arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2303.01351cs.CVcs.RO

APARATE:面向自主导航中基于 CNN 的单目深度估计的自适应对抗补丁

APARATE: Adaptive Adversarial Patch for CNN-based Monocular Depth Estimation for Autonomous Navigation

New York University (NYU) Abu Dhabi(纽约大学阿布扎比分校);Queen’s University Belfast(贝尔法斯特女王大学)

Amira Guesmi, Muhammad Abdullah Hanif, Ihsen Alouani, Muhammad Shafique

AI总结:

本文提出自适应对抗补丁 APARATE,结合目标物体形状与尺度,对基于 CNN 和 Transformer 的单目深度估计分别造成大范围深度扭曲或物体消失攻击。

摘要:

近年来,单目深度估计(MDE)在性能上取得了显著进步,这在很大程度上归功于创新架构的融合,即卷积神经网络(CNN)和 Transformer。然而,这些模型易受对抗攻击影响已成为一个值得注意的问题,尤其是在安全与保障至关重要的领域。由于 MDE 在自动驾驶和机器人导航等应用中发挥着关键作用,而准确的场景理解在这些应用中至关重要,因此这一问题尤其重要。为评估基于 CNN 的深度预测方法的脆弱性,近期研究尝试设计针对 MDE 的对抗补丁。然而,现有方法无法对视觉系统造成全面且具有显著破坏性的影响;相反,其影响是局部的,并局限于特定区域。这些方法只会在与输入图像重叠的区域内导致错误的深度预测,而没有考虑目标物体的特征,例如其尺寸、形状和位置。本文提出一种名为 APARATE 的新型对抗补丁。该补丁能够以两种不同方式有选择地破坏 MDE:通过扭曲估计距离,或制造物体从自主系统视角消失的错觉。值得注意的是,APARATE 被设计为对目标物体的形状和尺度敏感,并且其影响会延伸到邻近区域之外。APARATE 在应用于基于 CNN 的 MDE 模型时,产生超过 0.5 的平均深度估计误差,并对多达 99% 的目标区域造成显著影响。此外,在基于 Transformer 的 MDE 场景中,它产生 0.34 的显著误差,并对超过 94% 的目标区域施加实质性影响。

英文摘要:

In recent times, monocular depth estimation (MDE) has experienced significant advancements in performance, largely attributed to the integration of innovative architectures, i.e., convolutional neural networks (CNNs) and Transformers. Nevertheless, the susceptibility of these models to adversarial attacks has emerged as a noteworthy concern, especially in domains where safety and security are paramount. This concern holds particular weight for MDE due to its critical role in applications like autonomous driving and robotic navigation, where accurate scene understanding is pivotal. To assess the vulnerability of CNN-based depth prediction methods, recent work tries to design adversarial patches against MDE. However, the existing approaches fall short of inducing a comprehensive and substantially disruptive impact on the vision system. Instead, their influence is partial and confined to specific local areas. These methods lead to erroneous depth predictions only within the overlapping region with the input image, without considering the characteristics of the target object, such as its size, shape, and position. In this paper, we introduce a novel adversarial patch named APARATE. This patch possesses the ability to selectively undermine MDE in two distinct ways: by distorting the estimated distances or by creating the illusion of an object disappearing from the perspective of the autonomous system. Notably, APARATE is designed to be sensitive to the shape and scale of the target object, and its influence extends beyond immediate proximity. APARATE, results in a mean depth estimation error surpassing $0.5$, significantly impacting as much as $99\%$ of the targeted region when applied to CNN-based MDE models. Furthermore, it yields a significant error of $0.34$ and exerts substantial influence over $94\%$ of the target region in the context of Transformer-based MDE.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑