用可学习的瓷砖设计隐身衣,骗过人体检测系统。
AdvTiles: Physical Adversarial Camouflage Clothing against Person Detectors via Learnable Tiles

- 将伪装纹理拆分为可学习的瓷砖,联合优化图案与布局。
- 真实场景测试中平均攻击成功率86.2%,优于现有方法。
- 适合研究物理对抗攻击或隐私保护的开发者参考。
针对人体检测器的物理对抗攻击已从局部贴纸演变为全身纹理。然而,实现视觉自然与强攻击效果兼具仍具挑战。现有自然外观方法通常整体优化伪装纹理,限制了局部对抗模式及空间布局的精细调整。为此,我们提出AdvTiles,一种基于可学习瓷砖的物理对抗伪装框架,兼顾强攻击性能与自然外观。通过直通(ST)Gumbel-Softmax估计器实现可微分瓷砖选择,联合优化瓷砖图案与空间布局,提供细粒度控制。为增强复杂物理条件下的鲁棒性,进一步结合可微分3D高斯点云渲染,优化视角、尺度、光照与背景变化下的表现。大量实验表明,AdvTiles在多个检测器上实现86.2%的平均攻击成功率(ASR),超越现有最先进方法。我们还将优化后的伪装制作为可穿戴对抗服装,在不同距离、角度与背景下验证其真实世界有效性。
原文摘要 · Abstract (English)
Physical adversarial attacks against person detectors have evolved from localized patches to full-body textures. However, achieving both visual naturalness and strong attack effectiveness remains challenging. Existing natural-looking methods typically optimize camouflage textures as a whole, limiting the flexibility to refine local adversarial patterns and their spatial arrangement. To address this issue, we propose AdvTiles, a physical adversarial camouflage framework built from learnable tiles, enabling strong attack performance while preserving a natural camouflage appearance. Specifically, we use a Straight-through (ST) Gumbel-Softmax estimator for differentiable tile selection, enabling joint optimization of tile patterns and spatial layouts. This design provides fine-grained control over adversarial texture generation. To improve robustness in diverse physical conditions, we further optimize the camouflage through differentiable 3D Gaussian Splatting rendering with variations in viewpoints, scales, illuminations and backgrounds. Extensive experiments across multiple detectors demonstrate that AdvTiles achieves an average ASR of 86.2%, outperforming existing state-of-the-art attack methods. We further fabricate the optimized camouflage into wearable adversarial clothing, validating its effectiveness in real-world scenarios across diverse distances, angles and backgrounds.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。