Saved in:
Bibliographic Details
Main Authors: Zhou, Jiawei, Lyu, Linye, He, Daojing, Li, Yu
Format: Preprint
Published: 2024
Subjects:
Online Access:https://arxiv.org/abs/2411.10029
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866917149443883008
author Zhou, Jiawei
Lyu, Linye
He, Daojing
Li, Yu
author_facet Zhou, Jiawei
Lyu, Linye
He, Daojing
Li, Yu
contents Adversarial camouflage is a widely used physical attack against vehicle detectors for its superiority in multi-view attack performance. One promising approach involves using differentiable neural renderers to facilitate adversarial camouflage optimization through gradient back-propagation. However, existing methods often struggle to capture environmental characteristics during the rendering process or produce adversarial textures that can precisely map to the target vehicle. Moreover, these approaches neglect diverse weather conditions, reducing the efficacy of generated camouflage across varying weather scenarios. To tackle these challenges, we propose a robust and accurate camouflage generation method, namely RAUCA. The core of RAUCA is a novel neural rendering component, End-to-End Neural Renderer Plus (E2E-NRP), which can accurately optimize and project vehicle textures and render images with environmental characteristics such as lighting and weather. In addition, we integrate a multi-weather dataset for camouflage generation, leveraging the E2E-NRP to enhance the attack robustness. Experimental results on six popular object detectors show that RAUCA-final outperforms existing methods in both simulation and real-world settings.
format Preprint
id arxiv_https___arxiv_org_abs_2411_10029
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Toward Robust and Accurate Adversarial Camouflage Generation against Vehicle Detectors
Zhou, Jiawei
Lyu, Linye
He, Daojing
Li, Yu
Computer Vision and Pattern Recognition
Adversarial camouflage is a widely used physical attack against vehicle detectors for its superiority in multi-view attack performance. One promising approach involves using differentiable neural renderers to facilitate adversarial camouflage optimization through gradient back-propagation. However, existing methods often struggle to capture environmental characteristics during the rendering process or produce adversarial textures that can precisely map to the target vehicle. Moreover, these approaches neglect diverse weather conditions, reducing the efficacy of generated camouflage across varying weather scenarios. To tackle these challenges, we propose a robust and accurate camouflage generation method, namely RAUCA. The core of RAUCA is a novel neural rendering component, End-to-End Neural Renderer Plus (E2E-NRP), which can accurately optimize and project vehicle textures and render images with environmental characteristics such as lighting and weather. In addition, we integrate a multi-weather dataset for camouflage generation, leveraging the E2E-NRP to enhance the attack robustness. Experimental results on six popular object detectors show that RAUCA-final outperforms existing methods in both simulation and real-world settings.
title Toward Robust and Accurate Adversarial Camouflage Generation against Vehicle Detectors
topic Computer Vision and Pattern Recognition
url https://arxiv.org/abs/2411.10029