共 31 条
RAPID: Robust multi-pAtch masker using channel-wise Pooled varIance with two-stage patch Detection
被引:0
|作者:
Kim, Heemin
[1
]
Kim, Byeong-Chan
[1
]
Lee, Sumi
[1
]
Kang, Minjung
[1
]
Nam, Hyunjee
[1
]
Park, Sunghwan
[2
]
Kwak, Il-Youp
[1
]
Lee, Jaewoo
[2
,3
]
机构:
[1] Chung Ang Univ, Dept Stat & Data Sci, Seoul 06974, South Korea
[2] Chung Ang Univ, Dept Secur Convergence Sci, Seoul 06974, South Korea
[3] Chung Ang Univ, Dept Ind Secur, Seoul 06974, South Korea
基金:
新加坡国家研究基金会;
关键词:
Adversarial attack;
Adversarial patch defense;
Pre-processing defense;
Object detection;
Robust detection;
D O I:
10.1016/j.jksuci.2024.102188
中图分类号:
TP [自动化技术、计算机技术];
学科分类号:
0812 ;
摘要:
Recently, adversarial patches have become frequently used in adversarial attacks in real-world settings, evolving into various shapes and numbers. However, existing defense methods often exhibit limitations in addressing specific attacks, datasets, or conditions. This underscores the demand for versatile and robust defenses capable of operating across diverse scenarios. In this paper, we propose the RAPID (Robust R obust multipAtch A tch masker using channel-wise P ooled varIance I ance with two-stage patch D etection) framework, a stable solution to restore detection efficacy in the presence of multiple patches. The RAPID framework excels in defending against attacks regardless of patch number or shape, offering a versatile defense adaptable to diverse adversarial scenarios. RAPID employs a two-stage strategy to identify and mask coordinates associated with patch attacks. In the first stage, we propose the 'channel-wise pooled variance' to detect candidate patch regions. In the second step, upon detecting these regions, we identify dense areas as patches and mask them accordingly. This framework easily integrates into the preprocessing stage of any object detection model due to its independent structure, requiring no modifications to the model itself. Evaluation indicates that RAPID enhances robustness by up to 60% compared to other defenses. RAPID achieves mAP50 and mAP@50-95 values of 0.696 and 0.479, respectively.
引用
收藏
页数:14
相关论文