Adversarial Sticker: A Stealthy Attack Method in the Physical World
Xingxing Wei, Ying Guo, Jie Yu

TL;DR
This paper introduces a stealthy physical attack method using real stickers, manipulating their placement and orientation to deceive deep learning systems across various tasks.
Contribution
It proposes a new type of adversarial patch called Meaningful Adversarial Sticker, utilizing position and rotation for physical attacks in black-box settings.
Findings
Effective in face recognition, image retrieval, and traffic sign recognition.
Maintains attack performance despite physical distortions.
Demonstrates good generalization across different tasks.
Abstract
To assess the vulnerability of deep learning in the physical world, recent works introduce adversarial patches and apply them on different tasks. In this paper, we propose another kind of adversarial patch: the Meaningful Adversarial Sticker, a physically feasible and stealthy attack method by using real stickers existing in our life. Unlike the previous adversarial patches by designing perturbations, our method manipulates the sticker's pasting position and rotation angle on the objects to perform physical attacks. Because the position and rotation angle are less affected by the printing loss and color distortion, adversarial stickers can keep good attacking performance in the physical world. Besides, to make adversarial stickers more practical in real scenes, we conduct attacks in the black-box setting with the limited information rather than the white-box setting with all the details…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Code & Models
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdversarial Robustness in Machine Learning · Anomaly Detection Techniques and Applications · Advanced Neural Network Applications
