English
Related papers

Related papers: Defending Against Physical Adversarial Patch Attac…

200 papers

Developing reliable defenses against patch attacks on object detectors has attracted increasing interest. However, we identify that existing defense evaluations lack a unified and comprehensive framework, resulting in inconsistent and…

Computer Vision and Pattern Recognition · Computer Science 2025-08-08 Junhao Zheng , Jiahao Sun , Chenhao Lin , Zhengyu Zhao , Chen Ma , Chong Zhang , Cong Wang , Qian Wang , Chao Shen

Recently, physical adversarial attacks have been presented to evade DNNs-based object detectors. To ensure the security, many scenarios are simultaneously deployed with visible sensors and infrared sensors, leading to the failures of these…

Computer Vision and Pattern Recognition · Computer Science 2023-07-20 Xingxing Wei , Yao Huang , Yitong Sun , Jie Yu

Physical adversarial attacks threaten to fool object detection systems, but reproducible research on the real-world effectiveness of physical patches and how to defend against them requires a publicly available benchmark dataset. We present…

Computer Vision and Pattern Recognition · Computer Science 2023-07-21 Anneliese Braunegg , Amartya Chakraborty , Michael Krumdick , Nicole Lape , Sara Leary , Keith Manville , Elizabeth Merkhofer , Laura Strickhart , Matthew Walmer

Adversarial attacks pose a significant threat to the robustness and reliability of machine learning systems, particularly in computer vision applications. This study investigates the performance of adversarial patches for the YOLO object…

Computer Vision and Pattern Recognition · Computer Science 2024-11-27 Jakob Shack , Katarina Petrovic , Olga Saukh

Physical adversarial attacks have put a severe threat to DNN-based object detectors. To enhance security, a combination of visible and infrared sensors is deployed in various scenarios, which has proven effective in disabling existing…

Computer Vision and Pattern Recognition · Computer Science 2023-07-28 Xingxing Wei , Yao Huang , Yitong Sun , Jie Yu

Adversarial patches are images designed to fool otherwise well-performing neural network-based computer vision models. Although these attacks were initially conceived of and studied digitally, in that the raw pixel values of the image were…

Computer Vision and Pattern Recognition · Computer Science 2022-06-28 Gavin S. Hartnett , Li Ang Zhang , Caolionn O'Connell , Andrew J. Lohn , Jair Aguirre

Adversarial patches are widely used to evaluate the robustness of object detection systems in real-world scenarios. These patches were initially designed to deceive single-modal detectors (e.g., visible or infrared) and have recently been…

Computer Vision and Pattern Recognition · Computer Science 2025-07-21 Jiahuan Long , Wen Yao , Tingsong Jiang , Chao Ma

Real-world adversarial physical patches were shown to be successful in compromising state-of-the-art models in a variety of computer vision applications. Existing defenses that are based on either input gradient or features analysis have…

Cryptography and Security · Computer Science 2023-04-21 Bilel Tarchoun , Anouar Ben Khalifa , Mohamed Ali Mahjoub , Nael Abu-Ghazaleh , Ihsen Alouani

The widespread adoption of computer vision systems has underscored their susceptibility to adversarial attacks, particularly adversarial patch attacks on object detectors. This study evaluates defense mechanisms for the YOLOv5 model against…

Computer Vision and Pattern Recognition · Computer Science 2025-06-30 Roie Kazoom , Raz Birman , Ofer Hadar

Object detection plays a key role in many security-critical systems. Adversarial patch attacks, which are easy to implement in the physical world, pose a serious threat to state-of-the-art object detectors. Developing reliable defenses for…

Computer Vision and Pattern Recognition · Computer Science 2022-05-03 Jiang Liu , Alexander Levine , Chun Pong Lau , Rama Chellappa , Soheil Feizi

Deep neural networks (DNNs) have revolutionized the field of computer vision like object detection with their unparalleled performance. However, existing research has shown that DNNs are vulnerable to adversarial attacks. In the physical…

Cryptography and Security · Computer Science 2024-06-26 Zijin Lin , Yue Zhao , Kai Chen , Jinwen He

The adversarial patch attack aims to fool image classifiers within a bounded, contiguous region of arbitrary changes, posing a real threat to computer vision systems (e.g., autonomous driving, content moderation, biometric authentication,…

Computer Vision and Pattern Recognition · Computer Science 2023-05-19 Di Yang , Yihao Huang , Qing Guo , Felix Juefei-Xu , Ming Hu , Yang Liu , Geguang Pu

Deep learning drives major advances in autonomous driving (AD), where object detectors are central to perception. However, adversarial attacks pose significant threats to the reliability and safety of these systems, with physical…

Computer Vision and Pattern Recognition · Computer Science 2026-04-28 Zihui Zhu , Ziqi Zhou , Yichen Wang , Lulu Xue , Minghui Li , Shengshan Hu

Patch-based adversarial attacks introduce a perceptible but localized change to the input that induces misclassification. While progress has been made in defending against imperceptible attacks, it remains unclear how patch-based attacks…

Computer Vision and Pattern Recognition · Computer Science 2020-12-02 Christian Cosgrove , Adam Kortylewski , Chenglin Yang , Alan Yuille

Currently, many studies have addressed security concerns related to visible and infrared detectors independently. In practical scenarios, utilizing cross-modal detectors for tasks proves more reliable than relying on single-modal detectors.…

Computer Vision and Pattern Recognition · Computer Science 2023-12-05 Chengyin Hu , Weiwen Shi

Autonomous vehicles increasingly utilize the vision-based perception module to acquire information about driving environments and detect obstacles. Correct detection and classification are important to ensure safe driving decisions.…

Cryptography and Security · Computer Science 2024-01-02 Wenjun Zhu , Xiaoyu Ji , Yushi Cheng , Shibo Zhang , Wenyuan Xu

Deep learning image classification is vulnerable to adversarial attack, even if the attacker changes just a small patch of the image. We propose a defense against patch attacks based on partially occluding the image around each candidate…

Machine Learning · Computer Science 2020-04-30 Michael McCoyd , Won Park , Steven Chen , Neil Shah , Ryan Roggenkemper , Minjune Hwang , Jason Xinyu Liu , David Wagner

Adversarial attacks, particularly patch attacks, pose significant threats to the robustness and reliability of deep learning models. Developing reliable defenses against patch attacks is crucial for real-world applications. This paper…

Computer Vision and Pattern Recognition · Computer Science 2024-07-18 Caixin Kang , Yinpeng Dong , Zhengyi Wang , Shouwei Ruan , Yubo Chen , Hang Su , Xingxing Wei

State-of-the-art object detectors are vulnerable to localized patch hiding attacks, where an adversary introduces a small adversarial patch to make detectors miss the detection of salient objects. The patch attacker can carry out a…

Computer Vision and Pattern Recognition · Computer Science 2021-10-28 Chong Xiang , Prateek Mittal

DNN-based video object detection (VOD) powers autonomous driving and video surveillance industries with rising importance and promising opportunities. However, adversarial patch attack yields huge concern in live vision tasks because of its…

Computer Vision and Pattern Recognition · Computer Science 2022-08-22 Husheng Han , Xing Hu , Kaidi Xu , Pucheng Dang , Ying Wang , Yongwei Zhao , Zidong Du , Qi Guo , Yanzhi Yang , Tianshi Chen