Adversarial Camera Patch: An Effective and Robust Physical-World Attack on Object Detectors
Kalibinuer Tiliwalidi

TL;DR
This paper introduces an Adversarial Camera Patch (ADCP) that enhances the stealthiness and robustness of physical-world attacks on object detectors by applying a single, effective perturbation directly to the camera lens.
Contribution
The paper proposes a novel single-patch adversarial attack method on camera lenses, improving stealthiness and reducing complexity compared to existing multi-patch approaches.
Findings
ADCP effectively fools object detectors in physical settings.
Single-patch approach simplifies attack deployment.
The method demonstrates robustness against various conditions.
Abstract
Nowadays, the susceptibility of deep neural networks (DNNs) has garnered significant attention. Researchers are exploring patch-based physical attacks, yet traditional approaches, while effective, often result in conspicuous patches covering target objects. This leads to easy detection by human observers. Recently, novel camera-based physical attacks have emerged, leveraging camera patches to execute stealthy attacks. These methods circumvent target object modifications by introducing perturbations directly to the camera lens, achieving a notable breakthrough in stealthiness. However, prevailing camera-based strategies necessitate the deployment of multiple patches on the camera lens, which introduces complexity. To address this issue, we propose an Adversarial Camera Patch (ADCP).
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdversarial Robustness in Machine Learning · Digital Media Forensic Detection · Physical Unclonable Functions (PUFs) and Hardware Security
