mlsanityData to 7 Oct 2026

HOTCOLD Block: Fooling Thermal Infrared Detectors with a Novel Wearable Design

arXiv 2212.05709 ↗First posted 12 Dec 2022cs.CVcited by 27

Not on the map. Why?

Abstract (arXiv)

Adversarial attacks on thermal infrared imaging expose the risk of related applications. Estimating the security of these systems is essential for safely deploying them in the real world. In many cases, realizing the attacks in the physical space requires elaborate special perturbations. These solutions are often impractical and attention-grabbing. To address the need for a physically practical and stealthy adversarial attack, we introduce textscHotCold Block, a novel physical attack for infrared detectors that hide persons utilizing the wearable Warming Paste and Cooling Paste. By attaching these readily available temperature-controlled materials to the body, textscHotCold Block evades human eyes efficiently. Moreover, unlike existing methods that build adversarial patches with complex texture and structure features, textscHotCold Block utilizes an SSP-oriented adversarial optimization algorithm that enables attacks with pure color blocks and explores the influence of size, shape, and position on attack performance. Extensive experimental results in both digital and physical environments demonstrate the performance of our proposed textscHotCold Block. emphCode is available: textcolormagentahttps://github.com/weihui1308/HOTCOLDBlock.

Key facts. Cited by 27 papers in the map (data through 7 Oct 2026). Builds on 20 of its 33 references that are in the map. First posted on arXiv 12 Dec 2022.

Builds on

20 of 33 references.

References · 20

  1. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  2. 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
  3. 2020End-to-End Object Detection with Transformerscited by 7,384
  4. 2017Mask R-CNNcited by 7,259
  5. 2018YOLOv3: An Incremental Improvementcited by 2,652
  6. 2016An overview of gradient descent optimization algorithmscited by 1,021
  7. 2017Adversarial Patchcited by 514
  8. 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 276
  9. 2019Fooling automated surveillance cameras: adversarial patches to attack person detectioncited by 268
  10. 2019Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectorscited by 155
  11. 2018DPatch: An Adversarial Patch Attack on Object Detectorscited by 146
  12. 2022Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenoncited by 101
8 more
  1. 2022Adversarial Texture for Fooling Person Detectors in the Physical Worldcited by 96
  2. 2021Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blinkcited by 75
  3. 2021FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attackcited by 74
  4. 2022Physical Adversarial Attack meets Computer Vision: A Decade Surveycited by 66
  5. 2020The Translucent Patch: A Physical and Universal Attack on Object Detectorscited by 62
  6. 2021Fooling thermal infrared pedestrian detectors in real world using small bulbscited by 51
  7. 2022Infrared Invisible Clothing:Hiding from Infrared Detectors at Multiple Angles in Real Worldcited by 42
  8. 2021Context-Aware Transfer Attacks for Object Detectioncited by 18

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 8; 2024: 6; 2025: 4; 2026: 9.

27 papers.

Sort:

By area:

  1. 2023Unified Adversarial Patch for Cross-modal Attacks in the Physical Worldcited by 27
  2. 2024SceneTAP: Scene-Coherent Typographic Adversarial Planner against Vision-Language Models in Real-World Environmentscited by 22
  3. 2023Unified Adversarial Patch for Visible-Infrared Cross-modal Attacks in the Physical Worldcited by 21
  4. 2023Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlookcited by 20
  5. 2023Adversarial Infrared Blocks: A Multi-view Black-box Attack to Thermal Infrared Detectors in Physical Worldcited by 11
  6. 2023Adversarial Examples in the Physical World: A Surveycited by 10
  7. 2023Adversarial Infrared Curves: An Attack on Infrared Pedestrian Detectors in the Physical Worldcited by 10
  8. 2024Infrared Adversarial Car Stickerscited by 8
  9. 2024Real-world Adversarial Defense against Patch Attacks based on Diffusion Modelcited by 5
  10. 2025Adversarial Attacks on Event-Based Pedestrian Detectors: A Physical Approachcited by 5
  11. 2023Defending Against Physical Adversarial Patch Attacks on Infrared Human Detectioncited by 4
  12. 2023Two-stage optimized unified adversarial patch for attacking visible-infrared cross-modal detectors in the physical worldcited by 4
15 more
  1. 2024Multi-View Black-Box Physical Attacks on Infrared Pedestrian Detectors Using Adversarial Infrared Gridcited by 1
  2. 2024Generative Adversarial Patches for Physical Attacks on Cross-Modal Pedestrian Re-Identificationcited by 1
  3. 2025A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challengescited by 1
  4. 2026Physical Adversarial Clothing Evades Visible-Thermal Detectors via Non-Overlapping RGB-T Patterncited by 1
  5. 2024Adversarial Infrared Geometry: Using Geometry to Perform Adversarial Attack against Infrared Pedestrian Detectorscited by 0
  6. 2025Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical Worldcited by 0
  7. 2025Robust Physical Adversarial Patches Using Dynamically Optimized Clusterscited by 0
  8. 2026Thermal Topology Collapse: Universal Physical Patch Attacks on Infrared Vision Systemscited by 0
  9. 2026Physical Adversarial Attacks on AI Surveillance Systems:Detection, Tracking, and Visible--Infrared Evasioncited by 0
  10. 2026Unleashing the Representational Power of Fourier Shapes for Attacking Infrared Object Detectioncited by 0
  11. 2026AirflowAttack: Thermal-Airflow Adversarial Perturbations against Infrared Remote-Sensing Vision-Language Modelscited by 0
  12. 2026InfraQR: Edge-Placed QR-Inspired Structured Patch Attacks on Infrared Vision-Language Modelscited by 0
  13. 2026QR-Structured Thermal Triggers for Targeted Semantic Attacks on Infrared Vision-Language Modelscited by 0
  14. 2026Physical Adversarial Examples for Person Detectors in Thermal Images Based on 3D Modelingcited by 0
  15. 2026Stealthy in Semantics, Antagonistic in Space: Attacking Visible-Infrared Object Detectors via Object-Level Misalignmentcited by 0