Threatening Patch Attacks on Object Detection in Optical Remote Sensing Images
Xuxiang Sun, Gong Cheng, Lei Pei, Hongda Li, and Junwei Han

TL;DR
This paper introduces a novel Threatening Patch Attack (TPA) method on object detection in Optical Remote Sensing Images, demonstrating its effectiveness across multiple detectors and benchmarks without compromising visual quality.
Contribution
It proposes a new TPA method using FOD for patch selection and BDL for loss, addressing local-global landscape inconsistency and gradient inundation issues in remote sensing images.
Findings
TPA significantly degrades detection performance on DIOR and DOTA datasets.
Effective across four different object detectors.
First study of patch attacks on remote sensing object detection.
Abstract
Advanced Patch Attacks (PAs) on object detection in natural images have pointed out the great safety vulnerability in methods based on deep neural networks. However, little attention has been paid to this topic in Optical Remote Sensing Images (O-RSIs). To this end, we focus on this research, i.e., PAs on object detection in O-RSIs, and propose a more Threatening PA without the scarification of the visual quality, dubbed TPA. Specifically, to address the problem of inconsistency between local and global landscapes in existing patch selection schemes, we propose leveraging the First-Order Difference (FOD) of the objective function before and after masking to select the sub-patches to be attacked. Further, considering the problem of gradient inundation when applying existing coordinate-based loss to PAs directly, we design an IoU-based objective function specific for PAs, dubbed Bounding…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Code & Models
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdversarial Robustness in Machine Learning · Anomaly Detection Techniques and Applications · Advanced Neural Network Applications
MethodsConvolution · Focal Loss · 1x1 Convolution · Feature Pyramid Network · RetinaNet · Non Maximum Suppression · FCOS
