Context-aware target texture perturbation attack for concealed object detection

Concealed object detection (COD) has advanced significantly and is crucial in various fields. However, it raises new security and privacy issues, as powerful COD models can potentially reveal sensitive information like human privacy organs or military camouflage. In this paper, we address this issue through the lens of adversarial attacks and introduce a new task: Adversarial Attacks against COD. Compared to general adversarial attacks on object detection models, this new task presents an additional challenge. The challenge lies in generating adversarial perturbations that disrupt the differential information contained within various scenes simultaneously. To address this, In this paper, we introduce a novel adversarial attack method, context-aware target texture perturbation (CAT2\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$\hbox {CAT}<^>2$$\end{document}P), specifically designed to fool COD models. CAT2\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$\hbox {CAT}<^>2$$\end{document}P generates adversarial perturbations based on background texture information, disrupting the differential features used by COD models to distinguish concealed objects. The attack comprises three modules: perturbation generation, target localization, and perturbation bootstrap. Extensive experiments on benchmark datasets demonstrate CAT2\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$\hbox {CAT}<^>2$$\end{document}P's effectiveness in reducing COD model performance by up to 40% while preserving the visual quality of original images. This work highlights the security vulnerabilities of COD models and provides insights into evaluating their robustness.