Projection-based Adversarial Attack using Physics-in-the-Loop Optimization for Monocular Depth Estimation
Deep neural networks (DNNs) remain vulnerable to adversarial attacks that cause misclassification when specific perturbations are added to input images. This vulnerability also threatens the reliability of DNN-based monocular depth estimation (MDE) models, making robustness enhancement a critical need in practical applications. To validate the vulnerability of DNN-based MDE models, this study proposes a projection-based adversarial attack method that projects perturbation light onto a target object. The proposed method employs physics-in-the-loop (PITL) optimization -- evaluating candidate solutions in actual environments to account for device specifications and disturbances -- and utilizes a distributed covariance matrix adaptation evolution strategy. Experiments confirmed that the proposed method successfully created adversarial examples that lead to depth misestimations, resulting in parts of objects disappearing from the target scene.
Code (0)
등록된 구현이 없습니다.
Tasks
Monocular Depth EstimationAdversarial AttackSimilar Papers 제목 키워드 기반
Physical-World Optical Adversarial Attacks on 3D Face Recognition
2D face recognition has been proven insecure for physical adversarial attacks. However, few studies have investigated the possibility of attacking real-world 3D face recognition systems. 3D-printed attacks recently propo…
Adversarial AttackFace RecognitionTransient Adversarial 3D Projection Attacks on Object Detection in Autonomous Driving
Object detection is a crucial task in autonomous driving. While existing research has proposed various attacks on object detection, such as those using adversarial patches or stickers, the exploration of projection attac…
Autonomous DrivingObjectobject-detectionObject DetectionEmpirical evaluation of the Frank-Wolfe methods for constructing white-box adversarial attacks
The construction of adversarial attacks for neural networks appears to be a crucial challenge for their deployment in various services. To estimate the adversarial robustness of a neural network, a fast and efficient app…
Adversarial RobustnessAdversarial AttackSPAA: Stealthy Projector-based Adversarial Attacks on Deep Image Classifiers
Light-based adversarial attacks use spatial augmented reality (SAR) techniques to fool image classifiers by altering the physical light condition with a controllable light source, e.g., a projector. Compared with physica…
Adversarial AttackProjection & Probability-Driven Black-Box Attack
Generating adversarial examples in a black-box setting retains a significant challenge with vast practical application prospects. In particular, existing black-box attacks suffer from the need for excessive queries, as i…
compressed sensing