English
Related papers

Related papers: Model Agnostic Defense against Adversarial Patch A…

200 papers

Recently, deep neural networks (DNNs) have been widely and successfully used in Object Detection, e.g. Faster RCNN, YOLO, CenterNet. However, recent studies have shown that DNNs are vulnerable to adversarial attacks. Adversarial attacks…

Computer Vision and Pattern Recognition · Computer Science 2020-10-23 Shudeng Wu , Tao Dai , Shu-Tao Xia

Deep neural networks based object detection models have revolutionized computer vision and fueled the development of a wide range of visual recognition applications. However, recent studies have revealed that deep object detectors can be…

Cryptography and Security · Computer Science 2020-07-14 Ka-Ho Chow , Ling Liu , Mehmet Emre Gursoy , Stacey Truex , Wenqi Wei , Yanzhao Wu

Adversarial patches undermine the reliability of optical flow predictions when placed in arbitrary scene locations. Therefore, they pose a realistic threat to real-world motion detection and its downstream applications. Potential remedies…

Computer Vision and Pattern Recognition · Computer Science 2023-11-03 Erik Scheurer , Jenny Schmalfuss , Alexander Lis , Andrés Bruhn

An adversarial patch can arbitrarily manipulate image pixels within a restricted region to induce model misclassification. The threat of this localized attack has gained significant attention because the adversary can mount a…

Computer Vision and Pattern Recognition · Computer Science 2021-04-27 Chong Xiang , Prateek Mittal

Adversarial patches exemplify the tangible manifestation of the threat posed by adversarial attacks on Machine Learning (ML) models in real-world scenarios. Robustness against these attacks is of the utmost importance when designing…

Computer Vision and Pattern Recognition · Computer Science 2023-12-04 Bilel Tarchoun , Quazi Mishkatul Alam , Nael Abu-Ghazaleh , Ihsen Alouani

In this paper, we demonstrate a physical adversarial patch attack against object detectors, notably the YOLOv3 detector. Unlike previous work on physical object detection attacks, which required the patch to overlap with the objects being…

Computer Vision and Pattern Recognition · Computer Science 2019-07-01 Mark Lee , Zico Kolter

Adversarial robustness of BEV 3D object detectors is critical for autonomous driving (AD). Existing invasive attacks require altering the target vehicle itself (e.g. attaching patches), making them unrealistic and impractical for real-world…

Computer Vision and Pattern Recognition · Computer Science 2026-03-04 Aixuan Li , Mochu Xiang , Bosen Hou , Zhexiong Wan , Jing Zhang , Yuchao Dai

Development of defenses against physical world attacks such as adversarial patches is gaining traction within the research community. We contribute to the field of adversarial patch detection by introducing an uncertainty-based adversarial…

Computer Vision and Pattern Recognition · Computer Science 2023-03-21 Terence Jie Chua , Wenhan Yu , Jun Zhao

Object detection models are critical components of automated systems, such as autonomous vehicles and perception-based robots, but their sensitivity to adversarial attacks poses a serious security risk. Progress in defending these models…

Computer Vision and Pattern Recognition · Computer Science 2026-02-19 Alexis Winter , Jean-Vincent Martini , Romaric Audigier , Angelique Loesch , Bertrand Luvison

Recently demonstrated physical-world adversarial attacks have exposed vulnerabilities in perception systems that pose severe risks for safety-critical applications such as autonomous driving. These attacks place adversarial artifacts in the…

Machine Learning · Computer Science 2021-06-23 Jan Hendrik Metzen , Nicole Finnie , Robin Hutmacher

Adversarial attacks present a significant challenge to the dependable deployment of machine learning models, with patch-based attacks being particularly potent. These attacks introduce adversarial perturbations in localized regions of an…

Cryptography and Security · Computer Science 2024-08-28 Nandish Chattopadhyay , Amira Guesmi , Muhammad Abdullah Hanif , Bassem Ouni , Muhammad Shafique

A network of unmanned aerial vehicles (UAVs) provides distributed coverage, reconfigurability, and maneuverability in performing complex cooperative tasks. However, it relies on wireless communications that can be susceptible to cyber…

Systems and Control · Electrical Eng. & Systems 2023-10-27 Rayan Bahrami , Hamidreza Jafarnejadsani

Deep neural networks are known to be susceptible to adversarial perturbations -- small perturbations that alter the output of the network and exist under strict norm limitations. While such perturbations are usually discussed as tailored to…

Computer Vision and Pattern Recognition · Computer Science 2022-10-05 Yaniv Nemcovsky , Matan Jacoby , Alex M. Bronstein , Chaim Baskin

Deep learning models are being integrated into a wide range of high-impact, security-critical systems, from self-driving cars to medical diagnosis. However, recent research has demonstrated that many of these deep learning architectures are…

Computer Vision and Pattern Recognition · Computer Science 2020-11-17 Scott Freitas , Shang-Tse Chen , Zijie J. Wang , Duen Horng Chau

The vulnerability of deep neural networks to adversarial patches has motivated numerous defense strategies for boosting model robustness. However, the prevailing defenses depend on single observation or pre-established adversary information…

Computer Vision and Pattern Recognition · Computer Science 2024-04-02 Lingxuan Wu , Xiao Yang , Yinpeng Dong , Liuwei Xie , Hang Su , Jun Zhu

Adversarial attacks on deep learning models have received increased attention in recent years. Work in this area has mostly focused on gradient-based techniques, so-called 'white-box' attacks, where the attacker has access to the targeted…

Computer Vision and Pattern Recognition · Computer Science 2025-10-21 Raz Lapid , Eylon Mizrahi , Moshe Sipper

State-of-the-art convolutional neural network models for object detection and image classification are vulnerable to physically realizable adversarial perturbations, such as patch attacks. Existing defenses have focused, implicitly or…

Computer Vision and Pattern Recognition · Computer Science 2025-06-25 Mauricio Byrd Victorica , György Dán , Henrik Sandberg

Object detection is a fundamental task in various applications ranging from autonomous driving to intelligent security systems. However, recognition of a person can be hindered when their clothing is decorated with carefully designed…

Computer Vision and Pattern Recognition · Computer Science 2024-10-01 Wenyi Tan , Yang Li , Chenxing Zhao , Zhunga Liu , Quan Pan

Patch attacks against object detectors have been of recent interest due to their being physically realizable and more closely aligned with practical systems. In response to this threat, many new defenses have been proposed that train a…

Machine Learning · Computer Science 2024-12-09 Ryan Feng , Neal Mangaokar , Jihye Choi , Somesh Jha , Atul Prakash

Adversarial attacks pose a significant challenge to the reliable deployment of machine learning models in EdgeAI applications, such as autonomous driving and surveillance, which rely on resource-constrained devices for real-time inference.…

Cryptography and Security · Computer Science 2026-01-05 Nandish Chattopadhyay , Abdul Basit , Amira Guesmi , Muhammad Abdullah Hanif , Bassem Ouni , Muhammad Shafique