Learning When to Use Adaptive Adversarial Image Perturbations against Autonomous Vehicles
The deep neural network (DNN) models for object detection using camera images are widely adopted in autonomous vehicles. However, DNN models are shown to be susceptible to adversarial image perturbations. In the existing methods of generating the adversarial image perturbations, optimizations take each incoming image frame as the decision variable to generate an image perturbation. Therefore, given a new image, the typically computationally-expensive optimization needs to start over as there is no learning between the independent optimizations. Very few approaches have been developed for attacking online image streams while considering the underlying physical dynamics of autonomous vehicles, their mission, and the environment. We propose a multi-level stochastic optimization framework that monitors an attacker's capability of generating the adversarial perturbations. Based on this capability level, a binary decision attack/not attack is introduced to enhance the effectiveness of the attacker. We evaluate our proposed multi-level image attack framework using simulations for vision-guided autonomous vehicles and actual tests with a small indoor drone in an office environment. The results show our method's capability to generate the image attack in real-time while monitoring when the attacker is proficient given state estimates.
Code (0)
등록된 구현이 없습니다.
Tasks
Autonomous Vehiclesobject-detectionObject DetectionStochastic OptimizationSimilar Papers 제목 키워드 기반
Error Diffusion Halftoning Against Adversarial Examples
Adversarial examples contain carefully crafted perturbations that can fool deep neural networks (DNNs) into making wrong predictions. Enhancing the adversarial robustness of DNNs has gained considerable interest in recen…
Adversarial RobustnessQuantizationStruggle with Adversarial Defense? Try Diffusion
Adversarial attacks induce misclassification by introducing subtle perturbations. Recently, diffusion models are applied to the image classifiers to improve adversarial robustness through adversarial training or by purif…
Adversarial DefenseAdversarial RobustnessViTGuard: Attention-aware Detection against Adversarial Examples for Vision Transformer
The use of transformers for vision tasks has challenged the traditional dominant role of convolutional neural networks (CNN) in computer vision (CV). For image classification tasks, Vision Transformer (ViT) effectively e…
image-classificationImage ClassificationImage ReconstructionBenchmarking Adversarial Robustness of Image Shadow Removal with Shadow-adaptive Attacks
Shadow removal is a task aimed at erasing regional shadows present in images and reinstating visually pleasing natural scenes with consistent illumination. While recent deep learning techniques have demonstrated impressi…
Adversarial AttackAdversarial RobustnessBenchmarkingImage Shadow Removal+1A Note on Implementation Errors in Recent Adaptive Attacks Against Multi-Resolution Self-Ensembles
This note documents an implementation issue in recent adaptive attacks (Zhang et al. [2024]) against the multi-resolution self-ensemble defense (Fort and Lakshminarayanan [2024]). The implementation allowed adversarial p…
Adversarial Robustness