English
Related papers

Related papers: SwitchPatch: Physical Adversarial Attack Strategy …

200 papers

Object detectors have emerged as an indispensable module in modern computer vision systems. In this work, we propose DPatch -- a black-box adversarial-patch-based attack towards mainstream object detectors (i.e. Faster R-CNN and YOLO).…

Computer Vision and Pattern Recognition · Computer Science 2019-04-25 Xin Liu , Huanrui Yang , Ziwei Liu , Linghao Song , Hai Li , Yiran Chen

Blind spots or outright deceit can bedevil and deceive machine learning models. Unidentified objects such as digital "stickers," also known as adversarial patches, can fool facial recognition systems, surveillance systems and self-driving…

Computer Vision and Pattern Recognition · Computer Science 2021-10-01 Zijian Zhu , Hang Su , Chang Liu , Wenzhao Xiang , Shibao Zheng

Adversarial attacks pose a significant threat to the robustness and reliability of machine learning systems, particularly in computer vision applications. This study investigates the performance of adversarial patches for the YOLO object…

Computer Vision and Pattern Recognition · Computer Science 2024-11-27 Jakob Shack , Katarina Petrovic , Olga Saukh

Advanced persistent threat (APT) is a kind of stealthy, sophisticated, and long-term cyberattack that has brought severe financial losses and critical infrastructure damages. Existing works mainly focus on APT defense under stable network…

Computer Science and Game Theory · Computer Science 2023-09-04 Zixuan Wang , Jiliang Li , Yuntao Wang , Zhou Su , Shui Yu , Weizhi Meng

Recently, object detection has proven vulnerable to adversarial patch attacks. The attackers holding a specially crafted patch can hide themselves from state-of-the-art detectors, e.g., YOLO, even in the physical world. This attack can…

Computer Vision and Pattern Recognition · Computer Science 2025-12-16 Jiachun Li , Jianan Feng , Jianjun Huang , Bin Liang

Adversarial attacks pose a significant challenge to the reliable deployment of machine learning models in EdgeAI applications, such as autonomous driving and surveillance, which rely on resource-constrained devices for real-time inference.…

Cryptography and Security · Computer Science 2026-01-05 Nandish Chattopadhyay , Abdul Basit , Amira Guesmi , Muhammad Abdullah Hanif , Bassem Ouni , Muhammad Shafique

Code models are increasingly adopted in software development but remain vulnerable to backdoor attacks via poisoned training data. Existing backdoor attacks on code models face a fundamental trade-off between transferability and…

Cryptography and Security · Computer Science 2026-02-13 Shuyu Chang , Haiping Huang , Yanjun Zhang , Yujin Huang , Fu Xiao , Leo Yu Zhang

Object detection is fundamental to various real-world applications, such as security monitoring and surveillance video analysis. Despite their advancements, state-of-the-art object detectors are still vulnerable to adversarial patch…

Computer Vision and Pattern Recognition · Computer Science 2026-03-24 Jin Ma , Mohammed Aldeen , Christopher Salas , Feng Luo , Mashrur Chowdhury , Mert Pesé , Long Cheng

Despite the impressive achievements of Deep Neural Networks (DNNs) in computer vision, their vulnerability to adversarial attacks remains a critical concern. Extensive research has demonstrated that incorporating sophisticated perturbations…

Computer Vision and Pattern Recognition · Computer Science 2024-11-22 Hui Wei , Hao Tang , Xuemei Jia , Zhixiang Wang , Hanxun Yu , Zhubo Li , Shin'ichi Satoh , Luc Van Gool , Zheng Wang

Neural network-based visuomotor policies enable robots to perform manipulation tasks but remain susceptible to perceptual attacks. For example, conventional 2D adversarial patches are effective under fixed-camera setups, where appearance is…

Robotics · Computer Science 2026-03-06 Chanmi Lee , Minsung Yoon , Woojae Kim , Sebin Lee , Sung-eui Yoon

Palmprint recognition is deployed in security-critical applications, including access control and palm-based payment, due to its contactless acquisition and highly discriminative ridge-and-crease textures. However, the robustness of deep…

Computer Vision and Pattern Recognition · Computer Science 2026-04-09 Renyang Liu , Jiale Li , Jie Zhang , Cong Wu , Xiaojun Jia , Shuxin Li , Wei Zhou , Kwok-Yan Lam , See-kiong Ng

Adversarial patch attacks are among one of the most practical threat models against real-world computer vision systems. This paper studies certified and empirical defenses against patch attacks. We begin with a set of experiments showing…

Cryptography and Security · Computer Science 2020-09-28 Ping-Yeh Chiang , Renkun Ni , Ahmed Abdelkader , Chen Zhu , Christoph Studer , Tom Goldstein

Adversarial patches in computer vision can be used, to fool deep neural networks and manipulate their decision-making process. One of the most prominent examples of adversarial patches are evasion attacks for object detectors. By covering…

Computer Vision and Pattern Recognition · Computer Science 2025-04-25 Jens Bayer , Stefan Becker , David Münch , Michael Arens

Adversarial attacks on face recognition (FR) systems pose a significant security threat, yet most are confined to the digital domain or require white-box access. We introduce GaP (Gaussian Patch), a novel method to generate a universal,…

Computer Vision and Pattern Recognition · Computer Science 2025-09-30 Andrey Kaznacheev , Matvey Mikhalchuk , Andrey Kuznetsov , Aleksandr Petiushko , Anton Razzhigaev

Adversarial attacks constitute a notable threat to machine learning systems, given their potential to induce erroneous predictions and classifications. However, within real-world contexts, the essential specifics of the deployed model are…

Computer Vision and Pattern Recognition · Computer Science 2023-12-21 Jingwen Ye , Ruonan Yu , Songhua Liu , Xinchao Wang

3GPP has introduced Private 5G to support the next-generation industrial automation system (IAS) due to the versatility and flexibility of 5G architecture. Besides the 3.5GHz CBRS band, unlicensed spectrum bands, like 5GHz, are considered…

Cryptography and Security · Computer Science 2023-02-20 Md Rashedur Rahman , Moinul Hossain , Jiang Xie

Deep learning based image recognition systems have been widely deployed on mobile devices in today's world. In recent studies, however, deep learning models are shown vulnerable to adversarial examples. One variant of adversarial examples,…

Computer Vision and Pattern Recognition · Computer Science 2021-11-23 Tao Bai , Jinqi Luo , Jun Zhao

Adversarial attacks, particularly patch attacks, pose significant threats to the robustness and reliability of deep learning models. Developing reliable defenses against patch attacks is crucial for real-world applications. This paper…

Computer Vision and Pattern Recognition · Computer Science 2024-07-18 Caixin Kang , Yinpeng Dong , Zhengyi Wang , Shouwei Ruan , Yubo Chen , Hang Su , Xingxing Wei

Adversarial examples have proven to be a concerning threat to deep learning models, particularly in the image domain. However, while many studies have examined adversarial examples in the real world, most of them relied on 2D photos of the…

Computer Vision and Pattern Recognition · Computer Science 2021-09-03 Yael Mathov , Lior Rokach , Yuval Elovici

Deep neural networks are successfully used in various applications, but show their vulnerability to adversarial examples. With the development of adversarial patches, the feasibility of attacks in physical scenes increases, and the defenses…

Computer Vision and Pattern Recognition · Computer Science 2023-07-27 Junwen Chen , Xingxing Wei