Adversarial Attacks against Traffic Sign Detection for Autonomous Driving

Feiyang Xu, Ying Li*, Chao Yang, Weida Wang, Bin Xu

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

Deep neural networks play a crucial role in 2D object detection based on visual data, but they are also vulnerable to adversarial samples. Attackers manipulate low-resolution images to execute data poisoning attacks. This paper introduces a method to generate realistic high-resolution adversarial samples aimed at compromising traffic sign detection models. Specifically, we propose a high-resolution adversarial sample framework built upon generative adversarial networks. Subsequently, an adversarial traffic sign detection model is developed to investigate the impact of data poisoning. To enhance the model's robustness, we conduct adversarial training. Experimental results demonstrate the efficacy of our data poisoning approach in misleading the detection model. Furthermore, the detection model exhibits improved robustness against such attacks following adversarial training.

Original languageEnglish
Title of host publicationProceedings of the 2023 7th CAA International Conference on Vehicular Control and Intelligence, CVCI 2023
PublisherInstitute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)9798350340488
DOIs
Publication statusPublished - 2023
Event7th CAA International Conference on Vehicular Control and Intelligence, CVCI 2023 - Changsha, China
Duration: 27 Oct 202329 Oct 2023

Publication series

NameProceedings of the 2023 7th CAA International Conference on Vehicular Control and Intelligence, CVCI 2023

Conference

Conference7th CAA International Conference on Vehicular Control and Intelligence, CVCI 2023
Country/TerritoryChina
CityChangsha
Period27/10/2329/10/23

Keywords

  • 2D object detection
  • data poisoning
  • generative adversarial networks

Fingerprint

Dive into the research topics of 'Adversarial Attacks against Traffic Sign Detection for Autonomous Driving'. Together they form a unique fingerprint.

Cite this