F&F Attack: Adversarial Attack against Multiple Object Trackers by Inducing False Negatives and False Positives
Multi-object tracking (MOT) aims to build moving trajectories for number-agnostic objects. Modern multi-object trackers commonly follow the tracking-by-detection strategy. Therefore, fooling detectors can be an effective solution but it usually requires attacks in multiple successive frames, resulting in low efficiency. Attacking association processes improves efficiency but may require model-specific design, leading to poor generalization. In this paper, we propose a novel False negative and False positive attack (F&F attack) mechanism: it perturbs the input image to erase original detections and to inject deceptive false alarms around original ones while integrating the association attack implicitly. The mechanism can produce effective identity switches against multi-object trackers by only fooling detectors in a few frames. To demonstrate the flexibility of the mechanism, we deploy it to three multi-object trackers (ByteTrack, SORT, and CenterTrack) which are enabled by two representative detectors (YOLOX and CenterNet). Comprehensive experiments on MOT17 and MOT20 datasets show that our method significantly outperforms existing attackers, revealing the vulnerability of the tracking-by-detection paradigm to detection attacks.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial AttackMulti-Object TrackingObjectObject TrackingSimilar Papers 제목 키워드 기반
Fooling Detection Alone is Not Enough: Adversarial Attack against Multiple Object Tracking
Recent work in adversarial machine learning started to focus on the visual perception in autonomous driving and studied Adversarial Examples (AEs) for object detection models. However, in such visual perception pipeline …
Adversarial AttackAutonomous DrivingBIG-bench Machine LearningMultiple Object Tracking+4Fooling Detection Alone is Not Enough: First Adversarial Attack against Multiple Object Tracking
Recent work in adversarial machine learning started to focus on the visual perception in autonomous driving and studied Adversarial Examples (AEs) for object detection models. However, in such visual perception pipeline …
Adversarial AttackAutonomous DrivingBIG-bench Machine LearningMultiple Object Tracking+4A Single Set of Adversarial Clothes Breaks Multiple Defense Methods in the Physical World
In recent years, adversarial attacks against deep learning-based object detectors in the physical world have attracted much attention. To defend against these attacks, researchers have proposed various defense methods ag…
Adversarial DefenseZero-Query Transfer Attacks on Context-Aware Object Detectors
Adversarial attacks perturb images such that a deep neural network produces incorrect classification results. A promising approach to defend against adversarial attacks on natural multi-object scenes is to impose a conte…
Adversarial AttackObjectSimultaneous Adversarial Attacks On Multiple Face Recognition System Components
In this work, we investigate the potential threat of adversarial examples to the security of face recognition systems. Although previous research has explored the adversarial risk to individual components of FRSs, our st…
Face DetectionFace Recognition