Attacking Motion Estimation with Adversarial Snow
Current adversarial attacks for motion estimation (optical flow) optimize small per-pixel perturbations, which are unlikely to appear in the real world. In contrast, we exploit a real-world weather phenomenon for a novel attack with adversarially optimized snow. At the core of our attack is a differentiable renderer that consistently integrates photorealistic snowflakes with realistic motion into the 3D scene. Through optimization we obtain adversarial snow that significantly impacts the optical flow while being indistinguishable from ordinary snow. Surprisingly, the impact of our novel attack is largest on methods that previously showed a high robustness to small L_p perturbations.
Code (0)
등록된 구현이 없습니다.
Tasks
Motion EstimationOptical Flow EstimationSimilar Papers 제목 키워드 기반
Distracting Downpour: Adversarial Weather Attacks for Motion Estimation
Current adversarial attacks on motion estimation, or optical flow, optimize small per-pixel perturbations, which are unlikely to appear in the real world. In contrast, adverse weather conditions constitute a much more re…
Motion EstimationOptical Flow EstimationAdversarial Attacks on Multi-task Visual Perception for Autonomous Driving
Deep neural networks (DNNs) have accomplished impressive success in various applications, including autonomous driving perception tasks, in recent years. On the other hand, current deep neural networks are easily fooled …
Autonomous DrivingMotion Detectionobject-detectionObject Detection+1Attacking Optical Flow
Deep neural nets achieve state-of-the-art performance on the problem of optical flow estimation. Since optical flow is used in several safety-critical applications like self-driving cars, it is important to gain insights…
DecoderOptical Flow EstimationSelf-Driving CarsFooling LiDAR Perception via Adversarial Trajectory Perturbation
LiDAR point clouds collected from a moving vehicle are functions of its trajectories, because the sensor motion needs to be compensated to avoid distortions. When autonomous vehicles are sending LiDAR point clouds to dee…
3D Object DetectionAutonomous VehiclesMotion Compensationobject-detection+1SMART: Skeletal Motion Action Recognition aTtack
Adversarial attack has inspired great interest in computer vision, by showing that classification-based solutions are prone to imperceptible attack in many tasks. In this paper, we propose a method, SMART, to attack acti…
Action RecognitionAdversarial AttackTime SeriesTime Series Analysis