English
Related papers

Related papers: Breaking the Illusion: Real-world Challenges for A…

200 papers

Adversarial patches are widely used to evaluate the robustness of object detection systems in real-world scenarios. These patches were initially designed to deceive single-modal detectors (e.g., visible or infrared) and have recently been…

Computer Vision and Pattern Recognition · Computer Science 2025-07-21 Jiahuan Long , Wen Yao , Tingsong Jiang , Chao Ma

Adversarial patch attacks pose a practical threat to deep learning models by forcing targeted misclassifications through localized perturbations, often realized in the physical world. Existing defenses typically assume prior knowledge of…

Computer Vision and Pattern Recognition · Computer Science 2025-10-07 Ayushi Mehrotra , Derek Peng , Dipkamal Bhusal , Nidhi Rastogi

State-of-the-art generative model-based attacks against image classifiers overwhelmingly focus on single-object (i.e., single dominant object) images. Different from such settings, we tackle a more practical problem of generating…

Computer Vision and Pattern Recognition · Computer Science 2022-10-05 Abhishek Aich , Shasha Li , Chengyu Song , M. Salman Asif , Srikanth V. Krishnamurthy , Amit K. Roy-Chowdhury

Monocular depth estimation (MDE) and semantic segmentation (SS) are crucial for the navigation and environmental interpretation of many autonomous driving systems. However, their vulnerability to practical adversarial attacks is a…

Computer Vision and Pattern Recognition · Computer Science 2024-08-28 Naufal Suryanto , Andro Aprila Adiputra , Ahmada Yusril Kadiptya , Yongsu Kim , Howon Kim

Event cameras, known for their low latency and high dynamic range, show great potential in pedestrian detection applications. However, while recent research has primarily focused on improving detection accuracy, the robustness of…

Computer Vision and Pattern Recognition · Computer Science 2025-03-04 Guixu Lin , Muyao Niu , Qingtian Zhu , Zhengwei Yin , Zhuoxiao Li , Shengfeng He , Yinqiang Zheng

Neural networks have revolutionized various domains, exhibiting remarkable accuracy in tasks like natural language processing and computer vision. However, their vulnerability to slight alterations in input samples poses challenges,…

Computer Vision and Pattern Recognition · Computer Science 2023-11-15 Shashank Kotyan , Danilo Vasconcellos Vargas

Deep Learning is currently used to perform multiple tasks, such as object recognition, face recognition, and natural language processing. However, Deep Neural Networks (DNNs) are vulnerable to perturbations that alter the network prediction…

Computer Vision and Pattern Recognition · Computer Science 2024-04-30 Joana C. Costa , Tiago Roxo , Hugo Proença , Pedro R. M. Inácio

Adversarial patch-based attacks have shown to be a major deterrent towards the reliable use of machine learning models. These attacks involve the strategic modification of localized patches or specific image areas to deceive trained machine…

Cryptography and Security · Computer Science 2023-11-22 Nandish Chattopadhyay , Amira Guesmi , Muhammad Abdullah Hanif , Bassem Ouni , Muhammad Shafique

Despite the recent advancements in deploying neural networks for image classification, it has been found that adversarial examples are able to fool these models leading them to misclassify the images. Since these models are now being widely…

Computer Vision and Pattern Recognition · Computer Science 2018-08-07 Raghav Gurbaxani , Shivank Mishra

Machine learning algorithms are effective in several applications, but they are not as much successful when applied to intrusion detection in cyber security. Due to the high sensitivity to their training data, cyber detectors based on…

Cryptography and Security · Computer Science 2021-06-15 Giovanni Apruzzese , Mauro Andreolini , Michele Colajanni , Mirco Marchetti

Sparse and patch adversarial attacks were previously shown to be applicable in realistic settings and are considered a security risk to autonomous systems. Sparse adversarial perturbations constitute a setting in which the adversarial…

Computer Vision and Pattern Recognition · Computer Science 2024-11-26 Yaniv Nemcovsky , Avi Mendelson , Chaim Baskin

Adversarial attacks on deep learning models have received increased attention in recent years. Work in this area has mostly focused on gradient-based techniques, so-called 'white-box' attacks, where the attacker has access to the targeted…

Computer Vision and Pattern Recognition · Computer Science 2025-10-21 Raz Lapid , Eylon Mizrahi , Moshe Sipper

We study the robustness of machine learning approaches to adversarial perturbations, with a focus on supervised learning scenarios. We find that typical phase classifiers based on deep neural networks are extremely vulnerable to adversarial…

Disordered Systems and Neural Networks · Physics 2024-01-26 Si Jiang , Sirui Lu , Dong-Ling Deng

It has been widely substantiated that deep neural networks (DNNs) are susceptible and vulnerable to adversarial perturbations. Existing studies mainly focus on performing attacks by corrupting targeted objects (physical attack) or images…

Computer Vision and Pattern Recognition · Computer Science 2025-08-06 Jiawei Lian , Shaohui Mei , Xiaofei Wang , Yi Wang , Lefan Wang , Yingjie Lu , Mingyang Ma , Lap-Pui Chau

This paper introduces an attacking mechanism to challenge the resilience of autonomous driving systems. Specifically, we manipulate the decision-making processes of an autonomous vehicle by dynamically displaying adversarial patches on a…

Robotics · Computer Science 2024-12-04 Amirhosein Chahe , Chenan Wang , Abhishek Jeyapratap , Kaidi Xu , Lifeng Zhou

Recent studies show that Deep Reinforcement Learning (DRL) models are vulnerable to adversarial attacks, which attack DRL models by adding small perturbations to the observations. However, some attacks assume full availability of the victim…

Machine Learning · Computer Science 2022-02-18 Xinlei Pan , Chaowei Xiao , Warren He , Shuang Yang , Jian Peng , Mingjie Sun , Jinfeng Yi , Zijiang Yang , Mingyan Liu , Bo Li , Dawn Song

Nowadays, general object detectors like YOLO and Faster R-CNN as well as their variants are widely exploited in many applications. Many works have revealed that these detectors are extremely vulnerable to adversarial patch attacks. The…

Computer Vision and Pattern Recognition · Computer Science 2021-03-24 Hao Huang , Yongtao Wang , Zhaoyu Chen , Zhi Tang , Wenqiang Zhang , Kai-Kuang Ma

The literature on adversarial attacks in computer vision typically focuses on pixel-level perturbations. These tend to be very difficult to interpret. Recent work that manipulates the latent representations of image generators to create…

Machine Learning · Computer Science 2023-09-12 Stephen Casper , Max Nadeau , Dylan Hadfield-Menell , Gabriel Kreiman

It has been shown that most machine learning algorithms are susceptible to adversarial perturbations. Slightly perturbing an image in a carefully chosen direction in the image space may cause a trained neural network model to misclassify…

Computer Vision and Pattern Recognition · Computer Science 2017-07-13 Jiajun Lu , Hussein Sibai , Evan Fabry , David Forsyth

Adversarial attacks pose a significant challenge to the reliable deployment of machine learning models in EdgeAI applications, such as autonomous driving and surveillance, which rely on resource-constrained devices for real-time inference.…

Cryptography and Security · Computer Science 2026-01-05 Nandish Chattopadhyay , Abdul Basit , Amira Guesmi , Muhammad Abdullah Hanif , Bassem Ouni , Muhammad Shafique