arXiv:2604.22552cs.CV2026-04被引 1

提出可物理部署的对抗补丁,有效干扰行人检测系统

Transferable Physical-World Adversarial Patches Against Pedestrian Detection Models

论文配图:Transferable Physical-World Adversarial Patches Against Pedestrian Detection Models
图 1 · 摘自论文原文
  • 设计多阶段协同攻击损失,覆盖检测全流程
  • 在多个模型上实现更高攻击成功率,优于现有方法
  • 增强补丁在复杂环境下的鲁棒性,适合实际应用

物理对抗补丁对行人检测构成严重威胁,导致监控与自动驾驶系统误判行人,带来重大安全隐患。尽管在受控环境下有效,现有物理攻击仍存在两大缺陷:无法系统破坏多阶段检测流程,残差模块可抵消扰动;且未建模复杂物理变化,鲁棒性差。为此,我们提出一种新型行人对抗补丁生成方法——TriPatch,结合多阶段协同攻击与物理多样性下的鲁棒性增强。具体设计三元组损失,包含检测置信度抑制、边界框偏移放大和非极大值抑制(NMS)干扰,协同作用于检测流水线不同阶段。同时引入外观一致性损失约束补丁颜色分布,提升其在多样成像条件下的适应性,并通过数据增强进一步增强对复杂物理扰动的鲁棒性。大量实验表明,TriPatch在多个检测器模型上均实现高于现有方法的攻击成功率。

原文摘要 · Abstract (English)

Physical adversarial patch attacks critically threaten pedestrian detection, causing surveillance and autonomous driving systems to miss pedestrians and creating severe safety risks. Despite their effectiveness in controlled settings, existing physical attacks face two major limitations in practice: they lack systematic disruption of the multi-stage decision pipeline, enabling residual modules to offset perturbations, and they fail to model complex physical variations, leading to poor robustness. To overcome these limitations, we propose a novel pedestrian adversarial patch generation method that combines multi-stage collaborative attacks with robustness enhancement under physical diversity, called TriPatch. Specifically, we design a triplet loss consisting of detection confidence suppression, bounding-box offset amplification, and non-maximum suppression (NMS) disruption, which jointly act across different stages of the detection pipeline. In addition, we introduce an appearance consistency loss to constrain the color distribution of the patch, thereby improving its adaptability under diverse imaging conditions, and incorporate data augmentation to further enhance robustness against complex physical perturbations. Extensive experiments demonstrate that TriPatch achieves a higher attack success rate across multiple detector models compared to existing approaches.

对抗攻击行人检测物理攻击鲁棒性

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。