English
Related papers

Related papers: Physical Passive Patch Adversarial Attacks on Visu…

200 papers

Adversarial robustness of BEV 3D object detectors is critical for autonomous driving (AD). Existing invasive attacks require altering the target vehicle itself (e.g. attaching patches), making them unrealistic and impractical for real-world…

Computer Vision and Pattern Recognition · Computer Science 2026-03-04 Aixuan Li , Mochu Xiang , Bosen Hou , Zhexiong Wan , Jing Zhang , Yuchao Dai

The increasing reliance on machine learning systems has made their security a critical concern. Evasion attacks enable adversaries to manipulate the decision-making processes of AI systems, potentially causing security breaches or…

Computer Vision and Pattern Recognition · Computer Science 2025-09-26 Kasper Cools , Clara Maathuis , Alexander M. van Oers , Claudia S. Hübner , Nikos Deligiannis , Marijke Vandewal , Geert De Cubber

While adversarial neural networks have been shown successful for static image attacks, very few approaches have been developed for attacking online image streams while taking into account the underlying physical dynamics of autonomous…

Robotics · Computer Science 2021-05-19 Hyung-Jin Yoon , Hamidreza Jafarnejadsani , Petros Voulgaris

Video object segmentation has been applied to various computer vision tasks, such as video editing, autonomous driving, and human-robot interaction. However, the methods based on deep neural networks are vulnerable to adversarial examples,…

Computer Vision and Pattern Recognition · Computer Science 2023-12-14 Ping Li , Yu Zhang , Li Yuan , Jian Zhao , Xianghua Xu , Xiaoqin Zhang

Deep neural networks (DNNs) are vulnerable to adversarial examples obtained by adding small perturbations to original examples. The added perturbations in existing attacks are mainly determined by the gradient of the loss function with…

Cryptography and Security · Computer Science 2023-06-06 Chen Wan , Fangjun Huang

It is well known that adversarial attacks can fool deep neural networks with imperceptible perturbations. Although adversarial training significantly improves model robustness, failure cases of defense still broadly exist. In this work, we…

Machine Learning · Computer Science 2021-06-10 Boxi Wu , Heng Pan , Li Shen , Jindong Gu , Shuai Zhao , Zhifeng Li , Deng Cai , Xiaofei He , Wei Liu

Universal Adversarial Perturbations (UAPs) are a prominent class of adversarial examples that exploit the systemic vulnerabilities and enable physically realizable and robust attacks against Deep Neural Networks (DNNs). UAPs generalize…

Machine Learning · Computer Science 2021-05-25 Kenneth T. Co , Luis Muñoz-González , Leslie Kanthan , Emil C. Lupu

Connected autonomous vehicles (CAVs) rely on vision-based deep neural networks (DNNs) and low-latency (Vehicle-to-Everything) V2X communication to navigate safely and efficiently. Despite their advances, these systems remain vulnerable to…

Computer Vision and Pattern Recognition · Computer Science 2025-12-24 Md Nahid Hasan Shuvo , Moinul Hossain

Deep neural networks (DNNs) remain vulnerable to adversarial attacks that cause misclassification when specific perturbations are added to input images. This vulnerability also threatens the reliability of DNN-based monocular depth…

Computer Vision and Pattern Recognition · Computer Science 2026-01-01 Takeru Kusakabe , Yudai Hirose , Mashiho Mukaida , Satoshi Ono

Siamese trackers are shown to be vulnerable to adversarial attacks recently. However, the existing attack methods craft the perturbations for each video independently, which comes at a non-negligible computational cost. In this paper, we…

Computer Vision and Pattern Recognition · Computer Science 2021-10-12 Zhenbang Li , Yaya Shi , Jin Gao , Shaoru Wang , Bing Li , Pengpeng Liang , Weiming Hu

Deep neural networks were applied with success in a myriad of applications, but in safety critical use cases adversarial attacks still pose a significant threat. These attacks were demonstrated on various classification and detection tasks…

Computer Vision and Pattern Recognition · Computer Science 2022-05-24 Soma Kontar , Andras Horvath

Standard adversarial attacks change the predicted class label of a selected image by adding specially tailored small perturbations to its pixels. In contrast, a universal perturbation is an update that can be added to any image in a broad…

Computer Vision and Pattern Recognition · Computer Science 2019-11-22 Ali Shafahi , Mahyar Najibi , Zheng Xu , John Dickerson , Larry S. Davis , Tom Goldstein

Despite modifying only a small localized input region, adversarial patches can drastically change the prediction of computer vision models. However, prior methods either cannot perform satisfactorily under targeted attack scenarios or fail…

Computer Vision and Pattern Recognition · Computer Science 2025-07-10 Subrat Kishore Dutta , Xiao Zhang

Deep neural networks (DNNs) are known to have a fundamental sensitivity to adversarial attacks, perturbations of the input that are imperceptible to humans yet powerful enough to change the visual decision of a model. Adversarial attacks…

Computer Vision and Pattern Recognition · Computer Science 2023-06-07 Drew Linsley , Pinyuan Feng , Thibaut Boissin , Alekh Karkada Ashok , Thomas Fel , Stephanie Olaiya , Thomas Serre

Modern self-driving perception systems have been shown to improve upon processing complementary inputs such as LiDAR with images. In isolation, 2D images have been found to be extremely vulnerable to adversarial attacks. Yet, there have…

Computer Vision and Pattern Recognition · Computer Science 2022-01-10 James Tu , Huichen Li , Xinchen Yan , Mengye Ren , Yun Chen , Ming Liang , Eilyan Bitar , Ersin Yumer , Raquel Urtasun

Monocular depth estimation (MDE) has advanced significantly, primarily through the integration of convolutional neural networks (CNNs) and more recently, Transformers. However, concerns about their susceptibility to adversarial attacks have…

Computer Vision and Pattern Recognition · Computer Science 2024-08-06 Amira Guesmi , Muhammad Abdullah Hanif , Ihsen Alouani , Bassem Ouni , Muhammad Shafique

Adversarial patch is an important form of real-world adversarial attack that brings serious risks to the robustness of deep neural networks. Previous methods generate adversarial patches by either optimizing their perturbation values while…

Computer Vision and Pattern Recognition · Computer Science 2022-12-27 Xingxing Wei , Ying Guo , Jie Yu , Bo Zhang

As research in deep neural networks advances, deep convolutional networks become promising for autonomous driving tasks. In particular, there is an emerging trend of employing end-to-end neural network models for autonomous driving.…

Computer Vision and Pattern Recognition · Computer Science 2023-12-13 Han Wu , Syed Yunas , Sareh Rowlands , Wenjie Ruan , Johan Wahlstrom

Adding perturbations to images can mislead classification models to produce incorrect results. Recently, researchers exploited adversarial perturbations to protect image privacy from retrieval by intelligent models. However, adding…

Computer Vision and Pattern Recognition · Computer Science 2023-01-03 Li Chen , Shaowei Zhu , Zhaoxia Yin

The advent of convenient and efficient fully unmanned stores equipped with artificial intelligence-based automated checkout systems marks a new era in retail. However, these systems have inherent artificial intelligence security…

Cryptography and Security · Computer Science 2025-05-15 Hyunsik Na , Wonho Lee , Seungdeok Roh , Sohee Park , Daeseon Choi