English
Related papers

Related papers: On Physical Adversarial Patches for Object Detecti…

200 papers

Convolutional neural networks (CNNs) have demonstrated rapid progress and a high level of success in object detection. However, recent evidence has highlighted their vulnerability to adversarial attacks. These attacks are calculated image…

Computer Vision and Pattern Recognition · Computer Science 2022-05-12 Chris Wise , Jo Plested

Recent years have seen an increasing interest in physical adversarial attacks, which aim to craft deployable patterns for deceiving deep neural networks, especially for person detectors. However, the adversarial patterns of existing…

Computer Vision and Pattern Recognition · Computer Science 2024-08-14 Jikang Cheng , Ying Zhang , Zhongyuan Wang , Zou Qin , Chen Li

An adversary can fool deep neural network object detectors by generating adversarial noises. Most of the existing works focus on learning local visible noises in an adversarial "patch" fashion. However, the 2D patch attached to a 3D object…

Computer Vision and Pattern Recognition · Computer Science 2022-05-17 Yexin Duan , Jialin Chen , Xingyu Zhou , Junhua Zou , Zhengyun He , Jin Zhang , Wu Zhang , Zhisong Pan

Recent work has documented the susceptibility of deep learning systems to adversarial examples, but most such attacks directly manipulate the digital input to a classifier. Although a smaller line of work considers physical adversarial…

Computer Vision and Pattern Recognition · Computer Science 2019-06-11 Juncheng Li , Frank R. Schmidt , J. Zico Kolter

Physical adversarial attacks have put a severe threat to DNN-based object detectors. To enhance security, a combination of visible and infrared sensors is deployed in various scenarios, which has proven effective in disabling existing…

Computer Vision and Pattern Recognition · Computer Science 2023-07-28 Xingxing Wei , Yao Huang , Yitong Sun , Jie Yu

Adversarial attacks on deep learning models have received increased attention in recent years. Work in this area has mostly focused on gradient-based techniques, so-called 'white-box' attacks, where the attacker has access to the targeted…

Computer Vision and Pattern Recognition · Computer Science 2025-10-21 Raz Lapid , Eylon Mizrahi , Moshe Sipper

Object detection forms a key component in Unmanned Aerial Vehicles (UAVs) for completing high-level tasks that depend on the awareness of objects on the ground from an aerial perspective. In that scenario, adversarial patch attacks on an…

Computer Vision and Pattern Recognition · Computer Science 2025-09-26 Saurabh Pathak , Samridha Shrestha , Abdelrahman AlMahmoud

Deep learning-based object detection has become ubiquitous in the last decade due to its high accuracy in many real-world applications. With this growing trend, these models are interested in being attacked by adversaries, with most of the…

Computer Vision and Pattern Recognition · Computer Science 2024-12-30 Pham Phuc , Son Vuong , Khang Nguyen , Tuan Dang

Visual language pre-training (VLP) models have demonstrated significant success across various domains, yet they remain vulnerable to adversarial attacks. Addressing these adversarial vulnerabilities is crucial for enhancing security in…

Computer Vision and Pattern Recognition · Computer Science 2025-01-22 Dehong Kong , Siyuan Liang , Xiaopeng Zhu , Yuansheng Zhong , Wenqi Ren

Despite modifying only a small localized input region, adversarial patches can drastically change the prediction of computer vision models. However, prior methods either cannot perform satisfactorily under targeted attack scenarios or fail…

Computer Vision and Pattern Recognition · Computer Science 2025-07-10 Subrat Kishore Dutta , Xiao Zhang

Higher-order adversarial attacks can directly be considered the result of a cat-and-mouse game -- an elaborate action involving constant pursuit, near captures, and repeated escapes. This idiom describes the enduring circular training of…

Computer Vision and Pattern Recognition · Computer Science 2026-01-09 Jens Bayer , Stefan Becker , David Münch , Michael Arens , Jürgen Beyerer

Over the last decade, deep neural networks have achieved state of the art in computer vision tasks. These models, however, are susceptible to unusual inputs, known as adversarial examples, that cause them to misclassify or otherwise fail to…

Computer Vision and Pattern Recognition · Computer Science 2023-06-14 Dillon Niederhut

Transferable adversarial attack is always in the spotlight since deep learning models have been demonstrated to be vulnerable to adversarial samples. However, existing physical attack methods do not pay enough attention on transferability…

Computer Vision and Pattern Recognition · Computer Science 2022-05-20 Yu Zhang , Zhiqiang Gong , Yichuang Zhang , YongQian Li , Kangcheng Bin , Jiahao Qi , Wei Xue , Ping Zhong

Deep neural networks based object detection models have revolutionized computer vision and fueled the development of a wide range of visual recognition applications. However, recent studies have revealed that deep object detectors can be…

Cryptography and Security · Computer Science 2020-07-14 Ka-Ho Chow , Ling Liu , Mehmet Emre Gursoy , Stacey Truex , Wenqi Wei , Yanzhao Wu

Nowadays, general object detectors like YOLO and Faster R-CNN as well as their variants are widely exploited in many applications. Many works have revealed that these detectors are extremely vulnerable to adversarial patch attacks. The…

Computer Vision and Pattern Recognition · Computer Science 2021-03-24 Hao Huang , Yongtao Wang , Zhaoyu Chen , Zhi Tang , Wenqiang Zhang , Kai-Kuang Ma

Realistic adversarial attacks on various camera-based perception tasks of autonomous vehicles have been successfully demonstrated so far. However, only a few works considered attacks on traffic light detectors. This work shows how CNNs for…

Computer Vision and Pattern Recognition · Computer Science 2025-06-06 Svetlana Pavlitska , Jamie Robb , Nikolai Polley , Melih Yazgan , J. Marius Zöllner

Adversarial patch attacks present a significant threat to real-world object detectors due to their practical feasibility. Existing defense methods, which rely on attack data or prior knowledge, struggle to effectively address a wide range…

Computer Vision and Pattern Recognition · Computer Science 2024-04-26 Lihua Jing , Rui Wang , Wenqi Ren , Xin Dong , Cong Zou

Adversarial patches exemplify the tangible manifestation of the threat posed by adversarial attacks on Machine Learning (ML) models in real-world scenarios. Robustness against these attacks is of the utmost importance when designing…

Computer Vision and Pattern Recognition · Computer Science 2023-12-04 Bilel Tarchoun , Quazi Mishkatul Alam , Nael Abu-Ghazaleh , Ihsen Alouani

Object detection models, which are widely used in various domains (such as retail), have been shown to be vulnerable to adversarial attacks. Existing methods for detecting adversarial attacks on object detectors have had difficulty…

Computer Vision and Pattern Recognition · Computer Science 2023-07-04 Omer Hofman , Amit Giloni , Yarin Hayun , Ikuya Morikawa , Toshiya Shimizu , Yuval Elovici , Asaf Shabtai

Object detection is fundamental to various real-world applications, such as security monitoring and surveillance video analysis. Despite their advancements, state-of-the-art object detectors are still vulnerable to adversarial patch…

Computer Vision and Pattern Recognition · Computer Science 2026-03-24 Jin Ma , Mohammed Aldeen , Christopher Salas , Feng Luo , Mashrur Chowdhury , Mert Pesé , Long Cheng