paper-with-me

홈 › Papers

Feasibility of Inconspicuous GAN-generated Adversarial Patches against Object Detection

2022-07-15 · Svetlana Pavlitskaya, Bianca-Marina Codău, J. Marius Zöllner

Standard approaches for adversarial patch generation lead to noisy conspicuous patterns, which are easily recognizable by humans. Recent research has proposed several approaches to generate naturalistic patches using generative adversarial networks (GANs), yet only a few of them were evaluated on the object detection use case. Moreover, the state of the art mostly focuses on suppressing a single large bounding box in input by overlapping it with the patch directly. Suppressing objects near the patch is a different, more complex task. In this work, we have evaluated the existing approaches to generate inconspicuous patches. We have adapted methods, originally developed for different computer vision tasks, to the object detection use case with YOLOv3 and the COCO dataset. We have evaluated two approaches to generate naturalistic patches: by incorporating patch generation into the GAN training process and by using the pretrained GAN. For both cases, we have assessed a trade-off between performance and naturalistic patch appearance. Our experiments have shown, that using a pre-trained GAN helps to gain realistic-looking patches while preserving the performance similar to conventional adversarial patches.

📄 PDF Abstract BibTeX arXiv:2207.07347

Code (0)

등록된 구현이 없습니다.

Tasks

object-detectionObject Detection

Methods 이 논문이 사용한 방법론

Batch Normalization 설명 없음
Average Pooling 설명 없음
Convolution A convolution is a type of matrix operation, consisting of a kernel, a small matrix of weights, that slides over input data performing element-wise multiplication with the…
Global Average Pooling Global Average Pooling is a pooling operation designed to replace fully connected layers in classical CNNs. The idea is to generate one feature map for each corresponding…
Softmax The Softmax output function transforms a previous layer's output into a vector of probabilities. It is commonly used for multiclass classification. Given an input vector $x$…
k-Means Clustering k-Means Clustering is a clustering algorithm that divides a training set into $k$ different clusters of examples that are near each other. It works by initializing $k$…
Residual Connection 설명 없음
1x1 Convolution A 1 x 1 Convolution is a convolution with some special properties in that it can be used for dimensionality reduction,…

Similar Papers 제목 키워드 기반

Generating Adversarial yet Inconspicuous Patches with a Single Image

2020-09-21 · Jinqi Luo, Tao Bai, Jun Zhao

Deep neural networks have been shown vulnerable toadversarial patches, where exotic patterns can resultin models wrong prediction. Nevertheless, existing ap-proaches to adversarial patch generation hardly con-sider the c…

Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices

2021-06-29 · Tao Bai, Jinqi Luo, Jun Zhao

Deep learning based image recognition systems have been widely deployed on mobile devices in today's world. In recent studies, however, deep learning models are shown vulnerable to adversarial examples. One variant of ad…

Hiding in Plain Sight: An Effective Physical Adversarial Patch Attack against Visual-Infrared Fused Face Detection

2026-07-25 · Qiucheng Yu, Tao Ni, Yihe Zhou, Jiayimei Wang 외 arxiv

Deep learning-based visual-infrared fused face detection models are increasingly deployed across a wide range of applications, yet they remain susceptible to adversarial patch attacks. Most prior attacks target either th…

Face Detection

Improving the Transferability of Adversarial Examples with Restructure Embedded Patches

2022-04-27 · Huipeng Zhou, Yu-an Tan, Yajie Wang, Haoran Lyu 외

Vision transformers (ViTs) have demonstrated impressive performance in various computer vision tasks. However, the adversarial examples generated by ViTs are challenging to transfer to other networks with different struc…

Specificity

Towards Physically Realizable Adversarial Attacks in Embodied Vision Navigation

2024-09-16 · Meng Chen, Jiawei Tu, Chao Qi, Yonghao Dang 외

The significant advancements in embodied vision navigation have raised concerns about its susceptibility to adversarial attacks exploiting deep neural networks. Investigating the adversarial robustness of embodied vision…

Adversarial Robustnessobject-detectionObject Detection