Abstract:In synthetic aperture radar (SAR) imaging, intelligent object detection methods are facing significant challenges in terms of model robustness and application security, which are posed by adversarial examples. The existing adversarial example generation methods for SAR object detection can be divided into two main types: global perturbation attacks and local perturbation attacks. Due to the dynamic changes and irregular spatial distribution of SAR coherent speckle backgrounds, the attack effectiveness of global perturbation attacks is significantly reduced by coherent speckle. In contrast, by focusing on the image objects, local perturbation attacks achieve targeted and effective advantages over global perturbations by minimizing interference from the SAR coherent speckle background. However, the adaptability of conventional local perturbations is limited because they employ a fixed size without considering the diverse sizes and shapes of SAR objects under various conditions. This paper presents a framework for region-adaptive local perturbations (RaLP) specifically designed for SAR object detection tasks. The framework consists of two modules. To address the issue of coherent speckle noise interference in SAR imagery, we develop a local perturbation generator (LPG) module. By filtering the original image, this module reduces the speckle features introduced during perturbation generation. It then superimposes adversarial perturbations in the form of local perturbations on areas of the object with weaker speckles, thereby reducing the mutual interference between coherent speckles and adversarial perturbation. To address the issue of insufficient adaptability in terms of the size variation in local adversarial perturbations, we propose an adaptive perturbation optimizer (APO) module. This optimizer adapts the size of the adversarial perturbations based on the size and shape of the object, effectively solving the problem of adaptive perturbation size and enhancing the universality of the attack. The experimental results show that RaLP reduces the detection accuracy of the YOLOv3 detector by 29.0%, 29.9%, and 32.3% on the SSDD, SAR-Ship, and AIR-SARShip datasets, respectively, and the model-to-model and dataset-to-dataset transferability of RaLP attacks are verified.

Fast sparse adversarial attack for synthetic aperture radar target recognition

SAR Fast Target Imaging in Sparse Field Based on AlexNet

SAR-PAA: A Physically Adversarial Attack Approach Against SAR Intelligent Target Recognition

Fast C&W: A Fast Adversarial Attack Algorithm to Fool SAR Target Recognition With Deep Convolutional Neural Networks

Target Segmentation Based Adversarial Attack for SAR Images

SAR-AE-SFP: SAR Imagery Adversarial Example in Real Physics domain with Target Scattering Feature Parameters

Learning to Generate SAR Images With Adversarial Autoencoder

Speckle-Variant Attack: Toward Transferable Adversarial Attack to SAR Target Recognition

Adversarial Attack for SAR Target Recognition Based on UNet-Generative Adversarial Network

Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defense

Boosting Adversarial Transferability with Shallow-Feature Attack on SAR Images

Attributed Scattering Center Guided Adversarial Attack for DCNN SAR Target Recognition

Generating Adversarial Examples Against Remote Sensing Scene Classification Via Feature Approximation

SAR-PeGA: A Generation Method of Adversarial Examples for SAR Image Target Recognition Network

Conditional Random Field-Based Adversarial Attack Against SAR Target Detection

Black-Box Universal Adversarial Attack for DNN-Based Models of SAR Automatic Target Recognition

Realistic Scatterer Based Adversarial Attacks on SAR Image Classifiers

AFSar: an Anchor-Free SAR Target Detection Algorithm Based on Multiscale Enhancement Representation Learning

Adversarial Self-Supervised Learning for Robust SAR Target Recognition

Adversarial Examples of SAR Images for Deep Learning Based Automatic Target Recognition

A Region-Adaptive Local Perturbation-Based Method for Generating Adversarial Examples in Synthetic Aperture Radar Object Detection