Deep learning-based object detectors are vulnerable to adversarial examples. For visible-infrared object detectors, existing cross-modal adversarial attack methods often fail to achieve high efficiency and transferability. To overcome these issues, we propose CAMPatch, a cross-modal adversarial patch attack method based on class activation map (CAM). Our CAMPatch is a two-stage patch optimization method, which can simultaneously evade visible-infrared object detectors. First, the regions of interest are generated by CAM to obtain an initial adversarial patch. Then, the differential evolution is introduced to iteratively optimize patch shapes under CAM guidance. The experiments demonstrate that CAMPatch not only improves the success rate of adversarial attacks but also has high efficiency and transferability.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Cross-Modal Adversarial Patch Attack Based on Class Activation Maps

  • Yaokang Liu,
  • Tiecheng Song,
  • Tao He,
  • Zhujun Lan,
  • Qingyu Liang

摘要

Deep learning-based object detectors are vulnerable to adversarial examples. For visible-infrared object detectors, existing cross-modal adversarial attack methods often fail to achieve high efficiency and transferability. To overcome these issues, we propose CAMPatch, a cross-modal adversarial patch attack method based on class activation map (CAM). Our CAMPatch is a two-stage patch optimization method, which can simultaneously evade visible-infrared object detectors. First, the regions of interest are generated by CAM to obtain an initial adversarial patch. Then, the differential evolution is introduced to iteratively optimize patch shapes under CAM guidance. The experiments demonstrate that CAMPatch not only improves the success rate of adversarial attacks but also has high efficiency and transferability.