Abstract:Recent advances in deep neural networks (DNNs) highlight the success of synthetic aperture radar automatic target recognition (SAR ATR) with superior effectiveness and efficiency. However, the DNNs are known to be vulnerable to adversarial examples, whose performance will be dramatically reduced when the imperceptible perturbation exists. In optical image processing, invisible perturbations are typically embedded in the way of a full-scale distribution in a purely digital setting. Whereas, it is not feasible to achieve this in SAR ATR tasks due to the inaccessibility of the SAR system and unique imaging mechanism. In practice, the subtle perturbations could be produced by physical approaches that change the scattering property of the target. Therefore, the adversarial perturbations for SAR ATR should be of good transferability to achieve an effective attack on major DNN classifiers as well as the accessible additive region in SAR images with respect to the realistic target locations. In this letter, we present a novel approach, namely speckle-variant attack (SVA). The proposed SVA is composed of two major modules: an iterative gradient-based perturbation generator and a target region extractor. The perturbation generator implements a speckle-variant transformation that continuously reconstructs the speckle-noise pattern during each of the iterations for strong transferability. The target region extractor ensures the feasibility of the additive adversarial perturbations in practical scenarios by restricting the region of the perturbation. Therefore, the proposed SVA is capable of producing adversarial examples that are more transferable and physically feasible. Extensive evaluations of the MSTAR dataset show that the SVA has achieved superior transferability and competitive time consumption compared with the SOTA transformation-based techniques, including the diverse inputs method and the scale-invariant method.

Transferable Adversarial Attacks for Remote Sensing Object Recognition via Spatial- Frequency Co-Transformation

An Adversarial Attack Via Feature Contributive Regions

Transferable Adversarial Attacks for Object Detection Using Object-Aware Significant Feature Distortion

Feature Transformation for Cross-domain Few-shot Remote Sensing Scene Classification

Adversarial Patch Attack on Multi-Scale Object Detection for UAV Remote Sensing Images

Transferable Adversarial Attacks for Image and Video Object Detection

Speckle-Variant Attack: Toward Transferable Adversarial Attack to SAR Target Recognition

Frequency Domain Model Augmentation for Adversarial Attack

Improving transferability of 3D adversarial attacks with scale and shear transformations

Enhancing Transferability of Targeted Adversarial Examples: A Self-Universal Perspective

TAN: A Transferable Adversarial Network for DNN-Based UAV SAR Automatic Target Recognition Models

FFA: Foreground Feature Approximation Digitally against Remote Sensing Object Detection

Defense against Adversarial Cloud Attack on Remote Sensing Salient Object Detection

Adversarial Example Generation Method for Object Detection in Remote Sensing Images

Enhancing Transferability of Adversarial Examples Through Mixed-Frequency Inputs

Learning Critical Features for Arbitrary-Oriented Object Detection in Remote-Sensing Optical Images

WFSS: Weighted Fusion of Spectral Transformer and Spatial Self-Attention for Robust Hyperspectral Image Classification Against Adversarial Attacks

Learning Adversarially Robust Object Detector with Consistency Regularization in Remote Sensing Images

Feature Importance-aware Transferable Adversarial Attacks

Enhancing Transferability of Adversarial Examples with Spatial Momentum

Evaluating Adversarial Robustness in the Spatial Frequency Domain