<p>Automatic driverless technology has been increasingly deploying object detectors that adopt deep learning networks to perceive running conditions, leading to security risks for object detector systems since recent studies have pointed out the existence of adversarial examples. Existing methods are mostly limited to classifier networks and have limitations in detecting adversarial examples targeting object detection networks, lacking generalization and decision foundations. However, accurate detection of adversarial examples targeting object detection networks is crucial for the field of automatic driving. In this paper, we propose an adversarial example detection method tailored for object detection networks, utilizing image processing techniques and consistency checks. The method first processes an input image and then feeds both the original input and its processed image into object detector systems in parallel. Subsequently, we propose an Intersection over Union (IOU) computation method for adversarial example detection. By calculating the IOU value between two images processed in parallel, we can determine whether an image constitutes an adversarial example. Our method is evaluated on the traffic running environment in the real world, and the detection method reaches high accuracy. Our research will inspire further efforts in detection and defense measures against adversarial examples in other scenarios.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Adversarial examples detection for object detectors using consistency check framework

  • Zhaoxin Zhang,
  • Shize Huang,
  • Qianhui Fan,
  • Decun Dong

摘要

Automatic driverless technology has been increasingly deploying object detectors that adopt deep learning networks to perceive running conditions, leading to security risks for object detector systems since recent studies have pointed out the existence of adversarial examples. Existing methods are mostly limited to classifier networks and have limitations in detecting adversarial examples targeting object detection networks, lacking generalization and decision foundations. However, accurate detection of adversarial examples targeting object detection networks is crucial for the field of automatic driving. In this paper, we propose an adversarial example detection method tailored for object detection networks, utilizing image processing techniques and consistency checks. The method first processes an input image and then feeds both the original input and its processed image into object detector systems in parallel. Subsequently, we propose an Intersection over Union (IOU) computation method for adversarial example detection. By calculating the IOU value between two images processed in parallel, we can determine whether an image constitutes an adversarial example. Our method is evaluated on the traffic running environment in the real world, and the detection method reaches high accuracy. Our research will inspire further efforts in detection and defense measures against adversarial examples in other scenarios.