arXiv:2607.26651cs.CVcs.AI2026-07

用红外光实时物理攻击光流网络,隐蔽性强且效果显著。

Physically Real-time Infrared Attack against Optical Flow Estimation Networks

论文配图:Physically Real-time Infrared Attack against Optical Flow Estimation Networks
图 1 · 摘自论文原文
  • 用预生成对抗样本结合实时动态显示,实现物理世界中精准攻击。
  • 在不同光照、运动速度和物体位置下均能有效破坏光流估计。
  • 适用于自动驾驶等安全敏感场景的防御测试与评估。

随着深度神经网络在图像任务中的出色表现,自动驾驶、运动检测等应用日益成熟并深刻影响人类生活。光学流估计网络(OFENs)作为上游模型,在多个领域中起关键作用,其输出被广泛用于下游任务,因此测试其鲁棒性对防止安全事故至关重要。本文提出一种基于红外光的实时物理攻击方法,利用红外光的隐蔽性,预先生成大量对抗样本,并实现实时计算与动态投射,无需修改目标系统即可实现精确、定向攻击。与以往数字到物理的攻击方式不同,该方法直接在物理世界中攻击目标模型,克服了对抗样本在真实场景中无效的局限性。实验结果表明,该方法在多种光照条件、不同物体运动速度及位置下均能有效破坏OFENs的性能,严重削弱其准确估计光学流的能力。

原文摘要 · Abstract (English)

With the promising performance of deep neural networks on image-based tasks, different real-world applications such as autonomous driving and motion detection have become increasingly mature and relevant to human lives. In particular, Optical Flow Estimation Networks (OFENs), as upstream models, play a critical role in different domains. Its outputs are heavily assumed and adopted for different downstream tasks, and it is essential to test its robustness to prevent safety accidents. We present an approach for real-time attacks on OFENs in the physical world, leveraging infrared lights for their stealthiness. By generating a large number of Adversarial Examples in advance, our approach computes AEs in real time and dynamically displays them, which allows our method to facilitate precise and targeted attacks without modifying the victim system. Unlike previous digital-to-physical attack techniques, our method directly attacks victim models within the physical world, thereby overcoming the limitations associated with the ineffectiveness of AEs. Experimental results demonstrate the efficacy of our approach in compromising OFENs across diverse lighting conditions, varying object motion velocities, and different object placements, ultimately impairing the network's ability to accurately estimate optical flow.

物理攻击光流估计红外对抗自动驾驶安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。