Abstract:Physical adversarial attacks in aerial object detection have gained significant attention. Existing adversarial patches exhibit subpar visual effects and encounter limitations when transitioning from digital to physical spaces, restricting applicability in real-world scenarios. To address these challenges, we propose an adversarial texture generation method based on background texture design. This method selectively covers the background environment without interfering with the target surface. We also explore the translational invariance of fully convolutional networks to decouple adversarial textures from shapes, allowing adversarial textures to be arbitrarily expanded during use. The areas where adversarial textures are placed are designated as the "detection failure zone," rendering the detector ineffective regardless of the aircraft's position within this zone. This significantly enhances the practicality of the adversarial texture. To improve its concealment, we align the features of the adversarial textures with those of the original image using a pretrained VGG network, ensuring a consistent style and color tone with the background environment. Additionally, we employ a discriminator to further control the visual effects of the adversarial samples, ensuring effective concealment. Furthermore, we simulate the real environment in digital space using operations like affine transformations and Gaussian blur to transfer adversarial textures seamlessly from digital to physical space. This allows for the integration of adversarial textures into real environments without compromising their effectiveness. Experimental results demonstrate the effectiveness and consistent styling of the proposed adversarial texture in real-world environments, showing robustness against environmental changes, weather conditions, and viewing angles.

Physical Adversarial Attack Scheme on Object Detectors using 3D Adversarial Object

Contextual Adversarial Attack Against Aerial Detection in the Physical World

Physical Adversarial Attacks on an Aerial Imagery Object Detector

Towards Universal Physical Attacks On Cascaded Camera-Lidar 3D Object Detection Models

Transient Adversarial 3D Projection Attacks on Object Detection in Autonomous Driving

Universal Physical Camouflage Attacks on Object Detectors

Adversarial Camera Patch: An Effective and Robust Physical-World Attack on Object Detectors

Physical Adversarial Attacks Against Aerial Object Detection With Feature-Aligned Expandable Textures

Unified Adversarial Patch for Cross-modal Attacks in the Physical World

Unified Adversarial Patch for Visible-Infrared Cross-modal Attacks in the Physical World

Learning Coated Adversarial Camouflages for Object Detectors

3D-Adv: Black-Box Adversarial Attacks against Deep Learning Models through 3D Sensors

Physical-World Optical Adversarial Attacks on 3D Face Recognition

Adversarial Obstacle Generation Against LiDAR-Based 3D Object Detection

Patch of Invisibility: Naturalistic Physical Black-Box Adversarial Attacks on Object Detectors

Adversarial Detection: Attacking Object Detection in Real Time

Towards a Physical-World Adversarial Patch for Blinding Object Detection Models.

Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Driving

DTA: Physical Camouflage Attacks using Differentiable Transformation Network

Adversarial Point Cloud Perturbations Against 3D Object Detection in Autonomous Driving Systems

Adversarial Point Cloud Perturbations to Attack Deep Object Detection Models