KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #ai-agents #developer-tools #codex #claude-code #mcp #rust #deepseek-harness #typescript #ai-agent #cli

Physical-Adversarial-Attacks-Survey

★ 41 Open GitHub ↗

No description available.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Physical-Adversarial-Attacks-Survey

## Image Recognition

| Year-Venue | Title | Source\|code | Adversarial Knowledge | Robust Technique | Threat Model | Remark | Adversarial Specificity | Physical Test Type | Space |
| :----------------------------: | ------------------------------------------------------------ | ------------------------------------------------------------ | --------------------- | :-----------------------: | ------------------------ | ---------- | ---------------------------- | ------------------ | ----- |
| 2017-ICLR | 【I-FGSM】Adversarial examples in the physical world | [paper](https://openreview.net/pdf?id=S1OufnIlx)\|[code](https://github.com/cleverhans-lab/cleverhans) | White-box | Classification | - | Pixel-wise | TargetedNontargeted | Static | 2D |
| 2018-ICML | 【EOT】Synthesizing robust adversarial examples | [paper](http://proceedings.mlr.press/v80/athalye18b/athalye18b.pdf )\|[code](https://github.com/prabhant/synthesizing-robust-adversarial-examples) | White-box | Classification | EOT | Pixel-wise | Targeted | Static | 2D |
| 2019-AAAI | 【D2P】Connecting the digital and physical world: Improving the robustness of adversarial attacks | [paper](https://ojs.aaai.org/index.php/AAAI/article/view/3926)\|[code](https://github.com/stevetkjan/Digital2Physical) | White-box | Classification | EOT, D2P | Pixel-wise | Targeted | Static | 2D |
| 2020-NeurIPS | 【ABBA】Watch out! motion is blluurrrri inngg the vision of your deep neural networks | [paper](https://proceedings.neurips.cc/paper/2020/hash/0a73de68f10e15626eb98701ecf03adb-Abstract.html)\|[code](https://github.com/tsingqguo/ABBA) | White-box | Classification | EOT | Pixel-wise | Nontargeted | Static | 2D |
| 2021-ICCV | 【MetaAttack】Meta-Attack: Class-agnostic and Model-agnostic Physical Adversarial Attack | [paper](https://openaccess.thecvf.com/content/ICCV2021/papers/Feng_Meta-Attack_Class-Agnostic_and_Model-Agnostic_Physical_Adversarial_Attack_ICCV_2021_paper.pdf)\|code | White-box | Classification | - | Pixel-wise | Targeted | Static | 2D |
| 2021-CVPR | 【ISPAttack】Adversarial imaging pipelines | [paper](https://openaccess.thecvf.com/content/CVPR2021/papers/Phan_Adversarial_Imaging_Pipelines_CVPR_2021_paper.pdf)\|code | White-box | Classification | EOT | Pixel-wise | TargetedNontargeted | Static | 2D |
| 2017-NeurIPS | 【AdvPatch】Adversarial patch | [paper](https://arxiv.org/pdf/1712.09665.pdf)\|[code](https://github.com/cleverhans-lab/cleverhans/blob/master/cleverhans_v3.1.0/examples/adversarial_patch/AdversarialPatch.ipynb) | White-box | Classification | EOT | Patch | Targeted | Static | 2D |
| 2020-ECCV | 【ACOsAttack】Bias-based universal adversarial patch attack for automatic check-out | [paper](https://www.ecva.net/papers/eccv_2020/papers_ECCV/papers/123580392.pdf)\|[code](https://github.com/liuaishan/ModelBiasedAttack) | White-box | Classification | EOT | Patch | Nontargeted | Static | 2D |
| 2021-TIP | 【ACOsAttack2】Universal adversarial patch attack for automatic checkout using perceptual and attentional bias | [paper](https://ieeexplore.ieee.org/document/9632406)\|[code](https://github.com/nlsdesafety-team/PerceptualAttentionalBiasedAttack) | White-box | Classification | - | Patch | Nontargeted | Static | 2D |
| 2022-TIFS | 【TnTAttack】TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems | [paper](https://ieeexplore.ieee.org/document/9856683)\|[Project](https://TnTattacks.github.io/) | white-box | Classification | EOT,TV | Patch | TargetedNontargeted | Static | 2D |
| 2022-NeurIPS | 【Copy/PasteAttack】Robust feature-level adversaries are interpretability tools | [paper](https://openreview.net/forum?id=lQ--doSB2o)\|[code](https://github.com/thestephencasper/feature_level_adv) | white-box | Classification | - | Patch | Targeted | Static | 2D |
| 2020-NeurIPS | 【ViewFool】ViewFool: Evaluating the Robustness of Visual Recognition to Adversarial Viewpoints | [paper](https://openreview.net/forum?id=X0m9q0IcsmX)\|code | white-box | Classification | EOT | Position | Nontargeted | Static | 3D |
| 2018-AAAI-S | 【LightAttack】Projecting trouble: Light based adversarial attacks on deep learning classifiers | [paper](https://ceur-ws.org/Vol-2269/FSS-18_paper_39.pdf)\|code | Black-box | Classification | - | Optical | TargetedNontargeted | Static | 2D |
| 2019-S&P | 【ProjectorAttack】Poster: Perceived adversarial examples | [paper](https://www.ieee-security.org/TC/SP2019/posters/hotcrp_sp19posters-final28.pdf)\|code | white-box | Classification | EOT | Optical | Targeted | Static | 2D |
| 2021-CVPR | 【OPAD】Optical adversarial attack | [paper](https://openaccess.thecvf.com/content/ICCV2021W/AROW/papers/Gnanasambandam_Optical_Adversarial_Attack_ICCVW_2021_paper.pdf)\|code | white-box | Classification | | Optical | TargetedNontargeted | Static | 2D |
| 2021-CVPR | 【LEDAttack】Invisible perturbations: Physical adversarial examples exploiting the rolling shutter effect | [paper](https://openaccess.thecvf.com/content/CVPR2021/papers/Sayles_Invisible_Perturbations_Physical_Adversarial_Examples_Exploiting_the_Rolling_Shutter_Effect_CVPR_2021_paper.pdf)\|[code](https://github.com/EarlMadSec/invis-perturbations) | white-box | Classification | EOT | Optical | TargetedNontargeted | Static | 2D |
| 2021-CVPR | 【AdvLB】Adversarial laser beam: Effective physical-world attack to dnns in a blink | [paper](https://openaccess.thecvf.com/content/CVPR2021/papers/Duan_Adversarial_Laser_Beam_Effective_Physical-World_Attack_to_DNNs_in_a_CVPR_2021_paper.pdf)\|code | Black-box | Classification | - | Optical | Nontargeted | Static | 2D |
| 2021-arXiv | 【SLMAttack】Light Lies: Optical Adversarial Attack | [paper](https://arxiv.org/pdf/2106.09908.pdf)\|code | white-box | Classification | - | Optical | Nontargeted | Static | 2D |
| 2022-VR | 【SPAA】SPAA: Stealthy Projector-based Adversarial Attacks on Deep Image Classifiers | [paper](https://ieeexplore.ieee.org/document/9756739)\|[code](https://github.com/BingyaoHuang/SPAA) | white-box | Classification | D2P | Optical | TargetedNontargeted | Static | 3D |
| 2022-CVPR | 【ShadowAttack】Shadows can be dangerous: Stealthy and effective physical-world adversarial attack by natural phenomenon | [paper](https://openaccess.thecvf.com/content/CVPR2022/papers/Zhong_Shadows_Can_Be_Dangerous_Stealthy_and_Effective_Physical-World_Adversarial_Attack_CVPR_2022_paper.pdf)\|[code](https://github.com/hncszyq/ShadowAttack) | Black-box | Classification | EOT | Optical | Nontargeted | Static | 2D |
| 2019-ICCV | 【AdvPattern】advPattern: physical-world attacks on deep person re-identification via adversarially transformable patterns | [paper](https://openaccess.thecvf.com/content_ICCV_2019/papers/Wang_advPattern_Physical-World_Attacks_on_Deep_Person_Re-Identification_via_Adversarially_Transformable_ICCV_2019_paper.pdf)\|[code](https://github.com/whuAdv/AdvPattern) | White-box | ReID | EOT,TV | Patch | TargetedNontargeted | Static | 2D |
| 2016-CCS | 【AdvEyeglass】Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition | [paper](https://dl.acm.org/doi/10.1145/2976749.2978392)\|code | White-box | Face Recognition | TV,NPS | Eyeglasses | TargetedNontargeted | Static | 2D |
| 2019-TOPS | 【AdvEyeglass2】A general framework for adversarial examples with objectives | [paper](https://dl.acm.org/doi/10.1145/3317611)\|[code](https://github.com/mahmoods01/agns) | White-box | Face Recognition | Color Alignment | Eyeglasses | TargetedNontargeted | Static | 2D |
| 2021-BIOSIG | 【CLBAAttack】On brightness agnostic adversarial examples against face recognition systems | [paper](https://dl.gi.de/handle/20.500.12116/37455;jsessionid=34E0CD4D027505FD60F37E8F0A198FBB)\|code | White-box | Face Recognition | EOT | Eyeglasses | TargetedNontargeted | Static | 2D |
| 2020-CVIU | 【ReplayAttack】Adversarial examples for replay attacks against CNN-based face recognition with anti-spoofing capability | [paper](https://www.sciencedirect.com/science/article/abs/pii/S1077314220300606)\|code | White-box | Face Recognition | EOT, Position Alignment | Patch | TargetedNontargeted | Static | 2D |
| 2019-SIBIRCON | 【ArcFaceAttack】On adversarial patches: real-world attack on arcface-100 face recognition system | [paper](https://ieeexplore.ieee.org/document/8958134)\|code | White-box | Face Recognition | TV | Sticker | TargetedNontargeted | Static | 2D |
| 2020-ICPR | 【AdvHat】Advhat: Real-world adversarial attack on arcface face id system | [paper](https://www.computer.org/csdl/proceedings-article/icpr/2021/09412236/1tmhLeqyrHq)\|code | White-box | Face Recognition | TV, Bending | Sticker | Nontargeted | Static | 2D |
| 2021-CVPR | 【TAP】Improving transferability of adversarial patches on face recognition with generative models | [paper](https://openaccess.thecvf.com/content/CVPR2021/papers/Xiao_Improving_Transferability_of_Adversarial_Patches_on_Face_Recognition_With_Generative_CVPR_2021_paper.pdf)\|code | White-box | Face Recognition | EOT | Sticker | TargetedNontargeted | Static | 2D |
| 2022-TPAMI | 【AdvSticker】Adversarial Sticker: A Stealthy Attack Method in the Physical World | [paper](https://ieeexplore.ieee.org/document/9779913)\|[code](https://github.com/jinyugy21/Adv-Stickers RHDE) | Black-box | Face Recognition | Bending | Sticker | TargetedNontargeted | Static | 3D |
| 2022-TPAMI | 【SOPP】Simultaneously Optimizing Perturbations and Positions for Black-box Adversarial Patch Attacks | [paper](https://arxiv.org/abs/2212.12995)\|[code](https://github.com/shighghyujie/newpatch-rl) | Black-box | Face Recognition | - | Sticker | TargetedNontargeted | Static | 2D |
| 2022-ECMLPKDD | 【AdvMask】Adversarial Mask: Real-World Adversarial Attack Against Face Recognition Models | [paper](https://2022.ecmlpkdd.org/wp-content/uploads/2022/09/sub_406.pdf)\|[code](https://github.com/AlonZolfi/AdversarialMask) | White-box | Face Recognition | Rendering | Mask | TargetedNontargeted | Static | 3D |
| 2020-CVPR-W | 【LPA】Adversarial light projection attacks on face recognition systems: A feasibility study | [paper](https://openaccess.thecvf.com/content_CVPRW_2020/papers/w48/Nguyen_Adversarial_Light_Projection_Attacks_on_Face_Recognition_Systems_A_Feasibility_CVPRW_2020_paper.pdf)\|code | White-box | Face Recognition | Position/Color Alignment | Optical | TargetedNontargeted | Static | 2D |
| 2018-CVPR | 【RP2】Robust physical-world attacks on deep learning visual classification | [paper](https://openaccess.thecvf.com/content_cvpr_2018/papers/Eykholt_Robust_Physical-World_Attacks_CVPR_2018_paper.pdf)\|code | White-box | Traffic Sign Recognition | D2P | Patch | TargetedNontargeted | Static | 2D |
| 2018-arXiv | 【RogueSigns】Rogue signs: Deceiving traffic sign recognition with malicious ads and logos | [paper](https://arxiv.org/pdf/1801.02780.pdf)\|[code](https://github.com/inspire-group/advml-traffic-sign) | White-box | Traffic Sign Recognition | EOT | Pixel-wise | Targeted | Dynamic | 2D |
| 2019-AAAI | 【PS_GAN】Perceptual-sensitive gan for generating adversarial patches | [paper](https://ojs.aaai.org/index.php/AAAI/article/view/3893)\|code | White-box | Traffic Sign Recognition | - | Patch | Nontargeted | Static | 2D |
| 2020-CVPR | 【AdvCam】Adversarial camouflage: Hiding physical-world attacks with natural styles | [paper](https://openaccess.thecvf.com/content_CVPR_2020/papers/Duan_Adversarial_Camouflage_Hiding_Physical-World_Attacks_With_Natural_Styles_CVPR_2020_paper.pdf)\|[code](https://github.com/RjDuan/AdvCam-Hide-Adv-with-Natural-Styles) | White-box | Traffic Sign Recognition | EOT | Pixel-wise | TargetedNontargeted | Static | 2D |
| 2020-CVPR | 【PhysGAN】Physgan: Generating physical-world-resilient adversarial examples for autonomous driving | [paper](https://openaccess.thecvf.com/content_CVPR_2020/papers/Kong_PhysGAN_Generating_Physical-World-Resilient_Adversarial_Examples_for_Autonomous_Driving_CVPR_2020_paper.pdf)\|code | White-box | Steering Model | D2P | Pixel-wise | Nontargeted | Dynamic | 2D |
| 2020-Computers & Security | 【LPRAttack】Spot evasion attacks: Adversarial examples for license plate recognition systems with convolutional neural networks | [paper](https://www.sciencedirect.com/science/article/pii/S0167404820301000)\|code | Black-box | License Plate Recognition | - | Patch | Targeted | Static | 2D |

## Object Detection

| Year-Venue | Title | Source\|code | Adversarial Knowledge | Robust Technique | Threat Model | Remark | Victim Model | Adversarial Specificity | Physical Test Type | Space |
| :------------------: | ------------------------------------------------------------ | ------------------------------------------------------------ | --------------------- | :---------------------: | --------------------------------- | -------------- | --------------------------------- | ------------------------ | ------------------- | ----- |
| 2018-ECMLPKDD | 【ShapeShifter】Shapeshifter: Robust physical adversarial attack on faster r-cnn object detector | [paper](https://link.springer.com/chapter/10.1007/978-3-030-10925-7_4)\|[code](https://github.com/shangtse/robust-physical-attack) | White-box | EOT | Object Detection | Pixel-wise | Faster RCNN | Targeted Nontargeted | Dynamic | 2D |
| 2018-USENIX-W | 【RP2+】Physical adversarial examples for object detectors | [paper](https://www.usenix.org/system/files/conference/woot18/woot18-paper-eykholt.pdf)\|code | White-box | TV,NPS, D2P | Object Detection | Patch | YOLOv2, Faster RCNN | Targeted Nontargeted | Static | 2D |
| 2019-CVPR-W | 【AdvPatch】Fooling automated surveillance cameras: adversarial patches to attack person detection | [paper](https://openaccess.thecvf.com/content_CVPRW_2019/papers/CV-COPS/Thys_Fooling_Automated_Surveillance_Cameras_Adversarial_Patches_to_Attack_Person_Detection_CVPRW_2019_paper.pdf)\|[code](https://gitlab.com/EAVISE/adversarial-yolo) | White-box | EOT,TV,NPS | Object Detection | Patch | YOLOv2 | Nontargeted | Dynamic | 2D |
| 2019-CCS | 【NestedAE】Seeing isn't believing: Towards more robust adversarial attack against real world object detectors | [paper](https://dl.acm.org/doi/10.1145/3319535.3354259)\|code | White-box | D2P, Physical Alignment | Object Detection | Patch | YOLOv3, Faster RCNN | Targeted Nontargeted | Dynamic | 3D |
| 2019-arXiv | 【DPatch2】On physical adversarial patches for object detection | [paper](https://arxiv.org/pdf/1906.11897.pdf)\|code | White-box | EOT | Object Detection | Patch | YOLOv3 | Targeted Nontargeted | Static | 2D |
| 2020-AAAI | 【LPAttack】Beyond digital domain: Fooling deep learning based recognition system in physical world | [paper](https://ojs.aaai.org/index.php/AAAI/article/view/5459)\|code | White-box | EOT | Object Detection | Pixel-wise | SSD | Targeted | Static | 2D |
| 2021-CVPR | 【TranslucentPatch】The translucent patch: A physical and universal attack on object detectors | [paper](https://openaccess.thecvf.com/content/CVPR2021/papers/Zolfi_The_Translucent_Patch_A_Physical_and_Universal_Attack_on_Object_CVPR_2021_paper.pdf)\|code | White-box | Affine, NPS | Object Detection | Patch | YOLOv5 | Targeted Nontargeted | Static | 2D |
| 2020-arXiv | 【ScreenAttack】Dynamic adversarial patch for evading object detection models | [paper](https://arxiv.org/pdf/2010.13070.pdf)\|code | White-box | TV | Object Detection | Patch | YOLOv2 | Targeted | Static | 2D |
| 2022-arXiv | 【Switch Patch】Attacking Object Detector Using A Universal Targeted Label-Switch Patch | [paper](https://arxiv.org/pdf/2211.08859.pdf)\|code | White-box | TV | Object Detection | Patch | YOLO, Faster RCNN | Targeted | Static | 2D |
| 2018-UEMCON | 【Invisible Cloak1】Building Towards" Invisible Cloak": Robust Physical Adversarial Attack on YOLO Object Detector | [paper](https://ieeexplore.ieee.org/document/8796670)\|code | White-box | EOT,TV | Object Detection | Wearable Patch | YOLO | Nontargeted | Static | 3D |
| 2020-ECCV | 【Adversarial T-Shirt】Adversarial t-shirt! evading person detectors in a physical world | [paper](https://www.ecva.net/papers/eccv_2020/papers_ECCV/papers/123500647.pdf)\|[code](https://github.com/jandress94/adversarial_tshirt/tree/master/adversarial_tshirt) | White-box | EOT,TPS | Object Detection | Wearable Patch | YOLOv2,Faster RCNN | Targeted | Static | 2D |
| 2020-ECCV | 【Invisible Cloak2】Making an invisibility cloak: Real world adversarial attacks on object detectors | [paper](https://www.ecva.net/papers/eccv_2020/papers_ECCV/papers/123490001.pdf)\|[code](https://github.com/zxwu/adv_cloak) | White-box | TPS | Object Detection | Wearable Patch | YOLOv2/3, Faster RCNN | Nontargeted | Static | 2D |
| 2021-MM | 【LAP】Legitimate Adversarial Patches: Evading Human Eyes and Detection Models in the Physical World | [paper](https://dl.acm.org/doi/10.1145/3474085.3475653)\|code | White-box | TV,NPS | Object Detection | Wearable Patch | YOLOv2 | Nontargeted | Static | 2D |
| 2021-ICCV | 【NaturalisticPatch】Naturalistic physical adversarial patch for object detectors | [paper](https://openaccess.thecvf.com/content/ICCV2021/papers/Hu_Naturalistic_Physical_Adversarial_Patch_for_Object_Detectors_ICCV_2021_paper.pdf)\|[code](https://github.com/aiiu-lab/Naturalistic-Adversarial-Patch) | White-box | TV | Object Detection | Wearable Patch | YOLO,Faster RCNN | Nontargeted | Static | 2D |
| 2022-CVPR | 【AdvTexture】Adversarial Texture for Fooling Person Detectors in the Physical World | [paper](https://openaccess.thecvf.com/content/CVPR2022/papers/Hu_Adversarial_Texture_for_Fooling_Person_Detectors_in_the_Physical_World_CVPR_2022_paper.pdf)\|[code](https://github.com/WhoTHU/Adversarial_Texture) | White-box | EOT,TPS | Object Detection | Wearable Patch | YOLO,Faster/Mask RCNN | Nontargeted | Static | 2D |
| 2021-USENIX Security | 【SLAP】SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations | [paper](https://www.usenix.org/system/files/sec21fall-lovisotto.pdf)\|[code](https://github.com/ssloxford/short-lived-adversarial-perturbations) | White-box | EOT,TV | Object Detection | Optical | YOLOv3,Mask RCNN | Nontargeted | Static | 2D |
| 2019-CVPR | 【MeshAdv】Meshadv: Adversarial meshes for visual recognition | [paper](https://ieeexplore.ieee.org/document/8954178)\|code | White-box | - | Object Detection | Shape | YOLOv3 | Nontargeted | Static | 3D |
| 2019-ICLR | 【CAMOU】CAMOU: Learning A Vehicle Camouflage For Physical Adversarial Attack On Object Detections In The Wild | [paper](https://openreview.net/pdf?id=SJgEl3A5tm)\|code | White-box | EOT | Object Detection | Camouflage | YOLOv3,Mask RCNN | Nontargeted | Static | 2D |
| 2020-arXiv | 【ER】Physical adversarial attack on vehicle detector in the carla simulator | [paper](https://arxiv.org/pdf/2007.16118.pdf)\|code | Black-box | - | Object Detection | Camouflage | Light-Head RCNN | Nontargeted | Static | 3D |
| 2020-CVPR | 【UPC】Universal physical camouflage attacks on object detectors | [paper](https://openaccess.thecvf.com/content_CVPR_2020/papers/Huang_Universal_Physical_Camouflage_Attacks_on_Object_Detectors_CVPR_2020_paper.pdf)\|[code](https://github.com/mesunhlf/UPC-tf) | White-box | EOT | Object Detection | Camouflage | Faster RCNN | Targeted Nontargeted | Static | 3D |
| 2021-CVPR | 【DAS】Dual attention suppression attack: Generate adversarial camouflage in physical world | [paper](https://openaccess.thecvf.com/content/CVPR2021/papers/Wang_Dual_Attention_Suppression_Attack_Generate_Adversarial_Camouflage_in_Physical_World_CVPR_2021_paper.pdf)\|[code](https://github.com/nlsde-safety-team/DualAttentionAttack) | White-box | TV | Object Detection | Camouflage | YOLOV4 | Nontargeted | Static | 3D |
| 2022-AAAI | 【FCA】Fca: Learning a 3d full-coverage vehicle camouflage for multi-view physical adversarial attack | [paper](https://ojs.aaai.org/index.php/AAAI/article/view/20141)\|[code](https://github.com/idrl-lab/Full-coverage-camouflage-adversarial-attack) | White-box | TV | Object Detection | Camouflage | YOLOV3 | Nontargeted | Static | 3D |
| 2022-IJCAI | 【CAC】Learning Coated Adversarial Camouflages for Object Detectors | [paper](https://www.ijcai.org/proceedings/2022/0125.pdf)\|code | White-box | EOT | Object Detection | Camouflage | Faster RCNN | Targeted | Static | 3D |
| 2022-CVPR | 【DPA】DTA: Physical Camouflage Attacks using Differentiable Transformation Network | [paper](https://openaccess.thecvf.com/content/CVPR2022/papers/Suryanto_DTA_Physical_Camouflage_Attacks_Using_Differentiable_Transformation_Network_CVPR_2022_paper.pdf)\|code | White-box | EOT | Object Detection | Camouflage | YOLOv4,EffDetD0 | Nontargeted | Static | 3D |
| 2021-AAAI | 【BulbAttack】Fooling thermal infrared pedestrian detectors in real world using small bulbs | [paper](https://ojs.aaai.org/index.php/AAAI/article/view/16477)\|code | White-box | EOT,TV | Infrared Object Detection | Optical | YOLOv3 | Nontargeted | Static | 2D |
| 2022-CVPR | 【QRAttack】Infrared Invisible Clothing: Hiding from Infrared Detectors at Multiple Angles in Real World | [paper](https://openaccess.thecvf.com/content/CVPR2022/papers/Zhu_Infrared_Invisible_Clothing_Hiding_From_Infrared_Detectors_at_Multiple_Angles_CVPR_2022_paper.pdf)\|code | White-box | EOT | Infrared Object Detection | Patch | YOLOv3 | Nontargeted | Static | 2D |
| 2022-WACV | 【AerialAttack】Physical adversarial attacks on an aerial imagery object detector | [paper](https://openaccess.thecvf.com/content/WACV2022/papers/Du_Physical_Adversarial_Attacks_on_an_Aerial_Imagery_Object_Detector_WACV_2022_paper.pdf)\|[code](https://github.com/andrewpatrickdu/adversarial-yolov3-cowc) | White-box | EOT,TV,NPS | Object detection in Aerial Images | Patch | YOLOv3 | Targeted | Dynamic | 2D |
| 2022-WACV | 【RWAE】Evaluating the robustness of semantic segmentation for autonomous driving against real-world adversarial patch attacks | [paper](https://openaccess.thecvf.com/content/WACV2022/papers/Nesti_Evaluating_the_Robustness_of_Semantic_Segmentation_for_Autonomous_Driving_Against_WACV_2022_paper.pdf)\|[code](https://github.com/retis-ai/SemSegAdvPatch) | White-box | EOT | Semantic Segmentation | Patch | DDRNet, BiSeNet, ICNet | Nontargeted | Static | 2D |
| 2022-ECCV | 【MDEAttack】Physical attack on monocular depth estimation with optimal adversarial patches | [paper](https://www.ecva.net/papers/eccv_2022/papers_ECCV/papers/136980504.pdf)\|code | White-box | EOT | Monocular Depth Estimation | Patch | Monodepth2, Depthhints, Manydepth | Nontargeted | Static | 2D |
| 2019-ICCV | 【PATAttack】Physical adversarial textures that fool visual object tracking | [paper](https://openaccess.thecvf.com/content_ICCV_2019/papers/Wiyatno_Physical_Adversarial_Textures_That_Fool_Visual_Object_Tracking_ICCV_2019_paper.pdf)\|code | White-box | EOT | Object Tracking | Patch | GOTURN | Targeted Nontargeted | Dynamic | 2D |
| 2021-AAAI | 【MTD】Towards Universal Physical Attacks on Single Object Tracking | [paper](https://ojs.aaai.org/index.php/AAAI/article/view/16211)\|code | White-box | EOT,TV | Object Tracking | Patch | SiamMask and SiamRPN++ | Targeted | Dynamic | 2D |

Physical-Adversarial-Attacks-Survey

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README