Adversarial Attack Against Image-Based Localization Neural Networks
In this paper, we present a proof of concept for adversarially attacking the image-based localization module of an autonomous vehicle. This attack aims to cause the vehicle to perform a wrong navigational decisions and prevent it from reaching a desired predefined destination in a simulated urban environment. A database of rendered images allowed us to train a deep neural network that performs a localization task and implement, develop and assess the adversarial pattern. Our tests show that using this adversarial attack we can prevent the vehicle from turning at a given intersection. This is done by manipulating the vehicle's navigational module to falsely estimate its current position and thus fail to initialize the turning procedure until the vehicle misses the last opportunity to perform a safe turn in a given intersection.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial AttackImage-Based LocalizationPositionSimilar Papers 제목 키워드 기반
Defending from GeoLocalization through Adversarial Road Trips
Retrieval-based image geolocalization has emerged as a powerful technique for determining the location of a query image by matching it against a large, geotagged database. The success of deep learning based approaches ha…
Adversarial AttackAttacking Image Splicing Detection and Localization Algorithms Using Synthetic Traces
Recent advances in deep learning have enabled forensics researchers to develop a new class of image splicing detection and localization algorithms. These algorithms identify spliced content by detecting localized inconsi…
Generative Adversarial NetworkEvading Detection Actively: Toward Anti-Forensics against Forgery Localization
Anti-forensics seeks to eliminate or conceal traces of tampering artifacts. Typically, anti-forensic methods are designed to deceive binary detectors and persuade them to misjudge the authenticity of an image. However, t…
Adversarial AttackSelf-Supervised LearningJedi: Entropy-based Localization and Removal of Adversarial Patches
Real-world adversarial physical patches were shown to be successful in compromising state-of-the-art models in a variety of computer vision applications. Existing defenses that are based on either input gradient or featu…
Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection
Object detection plays a key role in many security-critical systems. Adversarial patch attacks, which are easy to implement in the physical world, pose a serious threat to state-of-the-art object detectors. Developing re…
Adversarial Attack DetectionAdversarial DefenseAdversarial RobustnessObject+3