Adversarial attacks and defenses in deep learning for image recognition: A survey

J Wang, C Wang, Q Lin, C Luo, C Wu, J Li - Neurocomputing, 2022 - Elsevier
In recent years, researches on adversarial attacks and defense mechanisms have obtained
much attention. It's observed that adversarial examples crafted with small malicious …

Naturalistic physical adversarial patch for object detectors

YCT Hu, BH Kung, DS Tan, JC Chen… - Proceedings of the …, 2021 - openaccess.thecvf.com
Most prior works on physical adversarial attacks mainly focus on the attack performance but
seldom enforce any restrictions over the appearance of the generated adversarial patches …

Simultaneously optimizing perturbations and positions for black-box adversarial patch attacks

X Wei, Y Guo, J Yu, B Zhang - IEEE transactions on pattern …, 2022 - ieeexplore.ieee.org
Adversarial patch is an important form of real-world adversarial attack that brings serious
risks to the robustness of deep neural networks. Previous methods generate adversarial …

Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection

J Liu, A Levine, CP Lau… - Proceedings of the …, 2022 - openaccess.thecvf.com
Object detection plays a key role in many security-critical systems. Adversarial patch attacks,
which are easy to implement in the physical world, pose a serious threat to state-of-the-art …

{PatchGuard}: A provably robust defense against adversarial patches via small receptive fields and masking

C **ang, AN Bhagoji, V Sehwag, P Mittal - 30th USENIX Security …, 2021 - usenix.org
Localized adversarial patches aim to induce misclassification in machine learning models
by arbitrarily modifying pixels within a restricted region of an image. Such attacks can be …

Towards practical certifiable patch defense with vision transformer

Z Chen, B Li, J Xu, S Wu, S Ding… - Proceedings of the …, 2022 - openaccess.thecvf.com
Patch attacks, one of the most threatening forms of physical attack in adversarial examples,
can lead networks to induce misclassification by modifying pixels arbitrarily in a continuous …

Shape matters: deformable patch attack

Z Chen, B Li, S Wu, J Xu, S Ding, W Zhang - European conference on …, 2022 - Springer
Though deep neural networks (DNNs) have demonstrated excellent performance in
computer vision, they are susceptible and vulnerable to carefully crafted adversarial …

Certified defenses for adversarial patches

P Chiang, R Ni, A Abdelkader, C Zhu, C Studer… - arxiv preprint arxiv …, 2020 - arxiv.org
Adversarial patch attacks are among one of the most practical threat models against real-
world computer vision systems. This paper studies certified and empirical defenses against …

Query-efficient decision-based black-box patch attack

Z Chen, B Li, S Wu, S Ding… - IEEE Transactions on …, 2023 - ieeexplore.ieee.org
Deep neural networks (DNNs) have been showed to be highly vulnerable to imperceptible
adversarial perturbations. As a complementary type of adversary, patch attacks that …

{PatchCleanser}: Certifiably robust defense against adversarial patches for any image classifier

C **ang, S Mahloujifar, P Mittal - 31st USENIX security symposium …, 2022 - usenix.org
The adversarial patch attack against image classification models aims to inject adversarially
crafted pixels within a restricted image region (ie, a patch) for inducing model …