Abstract:In synthetic aperture radar (SAR) imaging, intelligent object detection methods are facing significant challenges in terms of model robustness and application security, which are posed by adversarial examples. The existing adversarial example generation methods for SAR object detection can be divided into two main types: global perturbation attacks and local perturbation attacks. Due to the dynamic changes and irregular spatial distribution of SAR coherent speckle backgrounds, the attack effectiveness of global perturbation attacks is significantly reduced by coherent speckle. In contrast, by focusing on the image objects, local perturbation attacks achieve targeted and effective advantages over global perturbations by minimizing interference from the SAR coherent speckle background. However, the adaptability of conventional local perturbations is limited because they employ a fixed size without considering the diverse sizes and shapes of SAR objects under various conditions. This paper presents a framework for region-adaptive local perturbations (RaLP) specifically designed for SAR object detection tasks. The framework consists of two modules. To address the issue of coherent speckle noise interference in SAR imagery, we develop a local perturbation generator (LPG) module. By filtering the original image, this module reduces the speckle features introduced during perturbation generation. It then superimposes adversarial perturbations in the form of local perturbations on areas of the object with weaker speckles, thereby reducing the mutual interference between coherent speckles and adversarial perturbation. To address the issue of insufficient adaptability in terms of the size variation in local adversarial perturbations, we propose an adaptive perturbation optimizer (APO) module. This optimizer adapts the size of the adversarial perturbations based on the size and shape of the object, effectively solving the problem of adaptive perturbation size and enhancing the universality of the attack. The experimental results show that RaLP reduces the detection accuracy of the YOLOv3 detector by 29.0%, 29.9%, and 32.3% on the SSDD, SAR-Ship, and AIR-SARShip datasets, respectively, and the model-to-model and dataset-to-dataset transferability of RaLP attacks are verified.

Speckle-Variant Attack: Toward Transferable Adversarial Attack to SAR Target Recognition

Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defense

TAN: A Transferable Adversarial Network for DNN-Based UAV SAR Automatic Target Recognition Models

Fast sparse adversarial attack for synthetic aperture radar target recognition

SAR-PeGA: A Generation Method of Adversarial Examples for SAR Image Target Recognition Network

Realistic Scatterer Based Adversarial Attacks on SAR Image Classifiers

Towards Assessing the Synthetic-to-Measured Adversarial Vulnerability of SAR ATR

Boosting Adversarial Transferability with Shallow-Feature Attack on SAR Images

Uncertainty-Aware SAR ATR: Defending Against Adversarial Attacks via Bayesian Neural Networks

A Region-Adaptive Local Perturbation-Based Method for Generating Adversarial Examples in Synthetic Aperture Radar Object Detection

Fast C&W: A Fast Adversarial Attack Algorithm to Fool SAR Target Recognition With Deep Convolutional Neural Networks

Black-Box Universal Adversarial Attack for DNN-Based Models of SAR Automatic Target Recognition

SAR-AE-SFP: SAR Imagery Adversarial Example in Real Physics domain with Target Scattering Feature Parameters

SSTA: Salient Spatially Transformed Attack

SPARK: Spatial-Aware Online Incremental Attack Against Visual Tracking

SPAA: Stealthy Projector-based Adversarial Attacks on Deep Image Classifiers

Target Recognition in SAR Images by Deep Learning with Training Data Augmentation

SCMA: A Scattering Center Model Attack on CNN-SAR Target Recognition

Adaptive momentum variance for attention-guided sparse adversarial attacks

Pattern Corruption-Assisted Physical Attacks Against Object Detection in UAV Remote Sensing

Adversarial Examples of SAR Images for Deep Learning Based Automatic Target Recognition