Semantic Smoothing via Novel View Synthesis for Robust SAR Image Classification

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Brignac, Daniel, Tian, Fengwei, Latibari, Banafsheh, Mahalanobis, Abhijit, Tandon, Ravi
Formato: Preprint
Publicado: 2026
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866911690355900416
author Brignac, Daniel
Tian, Fengwei
Latibari, Banafsheh
Mahalanobis, Abhijit
Tandon, Ravi
author_facet Brignac, Daniel
Tian, Fengwei
Latibari, Banafsheh
Mahalanobis, Abhijit
Tandon, Ravi
contents Deep neural networks are vulnerable to adversarial perturbations, limiting deployment in safety-critical applications such as synthetic aperture radar (SAR) automatic target recognition (ATR). Randomized smoothing improves robustness by averaging predictions over noisy inputs, but isotropic noise often fails to preserve the semantic structure of SAR imagery. We propose semantic smoothing, a defense that replaces noised-based perturbations with structured randomized transformations generated by a novel view synthesis model. For SAR, we condition on acquisition geometry to synthesize multiple plausible radar views. Predictions across generated randomized views are aggregated to form a robust classifier. Experiments show that semantic smoothing improves robustness against standard attacks, such as FGSM and PGD, and SAR-specific attacks, such as OTSA and SMGAA, while also increasing clean classification accuracy. These results demonstrate that randomized smoothing via semantically preserving geometric transformations is a promising alternative to isotropic noise for adversarial defense in structured sensing domains.
format Preprint
id arxiv_https___arxiv_org_abs_2605_16440
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle Semantic Smoothing via Novel View Synthesis for Robust SAR Image Classification
Brignac, Daniel
Tian, Fengwei
Latibari, Banafsheh
Mahalanobis, Abhijit
Tandon, Ravi
Computer Vision and Pattern Recognition
Artificial Intelligence
Deep neural networks are vulnerable to adversarial perturbations, limiting deployment in safety-critical applications such as synthetic aperture radar (SAR) automatic target recognition (ATR). Randomized smoothing improves robustness by averaging predictions over noisy inputs, but isotropic noise often fails to preserve the semantic structure of SAR imagery. We propose semantic smoothing, a defense that replaces noised-based perturbations with structured randomized transformations generated by a novel view synthesis model. For SAR, we condition on acquisition geometry to synthesize multiple plausible radar views. Predictions across generated randomized views are aggregated to form a robust classifier. Experiments show that semantic smoothing improves robustness against standard attacks, such as FGSM and PGD, and SAR-specific attacks, such as OTSA and SMGAA, while also increasing clean classification accuracy. These results demonstrate that randomized smoothing via semantically preserving geometric transformations is a promising alternative to isotropic noise for adversarial defense in structured sensing domains.
title Semantic Smoothing via Novel View Synthesis for Robust SAR Image Classification
topic Computer Vision and Pattern Recognition
Artificial Intelligence
url https://arxiv.org/abs/2605.16440