synthetic aperture radar (SAR) imaging, intelligent object detection methods are facing significant challenges in terms of model robustness and application security, which are posed by adversarial examples. The existing adversarial example generation methods for SAR object detection can be divided into two main types: global perturbation attacks and local perturbation attacks. Due to the dynamic changes and irregular spatial distribution of SAR coherent speckle backgrounds, the attack effectiveness of global perturbation attacks is significantly reduced by coherent speckle. In contrast, by focusing on the image objects, local perturbation attacks achieve targeted and effective advantages over global perturbations by minimizing interference from the SAR coherent speckle background. However, the adaptability of conventional local perturbations is limited because they employ a fixed size without considering the diverse sizes and shapes of SAR objects under various conditions. This paper presents a framework for region-adaptive local perturbations (RaLP) specifically designed for SAR object detection tasks. The framework consists of two modules. To address the issue of coherent speckle noise interference in SAR imagery, we develop a local perturbation generator (LPG) module. By filtering the original image, this module reduces the speckle features introduced during perturbation generation. It then superimposes adversarial perturbations in the form of local perturbations on areas of the object with weaker speckles, thereby reducing the mutual interference between coherent speckles and adversarial perturbation. To address the issue of insufficient adaptability in terms of the size variation in local adversarial perturbations, we propose an adaptive perturbation optimizer (APO) module. This optimizer adapts the size of the adversarial perturbations based on the size and shape of the object, effectively solving the problem of adaptive perturbation size and enhancing the universality of the attack. The experimental results show that RaLP reduces the detection accuracy of the YOLOv3 detector by 29.0%, 29.9%, and 32.3% on the SSDD, SAR-Ship, and AIR-SARShip datasets, respectively, and the model-to-model and dataset-to-dataset transferability of RaLP attacks are verified.

SAR-PAA: A Physically Adversarial Attack Approach Against SAR Intelligent Target Recognition

Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defense

SAR-AE-SFP: SAR Imagery Adversarial Example in Real Physics domain with Target Scattering Feature Parameters

Fast sparse adversarial attack for synthetic aperture radar target recognition

PLA-LiDAR: Physical Laser Attacks Against LiDAR-based 3D Object Detection in Autonomous Vehicle.

Realistic Scatterer Based Adversarial Attacks on SAR Image Classifiers

Speckle-Variant Attack: Toward Transferable Adversarial Attack to SAR Target Recognition

SAR-PeGA: A Generation Method of Adversarial Examples for SAR Image Target Recognition Network

Fast C&W: A Fast Adversarial Attack Algorithm to Fool SAR Target Recognition With Deep Convolutional Neural Networks

SCMA: A Scattering Center Model Attack on CNN-SAR Target Recognition

Boosting Adversarial Transferability with Shallow-Feature Attack on SAR Images

Learning to Generate SAR Images With Adversarial Autoencoder

Adversarial Examples of SAR Images for Deep Learning Based Automatic Target Recognition

A Region-Adaptive Local Perturbation-Based Method for Generating Adversarial Examples in Synthetic Aperture Radar Object Detection

Target Reconstruction Against Deceptive Jamming for Single-Channel SAR: An Imagery Domain Approach

Robust SAR Automatic Target Recognition Via Adversarial Learning

Uncertainty-Aware SAR ATR: Defending Against Adversarial Attacks via Bayesian Neural Networks

Patient safety. Safe and sound.

Physically Adversarial Infrared Patches with Learnable Shapes and Locations

Adversarial Examples for CNN-Based SAR Image Classification: an Experience Study

SPAA: Stealthy Projector-based Adversarial Attacks on Deep Image Classifiers