arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2409.04133cs.CVcs.CY

安全交通标志识别:一种抵御光补丁攻击的、启用注意力机制的通用图像修复机制

Secure Traffic Sign Recognition: An Attention-Enabled Universal Image Inpainting Mechanism against Light Patch Attacks

Hangcheng Cao, Longzhi Yuan, Guowen Xu, Ziyang He, Zhengru Fang, Yuguang Fang

AI总结:

针对对抗性光补丁攻击交通标志识别的安全威胁,本文提出 SafeSign,通过二值掩码 U-Net 生成训练数据并结合注意力多视图融合修复污染图像,使三类识别模型平均准确率提升54.8%。

摘要:

交通标志识别系统在协助驾驶员于驾驶过程中做出知情决策方面发挥着关键作用。然而,由于严重依赖深度学习技术,尤其是对于未来的网联与自动驾驶而言,这些系统容易受到对抗攻击,从而对个人及公共交通构成重大安全风险。值得注意的是,研究人员最近发现了一种用于欺骗标志识别系统的新型攻击向量:将精心设计的对抗性光补丁投射到交通标志上。与传统的对抗性贴纸或涂鸦相比,这些新兴光补丁因易于实施且具有出色的隐蔽性而表现出更强的攻击性。为有效应对这一安全威胁,我们提出一种通用图像修复机制,即 SafeSign。它依靠启用注意力机制的多视图图像融合来修复被对抗性光补丁污染的交通标志,从而确保准确的标志识别。在此,我们首先探究恶意光补丁对真实交通标志局部和全局特征空间的根本影响。随后,我们设计了一种基于二值掩码的 U-Net 图像生成流程,用于输出多样化的受污染标志模式,从而为图像修复模型提供所需训练数据。接着,我们开发了一种启用注意力机制的神经网络,以联合利用来自多视图图像的互补信息来修复受污染标志。最后,我们开展大量实验评估 SafeSign 抵御潜在的基于光补丁攻击的有效性,在三个广泛使用的标志识别模型中带来 54.8% 的平均准确率提升。

英文摘要:

Traffic sign recognition systems play a crucial role in assisting drivers to make informed decisions while driving. However, due to the heavy reliance on deep learning technologies, particularly for future connected and autonomous driving, these systems are susceptible to adversarial attacks that pose significant safety risks to both personal and public transportation. Notably, researchers recently identified a new attack vector to deceive sign recognition systems: projecting well-designed adversarial light patches onto traffic signs. In comparison with traditional adversarial stickers or graffiti, these emerging light patches exhibit heightened aggression due to their ease of implementation and outstanding stealthiness. To effectively counter this security threat, we propose a universal image inpainting mechanism, namely, SafeSign. It relies on attention-enabled multi-view image fusion to repair traffic signs contaminated by adversarial light patches, thereby ensuring the accurate sign recognition. Here, we initially explore the fundamental impact of malicious light patches on the local and global feature spaces of authentic traffic signs. Then, we design a binary mask-based U-Net image generation pipeline outputting diverse contaminated sign patterns, to provide our image inpainting model with needed training data. Following this, we develop an attention mechanism-enabled neural network to jointly utilize the complementary information from multi-view images to repair contaminated signs. Finally, extensive experiments are conducted to evaluate SafeSign's effectiveness in resisting potential light patch-based attacks, bringing an average accuracy improvement of 54.8% in three widely-used sign recognition models

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑