mlsanityData to 7 Oct 2026

Efficient Adversarial Attacks for Visual Object Tracking

arXiv 2008.00217 ↗First posted 1 Aug 2020cs.CV cs.LG eess.IVcited by 66

Not on the map. Why?

Abstract (arXiv)

Visual object tracking is an important task that requires the tracker to find the objects quickly and accurately. The existing state-ofthe-art object trackers, i.e., Siamese based trackers, use DNNs to attain high accuracy. However, the robustness of visual tracking models is seldom explored. In this paper, we analyze the weakness of object trackers based on the Siamese network and then extend adversarial examples to visual object tracking. We present an end-to-end network FAN (Fast Attack Network) that uses a novel drift loss combined with the embedded feature loss to attack the Siamese network based trackers. Under a single GPU, FAN is efficient in the training speed and has a strong attack performance. The FAN can generate an adversarial example at 10ms, achieve effective targeted attack (at least 40% drop rate on OTB) and untargeted attack (at least 70% drop rate on OTB).

Key facts. Cited by 66 papers in the map (data through 7 Oct 2026). First posted on arXiv 1 Aug 2020.

Builds on

No reference list yet.

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2021: 5; 2022: 10; 2023: 8; 2024: 17; 2025: 18; 2026: 8.

66 papers.

Sort:

By area:

  1. 2021Advances in adversarial attacks and defenses in computer vision: A surveycited by 127
  2. 2021Towards More Flexible and Accurate Object Tracking with Natural Language: Algorithms and Benchmarkcited by 124
  3. 2024Jailbreak Vision Language Models via Bi-Modal Adversarial Promptcited by 103
  4. 2024VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Modelscited by 83
  5. 2022Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detectioncited by 79
  6. 2023BadCLIP: Trigger-Aware Prompt Learning for Backdoor Attacks on CLIPcited by 63
  7. 2023Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimizationcited by 60
  8. 2023Boosting Adversarial Transferability by Achieving Flat Local Maximacited by 48
  9. 2024Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMscited by 48
  10. 2025Manipulating Multimodal Agents via Cross-Modal Prompt Injectioncited by 42
  11. 2023Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Featurescited by 35
  12. 2024Boosting Transferability in Vision-Language Attacks via Diversification along the Intersection Region of Adversarial Trajectorycited by 35
38 more
  1. 2024Visual Adversarial Attack on Vision-Language Models for Autonomous Drivingcited by 35
  2. 2022Prior-Guided Adversarial Initialization for Fast Adversarial Trainingcited by 34
  3. 2024Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detectioncited by 34
  4. 2022Towards Efficient Adversarial Training on Vision Transformerscited by 29
  5. 2024Effectiveness Assessment of Recent Large Vision-Language Modelscited by 29
  6. 2024Compromising Embodied Agents with Contextual Backdoor Attackscited by 29
  7. 2023Rethinking the Backward Propagation for Adversarial Transferabilitycited by 27
  8. 2022WebUAV-3M: A Benchmark for Unveiling the Power of Million-Scale Deep UAV Trackingcited by 26
  9. 2021IoU Attack: Towards Temporally Coherent Black-Box Adversarial Attack for Visual Object Trackingcited by 25
  10. 2024Towards Robust Physical-world Backdoor Attacks on Lane Detectioncited by 25
  11. 2024Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Cloudscited by 24
  12. 2023Efficient Decision-based Black-box Patch Attacks on Video Recognitioncited by 21
  13. 2022Exploring Inconsistent Knowledge Distillation for Object Detection with Data Augmentationcited by 19
  14. 2024LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusionscited by 18
  15. 2025T2V-OptJail: Discrete Prompt Optimization for Text-to-Video Jailbreak Attackscited by 18
  16. 2022Efficient universal shuffle attack for visual object trackingcited by 14
  17. 2022SiamMask: A Framework for Fast Online Object Tracking and Segmentationcited by 13
  18. 2025E2AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Modelscited by 12
  19. 2022DIMBA: Discretely Masked Black-Box Attack in Single Object Trackingcited by 11
  20. 2025Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025cited by 11
  21. 2026When World Models Dream Wrong: Physical-Conditioned Adversarial Attacks against World Modelscited by 11
  22. 2023Isolation and Induction: Training Robust Deep Neural Networks against Model Stealing Attackscited by 10
  23. 2021A Simple and Strong Baseline for Universal Targeted Attacks on Siamese Visual Trackingcited by 9
  24. 2025Temporal Unlearnable Examples: Preventing Personal Video Data from Unauthorized Exploitation by Object Trackingcited by 9
  25. 2025Bench2ADVLM: A Closed-Loop Benchmark for Vision-language Models in Autonomous Drivingcited by 8
  26. 2021Semantically Stealthy Adversarial Attacks against Segmentation Modelscited by 7
  27. 2023Face Encryption via Frequency-Restricted Identity-Agnostic Attackscited by 6
  28. 2024Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threatscited by 6
  29. 20253D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generationcited by 6
  30. 2026CtrlAttack: A Unified Attack on World-Model Control in Diffusion Modelscited by 6
  31. 2024Towards Robust Object Detection: Identifying and Removing Backdoors via Module Inconsistency Analysiscited by 4
  32. 2025No Query, No Accesscited by 4
  33. 2025Adversarial Generation and Collaborative Evolution of Safety-Critical Scenarios for Autonomous Vehiclescited by 4
  34. 2025GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbationscited by 3
  35. 2025Physical Adversarial Camouflage through Gradient Calibration and Regularizationcited by 3
  36. 2025MetAdv: A Unified and Interactive Adversarial Testing Platform for Autonomous Drivingcited by 3
  37. 2022SkeleVision: Towards Adversarial Resiliency of Person Tracking with Multi-Task Learningcited by 2
  38. 2022Single Object Tracking Research: A Surveycited by 2

50 most cited of 66 All 66 (JSON)