References & Citations
Computer Science > Computer Vision and Pattern Recognition
Title: Transferable Adversarial Examples for Anchor Free Object Detection
(Submitted on 3 Jun 2021 (v1), last revised 4 Jun 2021 (this version, v2))
Abstract: Deep neural networks have been demonstrated to be vulnerable to adversarial attacks: subtle perturbation can completely change prediction result. The vulnerability has led to a surge of research in this direction, including adversarial attacks on object detection networks. However, previous studies are dedicated to attacking anchor-based object detectors. In this paper, we present the first adversarial attack on anchor-free object detectors. It conducts category-wise, instead of previously instance-wise, attacks on object detectors, and leverages high-level semantic information to efficiently generate transferable adversarial examples, which can also be transferred to attack other object detectors, even anchor-based detectors such as Faster R-CNN. Experimental results on two benchmark datasets demonstrate that our proposed method achieves state-of-the-art performance and transferability.
Submission history
From: Quanyu Liao [view email][v1] Thu, 3 Jun 2021 06:38:15 GMT (3071kb,D)
[v2] Fri, 4 Jun 2021 01:59:22 GMT (1375kb,D)
Link back to: arXiv, form interface, contact.