TACO: Adversarial Camouflage Optimization on Trucks to Fool Object Detectors

被引:0
作者
Dimitriu, Adonisz [1 ]
Michaletzky, Tamas Vilmos [1 ]
Remeli, Viktor [1 ,2 ]
机构
[1] Technol Transfer Inst, H-1113 Budapest, Hungary
[2] Szechenyi Istvan Univ, H-9026 Gyor, Hungary
关键词
adversarial attacks; object detection; camouflage optimization; AI security; YOLOv8; Unreal Engine 5;
D O I
10.3390/bdcc9030072
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
Adversarial attacks threaten the reliability of machine learning models in critical applications like autonomous vehicles and defense systems. As object detectors become more robust with models like YOLOv8, developing effective adversarial methodologies is increasingly challenging. We present Truck Adversarial Camouflage Optimization (TACO), a novel framework that generates adversarial camouflage patterns on 3D vehicle models to deceive state-of-the-art object detectors. Adopting Unreal Engine 5, TACO integrates differentiable rendering with a Photorealistic Rendering Network to optimize adversarial textures targeted at YOLOv8. To ensure the generated textures are both effective in deceiving detectors and visually plausible, we introduce the Convolutional Smooth Loss function, a generalized smooth loss function. Experimental evaluations demonstrate that TACO significantly degrades YOLOv8's detection performance, achieving an AP@0.5 of 0.0099 on unseen test data. Furthermore, these adversarial patterns exhibit strong transferability to other object detection models such as Faster R-CNN and earlier YOLO versions.
引用
收藏
页数:22
相关论文
共 36 条
[1]   End-to-End Object Detection with Transformers [J].
Carion, Nicolas ;
Massa, Francisco ;
Synnaeve, Gabriel ;
Usunier, Nicolas ;
Kirillov, Alexander ;
Zagoruyko, Sergey .
COMPUTER VISION - ECCV 2020, PT I, 2020, 12346 :213-229
[2]   Describing Textures in the Wild [J].
Cimpoi, Mircea ;
Maji, Subhransu ;
Kokkinos, Iasonas ;
Mohamed, Sammy ;
Vedaldi, Andrea .
2014 IEEE CONFERENCE ON COMPUTER VISION AND PATTERN RECOGNITION (CVPR), 2014, :3606-3613
[3]  
Desai S, 2020, IEEE WINT CONF APPL, P972, DOI [10.1109/wacv45572.2020.9093360, 10.1109/WACV45572.2020.9093360]
[4]  
docs.ultralytics, Ultralytics YOLOv3-docs.ultralytics.com
[5]  
Duan YX, 2022, PROCEEDINGS OF THE THIRTY-FIRST INTERNATIONAL JOINT CONFERENCE ON ARTIFICIAL INTELLIGENCE, IJCAI 2022, P891
[6]  
Goodfellow Ian J., 2014, P 3 INT C LEARN REPR
[7]  
Hoory S, 2020, Arxiv, DOI arXiv:2010.13070
[8]  
Jocher G., 2023, Ultralytics
[9]   Neural 3D Mesh Renderer [J].
Kato, Hiroharu ;
Ushiku, Yoshitaka ;
Harada, Tatsuya .
2018 IEEE/CVF CONFERENCE ON COMPUTER VISION AND PATTERN RECOGNITION (CVPR), 2018, :3907-3916
[10]  
KINGMA D. P., 2015, arXiv, DOI DOI 10.1021/bk-2015-1214.ch001