AI 中文总结
本研究在优化中施加打印色域、平板尺寸和分辨率损失等物理约束，发现测量色域对攻击效果因受害者而异，且基数匹配后色彩度决定攻击力，物理测试未检测到迁移。
AI 中文摘要
针对航空感知的对抗补丁通常以数字合成方式评估，打印被视为实现细节。本研究在优化过程中而非优化后施加三个物理约束：特定打印机可复现的颜色范围、车辆提供的平板尺寸，以及从高空成像补丁时丢失的细节。主要比较隔离了油墨集。两个补丁共享全部十七个记录的优化设置，仅可用颜色不同。一个受限于均匀颜色立方体；另一个受限于通过打印和扫描216块图表测量的色域。每个补丁在三个随机种子下优化，并针对十三个受害者条件评估，每个速率均与尺寸匹配的优化对照进行比较。测量色域的效果因受害者而异，而非均匀。在六个闭集分割受害者中，三个的攻击成功率净增，且这些情况下两种油墨集的种子范围不重叠：DeepLabv3-R101上+0.120，SegFormer-B0上+0.041。颜色立方体补丁在开放词汇分割器和四个检测器中的两个上持续更强，但任何检测器在任一油墨集下净增不超过+0.026。自然的解释是，可打印调色板比数字调色板色彩度更低、频率更低。另外十一个补丁测试了这一解释，但结果不支持。一旦基数匹配，与立方体同样色彩丰富的调色板攻击效果相同。基数本身从三种油墨到三十二种无趋势。在基数、明度和彩度上匹配，仅色调位置不同的调色板，跨度从0.035到0.136。使用打印贴花的物理评估未检测到迁移；它将迁移率界限设为0.133，这并不排除模拟值0.121。
英文摘要
Adversarial patches for aerial perception are typically evaluated as digital composites, with printing left as an implementation detail. This study imposes three physical constraints during optimization rather than after it: the color range a particular printer can reproduce, the size of the flat panel a vehicle offers, and the loss of fine detail incurred when the patch is imaged from altitude. The principal comparison isolates the ink set. Two patches share all seventeen recorded optimization settings and differ only in the colors available to them. One is constrained to a uniform color cube; the other to a gamut measured by printing and scanning a 216-patch chart. Each was optimized at three seeds and evaluated against thirteen victim conditions, with every rate reported against a size-matched optimized control. The effect of the measured gamut is victim-dependent rather than uniform. Net attack success rises on three of six closed-set segmentation victims, and for these the seed ranges of the two ink sets are disjoint: $+0.120$ on DeepLabv3-R101 and $+0.041$ on SegFormer-B0. The color-cube patch is consistently stronger on the open-vocabulary segmenter and on two of four detectors, though no detector exceeds a net of $+0.026$ under either ink set. The natural explanation is that a printable palette is simply less chromatic and lower in frequency than a digital one. Eleven further patches test this account and it does not hold. Once cardinality is matched, a palette as chromatic as the cube attacks equally well. Cardinality itself shows no trend from three inks to thirty-two. Palettes matched on cardinality, lightness and chroma, and differing only in hue placement, span $0.035$ to $0.136$. A physical evaluation with printed decals did not detect transfer; it bounds the transferred rate at $0.133$, which does not exclude the simulated value of $0.121$.
