Targeted Adversarial Perturbations for Monocular Depth Prediction
Not on the map. Why?
Abstract (arXiv)
We study the effect of adversarial perturbations on the task of monocular depth prediction. Specifically, we explore the ability of small, imperceptible additive perturbations to selectively alter the perceived geometry of the scene. We show that such perturbations can not only globally re-scale the predicted distances from the camera, but also alter the prediction to match a different target scene. We also show that, when given semantic or instance information, perturbations can fool the network to alter the depth of specific categories or instances in the scene, and even remove them while preserving the rest of the scene. To understand the effect of targeted perturbations, we conduct experiments on state-of-the-art monocular depth prediction methods. Our experiments reveal vulnerabilities in monocular depth prediction networks, and shed light on the biases and context learned by them.
Key facts. Cited by 40 papers in the map (data through 7 Oct 2026). First posted on arXiv 12 Jun 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 7; 2022: 6; 2023: 5; 2024: 10; 2025: 10; 2026: 2.
40 papers.
Sort:
By area:
- 2021Advances in adversarial attacks and defenses in computer vision: A surveycited by 127
- 2022Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patchescited by 57
- 2021Learning Topology from Synthetic Data for Unsupervised Depth Completioncited by 38
- 2024WorDepth: Variational Language Prior for Monocular Depth Estimationcited by 34
- 2024Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Drivingcited by 32
- 2022Not Just Streaks: Towards Ground Truth for Single Image Derainingcited by 31
- 2021An Adaptive Framework for Learning Unsupervised Depth Completioncited by 30
- 2023CosPGD: an efficient white-box adversarial attack for pixel-wise prediction taskscited by 27
- 2022Monitored Distillation for Positive Congruent Depth Completioncited by 24
- 2024RSA: Resolving Scale Ambiguities in Monocular Depth Estimators through Language Descriptionscited by 20
- 2022Transformers in Self-Supervised Monocular Depth Estimation with Unknown Camera Intrinsicscited by 19
- 2021Stereoscopic Universal Perturbations across Different Architectures and Datasetscited by 17
28 more
- 2023Adversarial Training of Self-supervised Monocular Depth Estimation against Physical-World Attackscited by 17
- 2023AugUndo: Scaling Up Augmentations for Monocular Depth Completion and Estimationcited by 15
- 2025ProtoDepth: Unsupervised Continual Depth Completion with Prototypescited by 11
- 2023APARATE: Adaptive Adversarial Patch for CNN-based Monocular Depth Estimation for Autonomous Navigationcited by 10
- 2025Extending Foundational Monocular Depth Estimators to Fisheye Cameras with Calibration Tokenscited by 9
- 2021UniNet: A Unified Scene Understanding Network and Exploring Multi-Task Relationships through the Lens of Adversarial Attackscited by 7
- 2022Adversarial Attacks on Monocular Pose Estimationcited by 6
- 2022Image Masking for Robust Self-Supervised Monocular Depth Estimationcited by 5
- 2024Self-supervised Adversarial Training of Monocular Depth Estimation against Physical-World Attackscited by 5
- 2024Benchmarking Robust Self-Supervised Learning Across Diverse Downstream Taskscited by 5
- 2021Consistent Semantic Attacks on Optical Flowcited by 4
- 2024SSAP: A Shape-Sensitive Adversarial Patch for Comprehensive Disruption of Monocular Depth Estimation in Autonomous Navigation Applicationscited by 4
- 2025ETA: Energy-based Test-time Adaptation for Depth Completioncited by 4
- 2024Optical Lens Attack on Deep Learning Based Monocular Depth Estimationcited by 3
- 2024Left-right Discrepancy for Adversarial Attack on Stereo Networkscited by 2
- 2021Learning-Based Vulnerability Analysis of Cyber-Physical Systemscited by 1
- 2025TR2M: Transferring Monocular Relative Depth to Metric Depth with Language Descriptions and Dual-Level Scale-Oriented Contrastcited by 1
- 2025Guided Diffusion-based Generation of Adversarial Objects for Real-World Monocular Depth Estimation Attackscited by 1
- 2023Transformers in Unsupervised Structure-from-Motioncited by 0
- 2024Physical Adversarial Attack on Monocular Depth Estimation via Shape-Varying Patchescited by 0
- 2024Optical Lens Attack on Monocular Depth Estimation for Autonomous Drivingcited by 0
- 2025VGLD: Visually-Guided Linguistic Disambiguation for Monocular Depth Scale Recoverycited by 0
- 2025DepthVanish: Optimizing Adversarial Interval Structures for Stereo-Depth-Invisible Patchescited by 0
- 2025Pixel-Optimization-Free Patch Attack on Stereo Depth Estimationcited by 0
- 2025BiTAA: A Bi-Task Adversarial Attack for Object Detection and Depth Estimation via 3D Gaussian Splattingcited by 0
- 2025The 3D Mirage: Probing and Taming 3D Hallucinationscited by 0
- 2026RACF: A Resilient Autonomous Car Framework with Object Distance Correctioncited by 0
- 2026Efficient Semantic Understanding from Digital Foveationcited by 0
- 2026Efficient Semantic Understanding from Digital Foveation3 Sep 2026
- 2026RACF: A Resilient Autonomous Car Framework with Object Distance Correction14 Apr 2026
- 2025Guided Diffusion-based Generation of Adversarial Objects for Real-World Monocular Depth Estimation Attacks30 Dec 2025
- 2025The 3D Mirage: Probing and Taming 3D Hallucinations17 Dec 2025
- 2025BiTAA: A Bi-Task Adversarial Attack for Object Detection and Depth Estimation via 3D Gaussian Splatting24 Sep 2025
- 2025ETA: Energy-based Test-time Adaptation for Depth Completion8 Aug 2025
- 2025Extending Foundational Monocular Depth Estimators to Fisheye Cameras with Calibration Tokens6 Aug 2025
- 2025Pixel-Optimization-Free Patch Attack on Stereo Depth Estimation21 Jun 2025
- 2025DepthVanish: Optimizing Adversarial Interval Structures for Stereo-Depth-Invisible Patches20 Jun 2025
- 2025TR2M: Transferring Monocular Relative Depth to Metric Depth with Language Descriptions and Dual-Level Scale-Oriented Contrast16 Jun 2025
- 2025VGLD: Visually-Guided Linguistic Disambiguation for Monocular Depth Scale Recovery5 May 2025
- 2025ProtoDepth: Unsupervised Continual Depth Completion with Prototypes17 Mar 2025
28 more
- 2024Optical Lens Attack on Monocular Depth Estimation for Autonomous Driving31 Oct 2024
- 2024RSA: Resolving Scale Ambiguities in Monocular Depth Estimators through Language Descriptions3 Oct 2024
- 2024Optical Lens Attack on Deep Learning Based Monocular Depth Estimation25 Sep 2024
- 2024Physical Adversarial Attack on Monocular Depth Estimation via Shape-Varying Patches24 Jul 2024
- 2024Benchmarking Robust Self-Supervised Learning Across Diverse Downstream Tasks17 Jul 2024
- 2024Self-supervised Adversarial Training of Monocular Depth Estimation against Physical-World Attacks9 Jun 2024
- 2024WorDepth: Variational Language Prior for Monocular Depth Estimation4 Apr 2024
- 2024Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Driving26 Mar 2024
- 2024SSAP: A Shape-Sensitive Adversarial Patch for Comprehensive Disruption of Monocular Depth Estimation in Autonomous Navigation Applications18 Mar 2024
- 2024Left-right Discrepancy for Adversarial Attack on Stereo Networks14 Jan 2024
- 2023Transformers in Unsupervised Structure-from-Motion16 Dec 2023
- 2023AugUndo: Scaling Up Augmentations for Monocular Depth Completion and Estimation15 Oct 2023
- 2023APARATE: Adaptive Adversarial Patch for CNN-based Monocular Depth Estimation for Autonomous Navigation2 Mar 2023
- 2023CosPGD: an efficient white-box adversarial attack for pixel-wise prediction tasks4 Feb 2023
- 2023Adversarial Training of Self-supervised Monocular Depth Estimation against Physical-World Attacks31 Jan 2023
- 2022Image Masking for Robust Self-Supervised Monocular Depth Estimation5 Oct 2022
- 2022Adversarial Attacks on Monocular Pose Estimation14 Jul 2022
- 2022Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches11 Jul 2022
- 2022Not Just Streaks: Towards Ground Truth for Single Image Deraining22 Jun 2022
- 2022Monitored Distillation for Positive Congruent Depth Completion30 Mar 2022
- 2022Transformers in Self-Supervised Monocular Depth Estimation with Unknown Camera Intrinsics7 Feb 2022
- 2021Stereoscopic Universal Perturbations across Different Architectures and Datasets12 Dec 2021
- 2021Consistent Semantic Attacks on Optical Flow16 Nov 2021
- 2021UniNet: A Unified Scene Understanding Network and Exploring Multi-Task Relationships through the Lens of Adversarial Attacks10 Aug 2021
- 2021Advances in adversarial attacks and defenses in computer vision: A survey1 Aug 2021
- 2021An Adaptive Framework for Learning Unsupervised Depth Completion6 Jun 2021
- 2021Learning Topology from Synthetic Data for Unsupervised Depth Completion6 Jun 2021
- 2021Learning-Based Vulnerability Analysis of Cyber-Physical Systems10 Mar 2021
- 2021Advances in adversarial attacks and defenses in computer vision: A surveycited by 127
- 2022Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patchescited by 57
- 2021Learning Topology from Synthetic Data for Unsupervised Depth Completioncited by 38
- 2024WorDepth: Variational Language Prior for Monocular Depth Estimationcited by 34
- 2024Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Drivingcited by 32
- 2022Not Just Streaks: Towards Ground Truth for Single Image Derainingcited by 31
- 2021An Adaptive Framework for Learning Unsupervised Depth Completioncited by 30
- 2023CosPGD: an efficient white-box adversarial attack for pixel-wise prediction taskscited by 27
- 2022Monitored Distillation for Positive Congruent Depth Completioncited by 24
- 2024RSA: Resolving Scale Ambiguities in Monocular Depth Estimators through Language Descriptionscited by 20
- 2022Transformers in Self-Supervised Monocular Depth Estimation with Unknown Camera Intrinsicscited by 19
- 2021Stereoscopic Universal Perturbations across Different Architectures and Datasetscited by 17
12 most cited of 39 All 39 (JSON)
- 2026Efficient Semantic Understanding from Digital Foveation3 Sep 2026
- 2026RACF: A Resilient Autonomous Car Framework with Object Distance Correction14 Apr 2026
- 2025The 3D Mirage: Probing and Taming 3D Hallucinations17 Dec 2025
- 2025BiTAA: A Bi-Task Adversarial Attack for Object Detection and Depth Estimation via 3D Gaussian Splatting24 Sep 2025
- 2025ETA: Energy-based Test-time Adaptation for Depth Completion8 Aug 2025
- 2025Extending Foundational Monocular Depth Estimators to Fisheye Cameras with Calibration Tokens6 Aug 2025
- 2025Pixel-Optimization-Free Patch Attack on Stereo Depth Estimation21 Jun 2025
- 2025DepthVanish: Optimizing Adversarial Interval Structures for Stereo-Depth-Invisible Patches20 Jun 2025
- 2025TR2M: Transferring Monocular Relative Depth to Metric Depth with Language Descriptions and Dual-Level Scale-Oriented Contrast16 Jun 2025
- 2025VGLD: Visually-Guided Linguistic Disambiguation for Monocular Depth Scale Recovery5 May 2025
- 2025ProtoDepth: Unsupervised Continual Depth Completion with Prototypes17 Mar 2025
- 2024Optical Lens Attack on Monocular Depth Estimation for Autonomous Driving31 Oct 2024
12 newest of 39 All 39 (JSON)