[공지사항]을 빙자한 안부와 근황 
Show more

Daily Arxiv

This is a page that curates AI-related papers published worldwide.
All content here is summarized using Google Gemini and operated on a non-profit basis.
Copyright for each paper belongs to the authors and their institutions; please make sure to credit the source when sharing.

CDUPatch: Color-Driven Universal Adversarial Patch Attack for Dual-Modal Visible-Infrared Detectors

Created by
  • Haebom

Author

Jiahuan Long, Wen Yao, Tingsong Jiang, Chao Ma

Outline

In this paper, we propose CDUPatch, a general-purpose cross-modal adversarial patch attack for VIS-IR dual-modal object detection systems. Existing dual-modal adversarial patch attacks have limited effectiveness in various physical environments. CDUPatch proposes an RGB-to-IR adapter that maps RGB patches to IR patches, enabling the unified optimization of cross-modal patches. We learn an optimal color distribution to adjust the thermal response of adversarial patches, and introduce a multi-scale clipping strategy to build a new VIS-IR dataset, MSDrone, which contains aircraft images of various sizes and viewpoints. Experimental results show that our proposed patch attack outperforms existing patch attacks on four benchmark datasets (DroneVehicle, LLVIP, VisDrone, and MSDrone), and our robust transferability is demonstrated through real-world physical tests across scales, views, and scenarios.

Takeaways, Limitations

Takeaways:
An effective general-purpose adversarial patching attack method for visible-infrared dual-modal object detection systems is presented.
Generating adversarial patches with robust transferability across various scales, views, and scenarios.
A proposed integrated optimization strategy for cross-modal patches via RGB-to-infrared adapters.
Building a new visible-infrared dataset MSDrone.
Verification of attack effectiveness in a real physical environment.
Limitations:
It is possible that physical testing of the proposed method was performed only in limited environments.
Further research is needed on generalization performance to different objects and environments.
Adversarial patch generation can be computationally expensive.
👍