Robust Backdoor Attacks on Object Detection in Real World
Deep learning models are widely deployed in many applications, such as object detection in various security fields. However, these models are vulnerable to backdoor attacks. Most backdoor attacks were intensively studied on classified models, but little on object detection. Previous works mainly focused on the backdoor attack in the digital world, but neglect the real world. Especially, the backdoor attack's effect in the real world will be easily influenced by physical factors like distance and illumination. In this paper, we proposed a variable-size backdoor trigger to adapt to the different sizes of attacked objects, overcoming the disturbance caused by the distance between the viewing point and attacked object. In addition, we proposed a backdoor training named malicious adversarial training, enabling the backdoor object detector to learn the feature of the trigger with physical noise. The experiment results show this robust backdoor attack (RBA) could enhance the attack success rate in the real world.
Code (0)
등록된 구현이 없습니다.
Tasks
Backdoor AttackObjectobject-detectionObject DetectionSimilar Papers 제목 키워드 기반
BadDet: Backdoor Attacks on Object Detection
Deep learning models have been deployed in numerous real-world applications such as autonomous driving and surveillance. However, these models are vulnerable in adversarial environments. Backdoor attack is emerging as a …
Autonomous DrivingBackdoor Attackimage-classificationImage Classification+3Mask-based Invisible Backdoor Attacks on Object Detection
Deep learning models have achieved unprecedented performance in the domain of object detection, resulting in breakthroughs in areas such as autonomous driving and security. However, deep learning models are vulnerable to…
Autonomous DrivingBackdoor Attackimage-classificationObject DetectionBadFusion: 2D-Oriented Backdoor Attacks against 3D Object Detection
3D object detection plays an important role in autonomous driving; however, its vulnerability to backdoor attacks has become evident. By injecting ''triggers'' to poison the training dataset, backdoor attacks manipulate …
2D Object Detection3D Object DetectionAutonomous DrivingBackdoor Attack+3Physical Backdoor: Towards Temperature-based Backdoor Attacks in the Physical World
Backdoor attacks have been well-studied in visible light object detection (VLOD) in recent years. However, VLOD can not effectively work in dark and temperature-sensitive scenarios. Instead, thermal infrared object detec…
Objectobject-detectionObject DetectionCIS-BA: Continuous Interaction Space Based Backdoor Attack for Object Detection in the Real-World
Object detection models deployed in real-world applications such as autonomous driving face serious threats from backdoor attacks. Despite their practical effectiveness,existing methods are inherently limited in both cap…
Autonomous DrivingObject Detection