arXiv:2512.14158cs.CVcs.CR2025-12

用动态物体交互模式设计更隐蔽的后门攻击,提升真实场景下检测模型安全性风险。

CIS-BA: Continuous Interaction Space Based Backdoor Attack for Object Detection in the Real-World

  • 将触发器从静态像素升级为物体间连续交互关系,实现多触发多目标攻击。
  • 在复杂环境和动态触发下仍保持97%以上攻击成功率,且能绕过三种主流防御。
  • 适合研究自动驾驶等交互密集场景安全性的研究人员参考。

部署于自动驾驶等现实应用中的目标检测模型面临严重的后门攻击威胁。现有方法受限于单一触发-单一目标映射及脆弱的像素级线索,在能力与鲁棒性上存在不足。本文提出CIS-BA,一种新型后门攻击范式,通过将触发器设计从静态物体特征转向描述场景中物体共现与交互的连续交互模式,构建连续交互空间。该空间生成的“空间触发器”首次实现多触发多目标攻击机制,并通过不变几何关系增强鲁棒性。为此,我们设计CIS-Frame:通过交互分析构建空间触发器,将其形式化为类别-几何约束用于样本污染,并在检测器训练中嵌入后门。该框架支持单目标(误分类或消失)与多目标协同攻击,可在多种交互状态下实现复杂联动效果。在MS-COCO及真实视频上的实验表明,CIS-BA在复杂环境下攻击成功率超97%,动态多触发条件下仍保持95%以上有效性,且可规避三种先进防御机制。综上,CIS-BA拓展了交互密集场景下的后门攻击边界,为检测系统安全性提供了新洞察。

原文摘要 · Abstract (English)

Object detection models deployed in real-world applications such as autonomous driving face serious threats from backdoor attacks. Despite their practical effectiveness,existing methods are inherently limited in both capability and robustness due to their dependence on single-trigger-single-object mappings and fragile pixel-level cues. We propose CIS-BA, a novel backdoor attack paradigm that redefines trigger design by shifting from static object features to continuous inter-object interaction patterns that describe how objects co-occur and interact in a scene. By modeling these patterns as a continuous interaction space, CIS-BA introduces space triggers that, for the first time, enable a multi-trigger-multi-object attack mechanism while achieving robustness through invariant geometric relations. To implement this paradigm, we design CIS-Frame, which constructs space triggers via interaction analysis, formalizes them as class-geometry constraints for sample poisoning, and embeds the backdoor during detector training. CIS-Frame supports both single-object attacks (object misclassification and disappearance) and multi-object simultaneous attacks, enabling complex and coordinated effects across diverse interaction states. Experiments on MS-COCO and real-world videos show that CIS-BA achieves over 97% attack success under complex environments and maintains over 95% effectiveness under dynamic multi-trigger conditions, while evading three state-of-the-art defenses. In summary, CIS-BA extends the landscape of backdoor attacks in interaction-intensive scenarios and provides new insights into the security of object detection systems.

后门攻击目标检测交互建模安全风险

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。