Targeted Attack for Deep Hashing based Retrieval
Not on the map. Why?
Abstract (arXiv)
The deep hashing based retrieval method is widely adopted in large-scale image and video retrieval. However, there is little investigation on its security. In this paper, we propose a novel method, dubbed deep hashing targeted attack (DHTA), to study the targeted attack on such retrieval. Specifically, we first formulate the targeted attack as a point-to-set optimization, which minimizes the average distance between the hash code of an adversarial example and those of a set of objects with the target label. Then we design a novel component-voting scheme to obtain an anchor code as the representative of the set of hash codes of objects with the target label, whose optimality guarantee is also theoretically derived. To balance the performance and perceptibility, we propose to minimize the Hamming distance between the hash code of the adversarial example and the anchor code under the ℓ^∞ restriction on the perturbation. Extensive experiments verify that DHTA is effective in attacking both deep hashing based image retrieval and video retrieval.
Key facts. Cited by 34 papers in the map (data through 7 Oct 2026). First posted on arXiv 15 Apr 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 7; 2022: 12; 2023: 8; 2024: 3; 2025: 4.
34 papers.
Sort:
By area:
- 2021Advances in adversarial attacks and defenses in computer vision: A surveycited by 127
- 2022LAS-AT: Adversarial Training with Learnable Attack Strategycited by 94
- 2022Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protectioncited by 80
- 2024Inducing High Energy-Latency of Large Vision-Language Models with Verbose Imagescited by 69
- 2022A Large-scale Multiple-objective Method for Black-box Attack against Object Detectioncited by 55
- 2021Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bitscited by 49
- 2023Backdoor Defense via Adaptively Splitting Poisoned Datasetcited by 43
- 2022Prior-Guided Adversarial Initialization for Fast Adversarial Trainingcited by 34
- 2022BadHash: Invisible Backdoor Attacks against Deep Hashing with Clean Labelcited by 28
- 2022Untargeted Backdoor Attack against Object Detectioncited by 28
- 2021Learning to Break Deep Perceptual Hashing: The Use Case NeuralHashcited by 25
- 2024Adversarial Robustness for Visual Grounding of Multimodal Large Language Modelscited by 23
22 more
- 2022Hardly Perceptible Trojan Attack against Neural Networks with Bit Flipscited by 21
- 2023One-bit Flip is All You Need: When Bit-flip Attack Meets Model Trainingcited by 14
- 2022Versatile Weight Attack via Flipping Limited Bitscited by 13
- 2021Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoningcited by 12
- 2024DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domaincited by 12
- 2022Backdoor Defense via Suppressing Model Shortcutscited by 10
- 2021Deep Hash Distillation for Image Retrievalcited by 9
- 2021Prototype-supervised Adversarial Network for Targeted Attack of Deep Hashingcited by 8
- 2023A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarkingcited by 5
- 2023Semantic-Aware Adversarial Training for Reliable Deep Hashing Retrievalcited by 5
- 2023GSE: Group-wise Sparse and Explainable Adversarial Attackscited by 5
- 2025Protecting Your Video Content: Disrupting Automated Video-based LLM Annotationscited by 5
- 2021Anomaly Detection of Adversarial Examples using Class-conditional Generative Adversarial Networkscited by 3
- 2025AutoSSVH: Exploring Automated Frame Sampling for Efficient Self-Supervised Video Hashingcited by 3
- 2022CgAT: Center-Guided Adversarial Training for Deep Hashing-Based Retrievalcited by 2
- 2023Collapse-Aware Triplet Decoupling for Adversarially Robust Image Retrievalcited by 2
- 2022ARIA: Adversarially Robust Image Attribution for Content Provenancecited by 1
- 2022Disappeared Command: Spoofing Attack On Automatic Speech Recognition Systems with Sound Maskingcited by 1
- 2023Reliable and Efficient Evaluation of Adversarial Robustness for Deep Hashing-Based Retrievalcited by 0
- 2023Unsupervised Multi-Criteria Adversarial Detection in Deep Image Retrievalcited by 0
- 2025Clean Image May be Dangerous: Data Poisoning Attacks Against Deep Hashingcited by 0
- 2025DiffHash: Text-Guided Targeted Attack via Diffusion Models against Deep Hashing Image Retrievalcited by 0
- 2025DiffHash: Text-Guided Targeted Attack via Diffusion Models against Deep Hashing Image Retrieval16 Sep 2025
- 2025AutoSSVH: Exploring Automated Frame Sampling for Efficient Self-Supervised Video Hashing4 Apr 2025
- 2025Clean Image May be Dangerous: Data Poisoning Attacks Against Deep Hashing27 Mar 2025
- 2025Protecting Your Video Content: Disrupting Automated Video-based LLM Annotations26 Mar 2025
- 2024DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain16 Oct 2024
- 2024Adversarial Robustness for Visual Grounding of Multimodal Large Language Models16 May 2024
- 2024Inducing High Energy-Latency of Large Vision-Language Models with Verbose Images20 Jan 2024
- 2023Collapse-Aware Triplet Decoupling for Adversarially Robust Image Retrieval12 Dec 2023
- 2023GSE: Group-wise Sparse and Explainable Adversarial Attacks29 Nov 2023
- 2023Semantic-Aware Adversarial Training for Reliable Deep Hashing Retrieval23 Oct 2023
- 2023One-bit Flip is All You Need: When Bit-flip Attack Meets Model Training12 Aug 2023
- 2023A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking21 Jun 2023
22 more
- 2023Unsupervised Multi-Criteria Adversarial Detection in Deep Image Retrieval9 Apr 2023
- 2023Backdoor Defense via Adaptively Splitting Poisoned Dataset23 Mar 2023
- 2023Reliable and Efficient Evaluation of Adversarial Robustness for Deep Hashing-Based Retrieval22 Mar 2023
- 2022Untargeted Backdoor Attack against Object Detection2 Nov 2022
- 2022Backdoor Defense via Suppressing Model Shortcuts2 Nov 2022
- 2022Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection27 Sep 2022
- 2022A Large-scale Multiple-objective Method for Black-box Attack against Object Detection16 Sep 2022
- 2022Hardly Perceptible Trojan Attack against Neural Networks with Bit Flips27 Jul 2022
- 2022Versatile Weight Attack via Flipping Limited Bits25 Jul 2022
- 2022Prior-Guided Adversarial Initialization for Fast Adversarial Training18 Jul 2022
- 2022BadHash: Invisible Backdoor Attacks against Deep Hashing with Clean Label1 Jul 2022
- 2022Disappeared Command: Spoofing Attack On Automatic Speech Recognition Systems with Sound Masking19 Apr 2022
- 2022CgAT: Center-Guided Adversarial Training for Deep Hashing-Based Retrieval18 Apr 2022
- 2022LAS-AT: Adversarial Training with Learnable Attack Strategy13 Mar 2022
- 2022ARIA: Adversarially Robust Image Attribution for Content Provenance25 Feb 2022
- 2021Deep Hash Distillation for Image Retrieval16 Dec 2021
- 2021Learning to Break Deep Perceptual Hashing: The Use Case NeuralHash12 Nov 2021
- 2021Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoning18 Sep 2021
- 2021Advances in adversarial attacks and defenses in computer vision: A survey1 Aug 2021
- 2021Anomaly Detection of Adversarial Examples using Class-conditional Generative Adversarial Networks21 May 2021
- 2021Prototype-supervised Adversarial Network for Targeted Attack of Deep Hashing17 May 2021
- 2021Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits21 Feb 2021
- 2021Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bitscited by 49
- 2022Versatile Weight Attack via Flipping Limited Bitscited by 13
- 2025Protecting Your Video Content: Disrupting Automated Video-based LLM Annotationscited by 5
- 2025Clean Image May be Dangerous: Data Poisoning Attacks Against Deep Hashingcited by 0
- 2025Clean Image May be Dangerous: Data Poisoning Attacks Against Deep Hashing27 Mar 2025
- 2025Protecting Your Video Content: Disrupting Automated Video-based LLM Annotations26 Mar 2025
- 2022Versatile Weight Attack via Flipping Limited Bits25 Jul 2022
- 2021Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits21 Feb 2021
- 2021Advances in adversarial attacks and defenses in computer vision: A surveycited by 127
- 2022LAS-AT: Adversarial Training with Learnable Attack Strategycited by 94
- 2022Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protectioncited by 80
- 2022A Large-scale Multiple-objective Method for Black-box Attack against Object Detectioncited by 55
- 2023Backdoor Defense via Adaptively Splitting Poisoned Datasetcited by 43
- 2022Prior-Guided Adversarial Initialization for Fast Adversarial Trainingcited by 34
- 2022BadHash: Invisible Backdoor Attacks against Deep Hashing with Clean Labelcited by 28
- 2022Untargeted Backdoor Attack against Object Detectioncited by 28
- 2021Learning to Break Deep Perceptual Hashing: The Use Case NeuralHashcited by 25
- 2022Hardly Perceptible Trojan Attack against Neural Networks with Bit Flipscited by 21
- 2023One-bit Flip is All You Need: When Bit-flip Attack Meets Model Trainingcited by 14
- 2021Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoningcited by 12
12 most cited of 27 All 27 (JSON)
- 2025AutoSSVH: Exploring Automated Frame Sampling for Efficient Self-Supervised Video Hashing4 Apr 2025
- 2024DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain16 Oct 2024
- 2023Collapse-Aware Triplet Decoupling for Adversarially Robust Image Retrieval12 Dec 2023
- 2023GSE: Group-wise Sparse and Explainable Adversarial Attacks29 Nov 2023
- 2023Semantic-Aware Adversarial Training for Reliable Deep Hashing Retrieval23 Oct 2023
- 2023One-bit Flip is All You Need: When Bit-flip Attack Meets Model Training12 Aug 2023
- 2023A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking21 Jun 2023
- 2023Unsupervised Multi-Criteria Adversarial Detection in Deep Image Retrieval9 Apr 2023
- 2023Backdoor Defense via Adaptively Splitting Poisoned Dataset23 Mar 2023
- 2023Reliable and Efficient Evaluation of Adversarial Robustness for Deep Hashing-Based Retrieval22 Mar 2023
- 2022Untargeted Backdoor Attack against Object Detection2 Nov 2022
- 2022Backdoor Defense via Suppressing Model Shortcuts2 Nov 2022
12 newest of 27 All 27 (JSON)