ACTIVE: Towards Highly Transferable 3D Physical Camouflage for Universal and Robust Vehicle Evasion
Not on the map. Why?
Abstract (arXiv)
Adversarial camouflage has garnered attention for its ability to attack object detectors from any viewpoint by covering the entire object's surface. However, universality and robustness in existing methods often fall short as the transferability aspect is often overlooked, thus restricting their application only to a specific target with limited performance. To address these challenges, we present Adversarial Camouflage for Transferable and Intensive Vehicle Evasion (ACTIVE), a state-of-the-art physical camouflage attack framework designed to generate universal and robust adversarial camouflage capable of concealing any 3D vehicle from detectors. Our framework incorporates innovative techniques to enhance universality and robustness, including a refined texture rendering that enables common texture application to different vehicles without being constrained to a specific texture map, a novel stealth loss that renders the vehicle undetectable, and a smooth and camouflage loss to enhance the naturalness of the adversarial camouflage. Our extensive experiments on 15 different models show that ACTIVE consistently outperforms existing works on various public detectors, including the latest YOLOv7. Notably, our universality evaluations reveal promising transferability to other vehicle classes, tasks (segmentation models), and the real world, not just other vehicles.
Key facts. Cited by 31 papers in the map (data through 14 Oct 2026). Builds on 36 of its 50 references that are in the map. First posted on arXiv 14 Aug 2023.
Builds on
36 of 50 references.
References · 36
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,639
- 2020End-to-End Object Detection with Transformerscited by 7,414
- 2017Mask R-CNNcited by 7,277
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,795
- 2016The Cityscapes Dataset for Semantic Urban Scene Understandingcited by 4,444
- 2020Deformable DETR: Deformable Transformers for End-to-End Object Detectioncited by 3,422
- 2015SSD: Single Shot MultiBox Detectorcited by 3,130
- 2018YOLOv3: An Incremental Improvementcited by 2,659
- 2017CARLA: An Open Urban Driving Simulatorcited by 2,449
24 more
- 2021Pyramid Vision Transformer: A Versatile Backbone for Dense Prediction without Convolutionscited by 1,962
- 2019MMDetection: Open MMLab Detection Toolbox and Benchmarkcited by 1,385
- 2021YOLOX: Exceeding YOLO Series in 2021cited by 1,071
- 2019EfficientDet: Scalable and Efficient Object Detectioncited by 1,020
- 2022YOLOv7: Trainable bag-of-freebies sets new state-of-the-art for real-time object detectorscited by 982
- 2017Adversarial Patchcited by 517
- 2020Sparse R-CNN: End-to-End Object Detection with Learnable Proposalscited by 495
- 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 460
- 2017Neural 3D Mesh Renderercited by 437
- 2014Understanding Deep Image Representations by Inverting Themcited by 403
- 2020MaX-DeepLab: End-to-End Panoptic Segmentation with Mask Transformerscited by 355
- 2020Axial-DeepLab: Stand-Alone Axial-Attention for Panoptic Segmentationcited by 326
- 2019Fooling automated surveillance cameras: adversarial patches to attack person detectioncited by 268
- 2016Speed/accuracy trade-offs for modern convolutional object detectorscited by 198
- 2021On the Robustness of Vision Transformers to Adversarial Examplescited by 167
- 2021Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical Worldcited by 127
- 2020Dynamic R-CNN: Towards High Quality Object Detection via Dynamic Trainingcited by 103
- 2021FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attackcited by 74
- 2021Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNscited by 57
- 2022DTA: Physical Camouflage Attacks using Differentiable Transformation Networkcited by 51
- 2021Reveal of Vision Transformers Robustness against Adversarial Attackscited by 43
- 2020Physical Adversarial Attack on Vehicle Detector in the Carla Simulatorcited by 38
- 2020Scaling Wide Residual Networks for Panoptic Segmentationcited by 32
- 2022A Survey on Physical Adversarial Attack in Computer Visioncited by 25
Built on by
Citing papers per year: 2023: 3; 2024: 15; 2025: 8; 2026: 5.
31 papers.
Sort:
By area:
- 2024Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Drivingcited by 32
- 2023Towards Transferable Targeted 3D Adversarial Attack in the Physical Worldcited by 25
- 2024RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generationcited by 18
- 2023Adversarial Examples in the Physical World: A Surveycited by 10
- 2025Safety of Embodied Navigation: A Surveycited by 10
- 2024Rethinking Impersonation and Dodging Attacks on Face Recognition Systemscited by 8
- 2024Flexible Physical Camouflage Generation Based on a Differential Approachcited by 7
- 20253D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generationcited by 7
- 2024Towards Physically Realizable Adversarial Attacks in Embodied Vision Navigationcited by 6
- 2023Embodied Laser Attack:Leveraging Scene Priors to Achieve Agent-based Robust Non-contact Attackscited by 4
- 2024Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Modelscited by 4
- 2024CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectorscited by 4
19 more
- 2024Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentationcited by 4
- 2024Attack Anything: Blind DNNs via Universal Background Adversarial Attackcited by 3
- 2024RenderBender: A Survey on Adversarial Attacks Using Differentiable Renderingcited by 3
- 2025Physical Adversarial Camouflage through Gradient Calibration and Regularizationcited by 3
- 2025Disrupting Vision-Language Model-Driven Navigation Services via Adversarial Object Fusioncited by 2
- 20253DGAA: Realistic and Robust 3D Gaussian-based Adversarial Attack for Autonomous Drivingcited by 2
- 2024Toward Robust and Accurate Adversarial Camouflage Generation against Vehicle Detectorscited by 1
- 2025SABER: Spatially Consistent 3D Universal Adversarial Objects for BEV Detectorscited by 1
- 2026Transferable Physical-World Adversarial Patches Against Object Detection in Autonomous Drivingcited by 1
- 2024PADetBench: Towards Benchmarking Physical Attacks against Object Detectioncited by 0
- 2024Adversarial Manhole: Challenging Monocular Depth Estimation and Semantic Segmentation Models with Patch Attackcited by 0
- 2024TACO: Adversarial Camouflage Optimization on Trucks to Fool Object Detectorscited by 0
- 2024Texture- and Shape-based Adversarial Attacks for Overhead Image Vehicle Detectioncited by 0
- 2025ComplicitSplat: Downstream Models are Vulnerable to Blackbox Attacks by 3D Gaussian Splat Camouflagescited by 0
- 2025OBJVanish: Physically Realizable Text-to-3D Adv. Generation of LiDAR-Invisible Objectscited by 0
- 2026R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splattingcited by 0
- 2026Still Camouflage, Moving Illusion: View-Induced Trajectory Manipulation in Autonomous Drivingcited by 0
- 2026Towards Universal Physical Adversarial Attacks via a Joint Multi-Objective and Multi-Model Optimization Frameworkcited by 0
- 2026ALLUDE: A Unified Evaluation System for Configurable Attacks in Differentiable Environmentscited by 0
- 2026ALLUDE: A Unified Evaluation System for Configurable Attacks in Differentiable Environments19 Jul 2026
- 2026Towards Universal Physical Adversarial Attacks via a Joint Multi-Objective and Multi-Model Optimization Framework18 May 2026
- 2026Still Camouflage, Moving Illusion: View-Induced Trajectory Manipulation in Autonomous Driving12 May 2026
- 2026Transferable Physical-World Adversarial Patches Against Object Detection in Autonomous Driving25 Apr 2026
- 2026R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting27 Mar 2026
- 2025OBJVanish: Physically Realizable Text-to-3D Adv. Generation of LiDAR-Invisible Objects8 Oct 2025
- 2025ComplicitSplat: Downstream Models are Vulnerable to Blackbox Attacks by 3D Gaussian Splat Camouflages16 Aug 2025
- 2025Safety of Embodied Navigation: A Survey7 Aug 2025
- 2025Physical Adversarial Camouflage through Gradient Calibration and Regularization7 Aug 2025
- 20253DGAA: Realistic and Robust 3D Gaussian-based Adversarial Attack for Autonomous Driving14 Jul 2025
- 20253D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation2 Jul 2025
- 2025Disrupting Vision-Language Model-Driven Navigation Services via Adversarial Object Fusion29 May 2025
19 more
- 2025SABER: Spatially Consistent 3D Universal Adversarial Objects for BEV Detectors28 May 2025
- 2024Texture- and Shape-based Adversarial Attacks for Overhead Image Vehicle Detection20 Dec 2024
- 2024Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation23 Nov 2024
- 2024Toward Robust and Accurate Adversarial Camouflage Generation against Vehicle Detectors15 Nov 2024
- 2024RenderBender: A Survey on Adversarial Attacks Using Differentiable Rendering14 Nov 2024
- 2024TACO: Adversarial Camouflage Optimization on Trucks to Fool Object Detectors28 Oct 2024
- 2024CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectors26 Sep 2024
- 2024Towards Physically Realizable Adversarial Attacks in Embodied Vision Navigation16 Sep 2024
- 2024Adversarial Manhole: Challenging Monocular Depth Estimation and Semantic Segmentation Models with Patch Attack27 Aug 2024
- 2024Attack Anything: Blind DNNs via Universal Background Adversarial Attack17 Aug 2024
- 2024PADetBench: Towards Benchmarking Physical Attacks against Object Detection17 Aug 2024
- 2024Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models27 May 2024
- 2024Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Driving26 Mar 2024
- 2024RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generation24 Feb 2024
- 2024Flexible Physical Camouflage Generation Based on a Differential Approach21 Feb 2024
- 2024Rethinking Impersonation and Dodging Attacks on Face Recognition Systems17 Jan 2024
- 2023Towards Transferable Targeted 3D Adversarial Attack in the Physical World15 Dec 2023
- 2023Embodied Laser Attack:Leveraging Scene Priors to Achieve Agent-based Robust Non-contact Attacks15 Dec 2023
- 2023Adversarial Examples in the Physical World: A Survey1 Nov 2023
- 2024Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Drivingcited by 32
- 2023Towards Transferable Targeted 3D Adversarial Attack in the Physical Worldcited by 25
- 2024RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generationcited by 18
- 2023Adversarial Examples in the Physical World: A Surveycited by 10
- 2025Safety of Embodied Navigation: A Surveycited by 10
- 2024Rethinking Impersonation and Dodging Attacks on Face Recognition Systemscited by 8
- 2024Flexible Physical Camouflage Generation Based on a Differential Approachcited by 7
- 20253D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generationcited by 7
- 2024Towards Physically Realizable Adversarial Attacks in Embodied Vision Navigationcited by 6
- 2023Embodied Laser Attack:Leveraging Scene Priors to Achieve Agent-based Robust Non-contact Attackscited by 4
- 2024Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Modelscited by 4
- 2024CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectorscited by 4
12 most cited of 29 All 29 (JSON)
- 2026ALLUDE: A Unified Evaluation System for Configurable Attacks in Differentiable Environments19 Jul 2026
- 2026Towards Universal Physical Adversarial Attacks via a Joint Multi-Objective and Multi-Model Optimization Framework18 May 2026
- 2026Transferable Physical-World Adversarial Patches Against Object Detection in Autonomous Driving25 Apr 2026
- 2026R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting27 Mar 2026
- 2025OBJVanish: Physically Realizable Text-to-3D Adv. Generation of LiDAR-Invisible Objects8 Oct 2025
- 2025ComplicitSplat: Downstream Models are Vulnerable to Blackbox Attacks by 3D Gaussian Splat Camouflages16 Aug 2025
- 2025Safety of Embodied Navigation: A Survey7 Aug 2025
- 2025Physical Adversarial Camouflage through Gradient Calibration and Regularization7 Aug 2025
- 20253DGAA: Realistic and Robust 3D Gaussian-based Adversarial Attack for Autonomous Driving14 Jul 2025
- 20253D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation2 Jul 2025
- 2025SABER: Spatially Consistent 3D Universal Adversarial Objects for BEV Detectors28 May 2025
- 2024Texture- and Shape-based Adversarial Attacks for Overhead Image Vehicle Detection20 Dec 2024
12 newest of 29 All 29 (JSON)