Object-fabrication Targeted Attack for Object Detection
Recent researches show that the deep learning based object detection is vulnerable to adversarial examples. Generally, the adversarial attack for object detection contains targeted attack and untargeted attack. According to our detailed investigations, the research on the former is relatively fewer than the latter and all the existing methods for the targeted attack follow the same mode, i.e., the object-mislabeling mode that misleads detectors to mislabel the detected object as a specific wrong label. However, this mode has limited attack success rate, universal and generalization performances. In this paper, we propose a new object-fabrication targeted attack mode which can mislead detectors to `fabricate' extra false objects with specific target labels. Furthermore, we design a dual attention based targeted feature space attack method to implement the proposed targeted attack mode. The attack performances of the proposed mode and method are evaluated on MS COCO and BDD100K datasets using FasterRCNN and YOLOv5. Evaluation results demonstrate that, the proposed object-fabrication targeted attack mode and the corresponding targeted feature space attack method show significant improvements in terms of image-specific attack, universal performance and generalization capability, compared with the previous targeted attack for object detection. Code will be made available.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial AttackObjectobject-detectionObject DetectionSimilar Papers 제목 키워드 기반
TOG: Targeted Adversarial Objectness Gradient Attacks on Real-time Object Detection Systems
The rapid growth of real-time huge data capturing has pushed the deep learning and data analytic computing to the edge systems. Real-time object recognition on the edge is one of the representative deep neural network (D…
Autonomous DrivingObjectobject-detectionObject Detection+3Pick-Object-Attack: Type-Specific Adversarial Attack for Object Detection
Many recent studies have shown that deep neural models are vulnerable to adversarial samples: images with imperceptible perturbations, for example, can fool image classifiers. In this paper, we present the first type-spe…
Adversarial AttackImage Captioningimage-classificationImage Classification+4Untargeted Backdoor Attack against Object Detection
Recent studies revealed that deep neural networks (DNNs) are exposed to backdoor threats when training with third-party resources (such as training samples or backbones). The backdoored model has promising performance in…
Backdoor Attackimage-classificationImage ClassificationObject+3Object-Attentional Untargeted Adversarial Attack
Deep neural networks are facing severe threats from adversarial attacks. Most existing black-box attacks fool target model by generating either global perturbations or local patches. However, both global perturbations an…
Adversarial AttackObjectobject-detectionObject Detection+1Category-wise Attack: Transferable Adversarial Examples for Anchor Free Object Detection
Deep neural networks have been demonstrated to be vulnerable to adversarial attacks: subtle perturbations can completely change the classification results. Their vulnerability has led to a surge of research in this direc…
Objectobject-detectionObject Detection