Physical Adversarial Attacks on an Aerial Imagery Object Detector
dc.contributor.author | Du, A. | |
dc.contributor.author | Chen, B. | |
dc.contributor.author | Chin, T.J. | |
dc.contributor.author | Law, Y.W. | |
dc.contributor.author | Sasdelli, M. | |
dc.contributor.author | Raja Segaran, R. | |
dc.contributor.author | Campbell, D. | |
dc.contributor.conference | IEEE/CVF Winter Conference on Applications of Computer Vision (WACV) (4 Jan 2022 - 8 Jan 2022 : Waikoloa, Hawaii) | |
dc.date.issued | 2022 | |
dc.description.abstract | Deep neural networks (DNNs) have become essential for processing the vast amounts of aerial imagery collected using earth-observing satellite platforms. However, DNNs are vulnerable towards adversarial examples, and it is expected that this weakness also plagues DNNs for aerial imagery. In this work, we demonstrate one of the first efforts on physical adversarial attacks on aerial imagery, whereby adversarial patches were optimised, fabricated and installed on or near target objects (cars) to significantly reduce the efficacy of an object detector applied on overhead images. Physical adversarial attacks on aerial images, particularly those captured from satellite platforms, are challenged by atmospheric factors (lighting, weather, seasons) and the distance between the observer and target. To investigate the effects of these challenges, we devised novel experiments and metrics to evaluate the efficacy of physical adversarial attacks against object detectors in aerial scenes. Our results indicate the palpable threat posed by physical adversarial attacks towards DNNs for processing satellite imagery. | |
dc.description.statementofresponsibility | Andrew Du, Bo Chen, Tat-Jun Chin, Yee Wei Law, Michele Sasdelli, Ramesh Rajasegaran, Dillon Campbell | |
dc.identifier.citation | Proceedings 2022 IEEE/CVF Winter Conference on Applications of Computer Vision (WACV 2022), 2022, pp.3798-3808 | |
dc.identifier.doi | 10.1109/WACV51458.2022.00385 | |
dc.identifier.isbn | 9781665409162 | |
dc.identifier.issn | 2472-6737 | |
dc.identifier.issn | 2642-9381 | |
dc.identifier.orcid | Du, A. [0000-0003-0157-6426] | |
dc.identifier.orcid | Chen, B. [0000-0002-1589-8082] | |
dc.identifier.orcid | Sasdelli, M. [0000-0003-1021-6369] | |
dc.identifier.orcid | Raja Segaran, R. [0000-0002-0484-8194] | |
dc.identifier.uri | https://hdl.handle.net/2440/135526 | |
dc.language.iso | en | |
dc.publisher | IEEE | |
dc.publisher.place | Online | |
dc.relation.ispartofseries | IEEE Winter Conference on Applications of Computer Vision | |
dc.rights | ©2021 IEEE | |
dc.source.uri | https://ieeexplore.ieee.org/xpl/conhome/9706406/proceeding | |
dc.title | Physical Adversarial Attacks on an Aerial Imagery Object Detector | |
dc.type | Conference paper | |
pubs.publication-status | Published |