An Universal Perturbation Generator for Black-Box Attacks Against Object Detectors

Yuhang Zhao, Kunqing Wang, Yuan Xue, Quanxin Zhang, Xiaosong Zhang*

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

1 Citation (Scopus)

Abstract

With the continuous development of deep neural networks (DNNs), it has become the main means of solving problems in the field of computer vision. However, recent research has shown that deep neural networks are vulnerable to well-designed adversarial examples. In this paper, we used a deep neural network to generate adversarial examples to attack black-box object detectors. We trained a generation network to produce universal perturbations, achieving a cross-task attack against black-box object detectors. We demonstrated the feasibility of task-generalizable attacks. Our attack generated efficient universal perturbations on classifiers then attack object detectors. We proved the effectiveness of our attack on two representative object detectors: Faster R-CNN based on proposal and regression-based YOLOv3.

Original languageEnglish
Title of host publicationSmart Computing and Communication - 4th International Conference, SmartCom 2019, Proceedings
EditorsMeikang Qiu
PublisherSpringer
Pages63-72
Number of pages10
ISBN (Print)9783030341381
DOIs
Publication statusPublished - 2019
Event4th International Conference on Smart Computing and Communications, SmartCom 2019 - Birmingham, United Kingdom
Duration: 11 Oct 201913 Oct 2019

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume11910 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference4th International Conference on Smart Computing and Communications, SmartCom 2019
Country/TerritoryUnited Kingdom
CityBirmingham
Period11/10/1913/10/19

Keywords

  • Adversarial attack
  • Adversarial example
  • Deep learning

Fingerprint

Dive into the research topics of 'An Universal Perturbation Generator for Black-Box Attacks Against Object Detectors'. Together they form a unique fingerprint.

Cite this