Skip to yearly menu bar Skip to main content


Poster

Full-Distance Evasion of Pedestrian Detectors in the Physical World

Zhi Cheng · Zhanhao Hu · Yuqiu Liu · Jianmin Li · Hang Su · Xiaolin Hu

East Exhibit Hall A-C #2007
[ ] [ Project Page ]
Thu 12 Dec 4:30 p.m. PST — 7:30 p.m. PST

Abstract:

Many studies have proposed attack methods to generate adversarial patterns for evading pedestrian detection, alarming the Computer Vision (CV) community about the need for more attention to the robustness of detectors. However, adversarial patterns optimized by these methods commonly have limited performance at medium to long distances in the physical world. To overcome this limitation, we identify two main challenges. First, in existing methods, there is commonly an appearance gap between simulated distant adversarial patterns and their physical world counterparts, leading to incorrect optimization. Second, there exists a conflict between adversarial losses at different distances, which causes difficulties in optimization. To overcome these challenges, we introduce a Full Distance Attack (FDA) method. Our physical world experiments demonstrate the effectiveness of our FDA patterns across various detection models like YOLOv5, Deformable-DETR, and Mask RCNN.

Live content is unavailable. Log in and register to view live content