mlsanityData to 14 Oct 2026

ACTIVE: Towards Highly Transferable 3D Physical Camouflage for Universal and Robust Vehicle Evasion

arXiv 2308.07009 ↗First posted 14 Aug 2023cs.CVcited by 31

Not on the map. Why?

Abstract (arXiv)

Adversarial camouflage has garnered attention for its ability to attack object detectors from any viewpoint by covering the entire object's surface. However, universality and robustness in existing methods often fall short as the transferability aspect is often overlooked, thus restricting their application only to a specific target with limited performance. To address these challenges, we present Adversarial Camouflage for Transferable and Intensive Vehicle Evasion (ACTIVE), a state-of-the-art physical camouflage attack framework designed to generate universal and robust adversarial camouflage capable of concealing any 3D vehicle from detectors. Our framework incorporates innovative techniques to enhance universality and robustness, including a refined texture rendering that enables common texture application to different vehicles without being constrained to a specific texture map, a novel stealth loss that renders the vehicle undetectable, and a smooth and camouflage loss to enhance the naturalness of the adversarial camouflage. Our extensive experiments on 15 different models show that ACTIVE consistently outperforms existing works on various public detectors, including the latest YOLOv7. Notably, our universality evaluations reveal promising transferability to other vehicle classes, tasks (segmentation models), and the real world, not just other vehicles.

Key facts. Cited by 31 papers in the map (data through 14 Oct 2026). Builds on 36 of its 50 references that are in the map. First posted on arXiv 14 Aug 2023.

Builds on

36 of 50 references.

References · 36

  1. 2014Adam: A Method for Stochastic Optimizationcited by 37,240
  2. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  3. 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,639
  4. 2020End-to-End Object Detection with Transformerscited by 7,414
  5. 2017Mask R-CNNcited by 7,277
  6. 2016Densely Connected Convolutional Networkscited by 6,720
  7. 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,795
  8. 2016The Cityscapes Dataset for Semantic Urban Scene Understandingcited by 4,444
  9. 2020Deformable DETR: Deformable Transformers for End-to-End Object Detectioncited by 3,422
  10. 2015SSD: Single Shot MultiBox Detectorcited by 3,130
  11. 2018YOLOv3: An Incremental Improvementcited by 2,659
  12. 2017CARLA: An Open Urban Driving Simulatorcited by 2,449
24 more
  1. 2021Pyramid Vision Transformer: A Versatile Backbone for Dense Prediction without Convolutionscited by 1,962
  2. 2019MMDetection: Open MMLab Detection Toolbox and Benchmarkcited by 1,385
  3. 2021YOLOX: Exceeding YOLO Series in 2021cited by 1,071
  4. 2019EfficientDet: Scalable and Efficient Object Detectioncited by 1,020
  5. 2022YOLOv7: Trainable bag-of-freebies sets new state-of-the-art for real-time object detectorscited by 982
  6. 2017Adversarial Patchcited by 517
  7. 2020Sparse R-CNN: End-to-End Object Detection with Learnable Proposalscited by 495
  8. 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 460
  9. 2017Neural 3D Mesh Renderercited by 437
  10. 2014Understanding Deep Image Representations by Inverting Themcited by 403
  11. 2020MaX-DeepLab: End-to-End Panoptic Segmentation with Mask Transformerscited by 355
  12. 2020Axial-DeepLab: Stand-Alone Axial-Attention for Panoptic Segmentationcited by 326
  13. 2019Fooling automated surveillance cameras: adversarial patches to attack person detectioncited by 268
  14. 2016Speed/accuracy trade-offs for modern convolutional object detectorscited by 198
  15. 2021On the Robustness of Vision Transformers to Adversarial Examplescited by 167
  16. 2021Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical Worldcited by 127
  17. 2020Dynamic R-CNN: Towards High Quality Object Detection via Dynamic Trainingcited by 103
  18. 2021FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attackcited by 74
  19. 2021Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNscited by 57
  20. 2022DTA: Physical Camouflage Attacks using Differentiable Transformation Networkcited by 51
  21. 2021Reveal of Vision Transformers Robustness against Adversarial Attackscited by 43
  22. 2020Physical Adversarial Attack on Vehicle Detector in the Carla Simulatorcited by 38
  23. 2020Scaling Wide Residual Networks for Panoptic Segmentationcited by 32
  24. 2022A Survey on Physical Adversarial Attack in Computer Visioncited by 25

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2023: 3; 2024: 15; 2025: 8; 2026: 5.

31 papers.

Sort:

By area:

  1. 2024Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Drivingcited by 32
  2. 2023Towards Transferable Targeted 3D Adversarial Attack in the Physical Worldcited by 25
  3. 2024RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generationcited by 18
  4. 2023Adversarial Examples in the Physical World: A Surveycited by 10
  5. 2025Safety of Embodied Navigation: A Surveycited by 10
  6. 2024Rethinking Impersonation and Dodging Attacks on Face Recognition Systemscited by 8
  7. 2024Flexible Physical Camouflage Generation Based on a Differential Approachcited by 7
  8. 20253D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generationcited by 7
  9. 2024Towards Physically Realizable Adversarial Attacks in Embodied Vision Navigationcited by 6
  10. 2023Embodied Laser Attack:Leveraging Scene Priors to Achieve Agent-based Robust Non-contact Attackscited by 4
  11. 2024Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Modelscited by 4
  12. 2024CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectorscited by 4
19 more
  1. 2024Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentationcited by 4
  2. 2024Attack Anything: Blind DNNs via Universal Background Adversarial Attackcited by 3
  3. 2024RenderBender: A Survey on Adversarial Attacks Using Differentiable Renderingcited by 3
  4. 2025Physical Adversarial Camouflage through Gradient Calibration and Regularizationcited by 3
  5. 2025Disrupting Vision-Language Model-Driven Navigation Services via Adversarial Object Fusioncited by 2
  6. 20253DGAA: Realistic and Robust 3D Gaussian-based Adversarial Attack for Autonomous Drivingcited by 2
  7. 2024Toward Robust and Accurate Adversarial Camouflage Generation against Vehicle Detectorscited by 1
  8. 2025SABER: Spatially Consistent 3D Universal Adversarial Objects for BEV Detectorscited by 1
  9. 2026Transferable Physical-World Adversarial Patches Against Object Detection in Autonomous Drivingcited by 1
  10. 2024PADetBench: Towards Benchmarking Physical Attacks against Object Detectioncited by 0
  11. 2024Adversarial Manhole: Challenging Monocular Depth Estimation and Semantic Segmentation Models with Patch Attackcited by 0
  12. 2024TACO: Adversarial Camouflage Optimization on Trucks to Fool Object Detectorscited by 0
  13. 2024Texture- and Shape-based Adversarial Attacks for Overhead Image Vehicle Detectioncited by 0
  14. 2025ComplicitSplat: Downstream Models are Vulnerable to Blackbox Attacks by 3D Gaussian Splat Camouflagescited by 0
  15. 2025OBJVanish: Physically Realizable Text-to-3D Adv. Generation of LiDAR-Invisible Objectscited by 0
  16. 2026R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splattingcited by 0
  17. 2026Still Camouflage, Moving Illusion: View-Induced Trajectory Manipulation in Autonomous Drivingcited by 0
  18. 2026Towards Universal Physical Adversarial Attacks via a Joint Multi-Objective and Multi-Model Optimization Frameworkcited by 0
  19. 2026ALLUDE: A Unified Evaluation System for Configurable Attacks in Differentiable Environmentscited by 0