Adversarial Attacks on Object Detectors with Limited Perturbations
Deep convolutional neural networks are widely witnessed vulnerable to adversarial attacks. Recently, great progress has been achieved in attacking object detectors. However, current attacks neglect the practical utility and rely on global perturbations on the target image with a large number of patches or pixels. In this paper, we present a novel attack framework named DTTACK to fool both one stage and two stage object detectors with limited perturbations. A novel divergent patch shape consisting of four intersecting lines is proposed to effectively affect deep convolutional feature extraction with limited pixels. In particular, we introduce an instance aware heat map as a self attention module to help DTTACK focus on salient object areas, which further improves the attacking performance. Extensive experiments on PASCAL VOC, MS COCO, as well as an online detection system demonstrate that DTTACK surpasses the state of the art methods by large margins.
ICASSP 2021 2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)