Saved in:
Bibliographic Details
Main Authors: Lin, Tao, Yu, Lijia, Jin, Gaojie, Li, Renjue, Wu, Peng, Zhang, Lijun
Format: Preprint
Published: 2024
Subjects:
Online Access:https://arxiv.org/abs/2410.10091
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866916437609676800
author Lin, Tao
Yu, Lijia
Jin, Gaojie
Li, Renjue
Wu, Peng
Zhang, Lijun
author_facet Lin, Tao
Yu, Lijia
Jin, Gaojie
Li, Renjue
Wu, Peng
Zhang, Lijun
contents In recent years, the study of adversarial robustness in object detection systems, particularly those based on deep neural networks (DNNs), has become a pivotal area of research. Traditional physical attacks targeting object detectors, such as adversarial patches and texture manipulations, directly manipulate the surface of the object. While these methods are effective, their overt manipulation of objects may draw attention in real-world applications. To address this, this paper introduces a more subtle approach: an inconspicuous adversarial trigger that operates outside the bounding boxes, rendering the object undetectable to the model. We further enhance this approach by proposing the Feature Guidance (FG) technique and the Universal Auto-PGD (UAPGD) optimization strategy for crafting high-quality triggers. The effectiveness of our method is validated through extensive empirical testing, demonstrating its high performance in both digital and physical environments. The code and video will be available at: https://github.com/linToTao/Out-of-bbox-attack.
format Preprint
id arxiv_https___arxiv_org_abs_2410_10091
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Out-of-Bounding-Box Triggers: A Stealthy Approach to Cheat Object Detectors
Lin, Tao
Yu, Lijia
Jin, Gaojie
Li, Renjue
Wu, Peng
Zhang, Lijun
Computer Vision and Pattern Recognition
In recent years, the study of adversarial robustness in object detection systems, particularly those based on deep neural networks (DNNs), has become a pivotal area of research. Traditional physical attacks targeting object detectors, such as adversarial patches and texture manipulations, directly manipulate the surface of the object. While these methods are effective, their overt manipulation of objects may draw attention in real-world applications. To address this, this paper introduces a more subtle approach: an inconspicuous adversarial trigger that operates outside the bounding boxes, rendering the object undetectable to the model. We further enhance this approach by proposing the Feature Guidance (FG) technique and the Universal Auto-PGD (UAPGD) optimization strategy for crafting high-quality triggers. The effectiveness of our method is validated through extensive empirical testing, demonstrating its high performance in both digital and physical environments. The code and video will be available at: https://github.com/linToTao/Out-of-bbox-attack.
title Out-of-Bounding-Box Triggers: A Stealthy Approach to Cheat Object Detectors
topic Computer Vision and Pattern Recognition
url https://arxiv.org/abs/2410.10091