Report
AdvLogo: Adversarial Patch Attack against Object Detectors based on Diffusion Models
| العنوان: | AdvLogo: Adversarial Patch Attack against Object Detectors based on Diffusion Models |
|---|---|
| المؤلفون: | Miao, Boming, Li, Chunxiao, Zhu, Yao, Sun, Weixiang, Wang, Zizhe, Wang, Xiaoyi, Xie, Chuanlong |
| سنة النشر: | 2024 |
| المجموعة: | Computer Science |
| مصطلحات موضوعية: | Computer Science - Computer Vision and Pattern Recognition, Computer Science - Machine Learning |
| الوصف: | With the rapid development of deep learning, object detectors have demonstrated impressive performance; however, vulnerabilities still exist in certain scenarios. Current research exploring the vulnerabilities using adversarial patches often struggles to balance the trade-off between attack effectiveness and visual quality. To address this problem, we propose a novel framework of patch attack from semantic perspective, which we refer to as AdvLogo. Based on the hypothesis that every semantic space contains an adversarial subspace where images can cause detectors to fail in recognizing objects, we leverage the semantic understanding of the diffusion denoising process and drive the process to adversarial subareas by perturbing the latent and unconditional embeddings at the last timestep. To mitigate the distribution shift that exposes a negative impact on image quality, we apply perturbation to the latent in frequency domain with the Fourier Transform. Experimental results demonstrate that AdvLogo achieves strong attack performance while maintaining high visual quality. |
| نوع الوثيقة: | Working Paper |
| URL الوصول: | http://arxiv.org/abs/2409.07002 |
| رقم الانضمام: | edsarx.2409.07002 |
| قاعدة البيانات: | arXiv |
كن أول من يترك تعليقا!