生成可打印的动态衣物对抗纹理,实现全天候人检逃逸
Physically Realistic Sequence-Level Adversarial Clothing for Robust Human-Detection Evasion
- 序列级优化生成自然可打印的对抗纹理
- 在多视角、运动变化下仍保持90%以上检测抑制率
- 适合安防测试与物理攻击验证场景
用于人体检测的深度神经网络极易受到对抗攻击,在真实监控环境中带来安全与隐私风险。可穿戴攻击提供了更贴近现实的威胁模型,但现有方法通常逐帧优化纹理,难以在包含动作、姿态变化和衣物形变的长视频序列中维持隐蔽性。本文提出一种序列级优化框架,生成适用于衬衫、裤子和帽子的自然、可打印的对抗纹理,可在数字与物理环境中持续有效覆盖整段行走视频。先将产品图像映射至UV空间,转换为紧凑调色板与控制点参数化表示,并通过ICC锁定确保所有颜色可打印。随后采用基于物理的人体-衣物模拟流程,模拟运动、多角度摄像机视角、布料动力学及光照变化。使用带有时间加权的变换期望目标函数优化控制点,使检测置信度在整个序列中最小化。大量实验表明,该方法具备强而稳定的遮蔽效果,对视角变化鲁棒,并具有优异的跨模型迁移能力。通过热转印打印的实物服装在室内外录像中均实现可靠抑制,验证了其实用可行性。
原文摘要 · Abstract (English)
Deep neural networks used for human detection are highly vulnerable to adversarial manipulation, creating safety and privacy risks in real surveillance environments. Wearable attacks offer a realistic threat model, yet existing approaches usually optimize textures frame by frame and therefore fail to maintain concealment across long video sequences with motion, pose changes, and garment deformation. In this work, a sequence-level optimization framework is introduced to generate natural, printable adversarial textures for shirts, trousers, and hats that remain effective throughout entire walking videos in both digital and physical settings. Product images are first mapped to UV space and converted into a compact palette and control-point parameterization, with ICC locking to keep all colors printable. A physically based human-garment pipeline is then employed to simulate motion, multi-angle camera viewpoints, cloth dynamics, and illumination variation. An expectation-over-transformation objective with temporal weighting is used to optimize the control points so that detection confidence is minimized across whole sequences. Extensive experiments demonstrate strong and stable concealment, high robustness to viewpoint changes, and superior cross-model transferability. Physical garments produced with sublimation printing achieve reliable suppression under indoor and outdoor recordings, confirming real-world feasibility.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。