FROD: Robust Object Detection for Free
Not on the map. Why?
Abstract (arXiv)
Object detection is a vital task in computer vision and has become an integral component of numerous critical systems. However, state-of-the-art object detectors, similar to their classification counterparts, are susceptible to small adversarial perturbations that can significantly alter their normal behavior. Unlike classification, the robustness of object detectors has not been thoroughly explored. In this work, we take the initial step towards bridging the gap between the robustness of classification and object detection by leveraging adversarially trained classification models. Merely utilizing adversarially trained models as backbones for object detection does not result in robustness. We propose effective modifications to the classification-based backbone to instill robustness in object detection without incurring any computational overhead. To further enhance the robustness achieved by the proposed modified backbone, we introduce two lightweight components: imitation loss and delayed adversarial training. Extensive experiments on the MS-COCO and Pascal VOC datasets are conducted to demonstrate the effectiveness of our proposed approach.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 46 of its 59 references that are in the map. First posted on arXiv 3 Aug 2023.
Builds on
46 of 59 references.
References · 46
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,639
- 2020End-to-End Object Detection with Transformerscited by 7,414
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2015You Only Look Once: Unified, Real-Time Object Detectioncited by 4,852
- 2016DeepLab: Semantic Image Segmentation with Deep Convolutional Nets, Atrous Convolution, and Fully Connected CRFscited by 3,241
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2016Learning without Forgettingcited by 2,496
- 2017Accurate, Large Minibatch SGD: Training ImageNet in 1 Hourcited by 1,492
34 more
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
- 2019Self-training with Noisy Student improves ImageNet classificationcited by 1,311
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,268
- 2019EfficientDet: Scalable and Efficient Object Detectioncited by 1,020
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 953
- 2016Practical Black-Box Attacks against Machine Learningcited by 903
- 2018Robustness May Be at Odds with Accuracycited by 880
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 744
- 2020Fast is better than free: Revisiting adversarial trainingcited by 727
- 2017Evasion Attacks against Machine Learning at Test Timecited by 689
- 2020Image Segmentation Using Deep Learning: A Surveycited by 660
- 2019Adversarial Training for Free!cited by 643
- 2016Delving into Transferable Adversarial Examples and Black-box Attackscited by 536
- 2019Object Detection in 20 Years: A Surveycited by 531
- 2017Adversarial Patchcited by 517
- 2019Using Pre-Training Can Improve Model Robustness and Uncertaintycited by 373
- 2019Adversarial Examples Improve Image Recognitioncited by 286
- 2017Adversarial Examples for Semantic Segmentation and Object Detectioncited by 275
- 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 255
- 2019You Only Propagate Once: Accelerating Adversarial Training via Maximal Principlecited by 183
- 2018Physical Adversarial Examples for Object Detectorscited by 163
- 2019Are Labels Required for Improving Adversarial Robustness?cited by 163
- 2019Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectorscited by 155
- 2019Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systemscited by 153
- 2018DPatch: An Adversarial Patch Attack on Object Detectorscited by 147
- 2019Adversarially robust transfer learningcited by 67
- 2019Towards Adversarially Robust Object Detectioncited by 55
- 2021Class-Aware Robust Adversarial Training for Object Detectioncited by 27
- 2021Towards Understanding the Generative Capability of Adversarially Robust Classifierscited by 26
- 2021Adversarial Robustness for Unsupervised Domain Adaptationcited by 24
- 2021Attack to Fool and Explain Deep Networkscited by 17
- 2022ZooD: Exploiting Model Zoo for Out-of-Distribution Generalizationcited by 12
- 2020Towards an Adversarially Robust Normalization Approachcited by 9
- 2021MixACM: Mixup-Based Robustness Transfer via Distillation of Activated Channel Mapscited by 9
Built on by
Citing papers per year: 2025: 1; 2026: 1.
2 papers.