Cross-Modality Perturbation Synergy Attack for Person Re-identification
Not on the map. Why?
Abstract (arXiv)
In recent years, there has been significant research focusing on addressing security concerns in single-modal person re-identification (ReID) systems that are based on RGB images. However, the safety of cross-modality scenarios, which are more commonly encountered in practical applications involving images captured by infrared cameras, has not received adequate attention. The main challenge in cross-modality ReID lies in effectively dealing with visual differences between different modalities. For instance, infrared images are typically grayscale, unlike visible images that contain color information. Existing attack methods have primarily focused on the characteristics of the visible image modality, overlooking the features of other modalities and the variations in data distribution among different modalities. This oversight can potentially undermine the effectiveness of these methods in image retrieval across diverse modalities. This study represents the first exploration into the security of cross-modality ReID models and proposes a universal perturbation attack specifically designed for cross-modality ReID. This attack optimizes perturbations by leveraging gradients from diverse modality data, thereby disrupting the discriminator and reinforcing the differences between modalities. We conducted experiments on three widely used cross-modality datasets, namely RegDB, SYSU, and LLCM. The results not only demonstrate the effectiveness of our method but also provide insights for future improvements in the robustness of cross-modality ReID systems. The code will be available at https://github.com/finger-monkey/cmps__attack.
Key facts. Cited by 45 papers in the map (data through 7 Oct 2026). Builds on 26 of its 55 references that are in the map. First posted on arXiv 18 Jan 2024.
Builds on
26 of 55 references.
References · 26
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2016Identity Mappings in Deep Residual Networkscited by 1,960
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2017In Defense of the Triplet Loss for Person Re-Identificationcited by 784
- 2016Universal adversarial perturbationscited by 774
- 2020Deep Learning for Person Re-identification: A Survey and Outlookcited by 547
- 2017Beyond Part Models: Person Retrieval with Refined Part Pooling (and a Strong Convolutional Baseline)cited by 472
- 2022X-CLIP: End-to-End Multi-grained Contrastive Learning for Video-Text Retrievalcited by 279
- 2016Person Re-identification: Past, Present and Futurecited by 180
- 2020Dynamic Dual-Attentive Aggregation Learning for Visible-Infrared Person Re-Identificationcited by 111
14 more
- 2019Functional Adversarial Attackscited by 82
- 2023Diverse Embedding Expansion Network and Low-Light Cross-Modality Benchmark for Visible-Infrared Person Re-identificationcited by 79
- 2017Camera Style Adaptation for Person Re-identificationcited by 67
- 2021Person Re-identification Method Based on Color Attack and Joint Defencecited by 56
- 2019Learning to Adapt Invariance in Memory for Person Re-identificationcited by 43
- 2020Transferable, Controllable, and Inconspicuous Adversarial Attacks on Person Re-identification With Deep Mis-Rankingcited by 42
- 2021Eliminate Deviation with Deviation for Data Augmentation and a General Multi-modal Data Learning Methodcited by 42
- 20233D-STMN: Dependency-Driven Superpoint-Text Matching Network for End-to-End 3D Referring Expression Segmentationcited by 36
- 2018Universal Perturbation Attack Against Image Retrievalcited by 31
- 2022Dynamic Prototype Mask for Occluded Person Re-Identificationcited by 30
- 2023UFineBench: Towards Text-based Person Retrieval with Ultra-fine Granularitycited by 30
- 2022Lifelong Person Re-Identification via Knowledge Refreshing and Consolidationcited by 26
- 2023Towards Local Visual Modeling for Image Captioningcited by 26
- 2023MRCN: A Novel Modality Restitution and Compensation Network for Visible-Infrared Person Re-identificationcited by 12
Built on by
Citing papers per year: 2024: 15; 2025: 20; 2026: 10.
45 papers.
Sort:
By area:
- 2025Towards Universal Modal Tracking with Online Dense Temporal Token Learningcited by 30
- 2025IDEA: Inverted Text with Cooperative Deformable Aggregation for Multi-modal Object Re-Identificationcited by 27
- 2024Exploring Color Invariance through Image-Level Ensemble Learningcited by 23
- 2024Beyond Augmentation: Empowering Model Robustness under Extreme Capture Environmentscited by 23
- 2024Learning Pattern-Specific Experts for Time Series Forecasting Under Patch-level Distribution Shiftcited by 23
- 2024Phy124: Fast Physics-Driven 4D Content Generation from a Single Imagecited by 22
- 2024Beyond Dropout: Robust Convolutional Neural Networks Based on Local Feature Maskingcited by 19
- 2024RLE: A Unified Perspective of Data Augmentation for Cross-Spectral Re-identificationcited by 15
- 2024Learning Commonality, Divergence and Variety for Unsupervised Visible-Infrared Person Re-identificationcited by 13
- 2024Cross-Modality Attack Boosted by Gradient-Evolutionary Multiform Optimizationcited by 11
- 2024Cross-Task Attack: A Self-Supervision Generative Framework Based on Attention Shiftcited by 9
- 2025LLaVA-ReID: Selective Multi-image Questioner for Interactive Person Re-Identificationcited by 9
33 more
- 2024Cross-video Identity Correlating for Person Re-identification Pre-trainingcited by 8
- 2025Self-Reinforcing Prototype Evolution with Dual-Knowledge Cooperation for Semi-Supervised Lifelong Person Re-Identificationcited by 7
- 2024Ask, Attend, Attack: A Effective Decision-Based Black-Box Targeted Attack for Image-to-Text Modelscited by 5
- 2025NEXT: Multi-Grained Mixture of Experts via Text-Modulation for Multi-Modal Object Re-Identificationcited by 5
- 2025A Theory-Inspired Framework for Few-Shot Cross-Modal Sketch Person Re-Identificationcited by 5
- 2024Seeing is Deceiving: Exploitation of Visual Pathways in Multi-Modal Language Modelscited by 4
- 2025VisionLaw: Inferring Interpretable Intrinsic Dynamics from Visual Observations via Bilevel Optimizationcited by 3
- 2026Statistical Characteristic-Guided Denoising for Rapid High-Resolution Transmission Electron Microscopy Imagingcited by 3
- 2025SSCM: A Spatial-Semantic Consistent Model for Multi-Contrast MRI Super-Resolutioncited by 2
- 2025Learning with Dual-level Noisy Correspondence for Multi-modal Entity Alignmentcited by 2
- 2025Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarkscited by 2
- 2026Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarkingcited by 2
- 2026Vision-Language Attribute Disentanglement and Reinforcement for Lifelong Person Re-Identificationcited by 2
- 2025RDI: An adversarial robustness evaluation metric for deep neural networks based on model statistical featurescited by 1
- 2025Geometrically Regularized Transfer Learning with On-Manifold and Off-Manifold Perturbationcited by 1
- 2026Editing on the Generative Manifold: A Theoretical and Empirical Study of General Diffusion-Based Image Editing Trade-offscited by 1
- 2024A Review of Image Retrieval Techniques: Data Augmentation and Adversarial Learning Approachescited by 0
- 2024Fusing Physics-Driven Strategies and Cross-Modal Adversarial Learning: Toward Multi-Domain Applicationscited by 0
- 2024EOV-Seg: Efficient Open-Vocabulary Panoptic Segmentationcited by 0
- 2025Modality Unified Attack for Omni-Modality Person Re-Identificationcited by 0
- 2025On the Mechanisms of Adversarial Data Augmentation for Robust and Adaptive Transfer Learningcited by 0
- 2025GAMA: Geometry-Aware Manifold Alignment via Structured Adversarial Perturbations for Robust Domain Adaptationcited by 0
- 2025Disentangled Geometric Alignment with Adaptive Contrastive Perturbation for Reliable Domain Transfercited by 0
- 2025Dynamic Epsilon Scheduling: A Multi-Factor Adaptive Perturbation Budget for Adversarial Trainingcited by 0
- 2025Dynamic Modality Scheduling for Multimodal Large Models via Confidence, Uncertainty, and Semantic Consistencycited by 0
- 2025Robust RGB-T Tracking via Learnable Visual Fourier Prompt Fine-tuning and Modality Fusion Prompt Generationcited by 0
- 2025DeRainMamba: A Frequency-Aware State Space Model with Detail Enhancement for Image Derainingcited by 0
- 2026UBATrack: Spatio-Temporal State Space Model for General Multi-Modal Trackingcited by 0
- 2026When Denoising Becomes Unsigning: Theoretical and Empirical Analysis of Watermark Fragility Under Diffusion-Based Image Editingcited by 0
- 2026Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarkingcited by 0
- 2026AI Evasion and Impersonation Attacks on Facial Re-Identification with Activation Map Explanationscited by 0
- 2026ReconMIL: Synergizing Latent Space Reconstruction with Bi-Stream Mamba for Whole Slide Image Analysiscited by 0
- 2026SCORE: SubDistribution-aware Collaborative Knowledge Reinforcing for Cloth-Hybrid Lifelong Person Re-Identificationcited by 0
- 2026SCORE: SubDistribution-aware Collaborative Knowledge Reinforcing for Cloth-Hybrid Lifelong Person Re-Identification11 Sep 2026
- 2026Editing on the Generative Manifold: A Theoretical and Empirical Study of General Diffusion-Based Image Editing Trade-offs31 Mar 2026
- 2026ReconMIL: Synergizing Latent Space Reconstruction with Bi-Stream Mamba for Whole Slide Image Analysis20 Mar 2026
- 2026Vision-Language Attribute Disentanglement and Reinforcement for Lifelong Person Re-Identification20 Mar 2026
- 2026Statistical Characteristic-Guided Denoising for Rapid High-Resolution Transmission Electron Microscopy Imaging19 Mar 2026
- 2026AI Evasion and Impersonation Attacks on Facial Re-Identification with Activation Map Explanations16 Mar 2026
- 2026Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarking13 Mar 2026
- 2026When Denoising Becomes Unsigning: Theoretical and Empirical Analysis of Watermark Fragility Under Diffusion-Based Image Editing5 Mar 2026
- 2026Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarking24 Feb 2026
- 2026UBATrack: Spatio-Temporal State Space Model for General Multi-Modal Tracking21 Jan 2026
- 2025A Theory-Inspired Framework for Few-Shot Cross-Modal Sketch Person Re-Identification24 Nov 2025
- 2025Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarks5 Nov 2025
33 more
- 2025Learning with Dual-level Noisy Correspondence for Multi-modal Entity Alignment21 Oct 2025
- 2025DeRainMamba: A Frequency-Aware State Space Model with Detail Enhancement for Image Deraining8 Oct 2025
- 2025Robust RGB-T Tracking via Learnable Visual Fourier Prompt Fine-tuning and Modality Fusion Prompt Generation24 Sep 2025
- 2025SSCM: A Spatial-Semantic Consistent Model for Multi-Contrast MRI Super-Resolution23 Sep 2025
- 2025VisionLaw: Inferring Interpretable Intrinsic Dynamics from Visual Observations via Bilevel Optimization19 Aug 2025
- 2025Towards Universal Modal Tracking with Online Dense Temporal Token Learning27 Jul 2025
- 2025Self-Reinforcing Prototype Evolution with Dual-Knowledge Cooperation for Semi-Supervised Lifelong Person Re-Identification2 Jul 2025
- 2025Dynamic Modality Scheduling for Multimodal Large Models via Confidence, Uncertainty, and Semantic Consistency15 Jun 2025
- 2025Dynamic Epsilon Scheduling: A Multi-Factor Adaptive Perturbation Budget for Adversarial Training3 Jun 2025
- 2025NEXT: Multi-Grained Mixture of Experts via Text-Modulation for Multi-Modal Object Re-Identification26 May 2025
- 2025Disentangled Geometric Alignment with Adaptive Contrastive Perturbation for Reliable Domain Transfer21 May 2025
- 2025GAMA: Geometry-Aware Manifold Alignment via Structured Adversarial Perturbations for Robust Domain Adaptation21 May 2025
- 2025Geometrically Regularized Transfer Learning with On-Manifold and Off-Manifold Perturbation21 May 2025
- 2025On the Mechanisms of Adversarial Data Augmentation for Robust and Adaptive Transfer Learning19 May 2025
- 2025RDI: An adversarial robustness evaluation metric for deep neural networks based on model statistical features16 Apr 2025
- 2025LLaVA-ReID: Selective Multi-image Questioner for Interactive Person Re-Identification14 Apr 2025
- 2025IDEA: Inverted Text with Cooperative Deformable Aggregation for Multi-modal Object Re-Identification13 Mar 2025
- 2025Modality Unified Attack for Omni-Modality Person Re-Identification22 Jan 2025
- 2024EOV-Seg: Efficient Open-Vocabulary Panoptic Segmentation11 Dec 2024
- 2024Fusing Physics-Driven Strategies and Cross-Modal Adversarial Learning: Toward Multi-Domain Applications30 Nov 2024
- 2024Seeing is Deceiving: Exploitation of Visual Pathways in Multi-Modal Language Models7 Nov 2024
- 2024RLE: A Unified Perspective of Data Augmentation for Cross-Spectral Re-identification2 Nov 2024
- 2024Learning Pattern-Specific Experts for Time Series Forecasting Under Patch-level Distribution Shift13 Oct 2024
- 2024Cross-video Identity Correlating for Person Re-identification Pre-training27 Sep 2024
- 2024Cross-Modality Attack Boosted by Gradient-Evolutionary Multiform Optimization26 Sep 2024
- 2024Phy124: Fast Physics-Driven 4D Content Generation from a Single Image11 Sep 2024
- 2024A Review of Image Retrieval Techniques: Data Augmentation and Adversarial Learning Approaches2 Sep 2024
- 2024Ask, Attend, Attack: A Effective Decision-Based Black-Box Targeted Attack for Image-to-Text Models16 Aug 2024
- 2024Cross-Task Attack: A Self-Supervision Generative Framework Based on Attention Shift18 Jul 2024
- 2024Beyond Dropout: Robust Convolutional Neural Networks Based on Local Feature Masking18 Jul 2024
- 2024Beyond Augmentation: Empowering Model Robustness under Extreme Capture Environments18 Jul 2024
- 2024Learning Commonality, Divergence and Variety for Unsupervised Visible-Infrared Person Re-identification29 Feb 2024
- 2024Exploring Color Invariance through Image-Level Ensemble Learning19 Jan 2024
- 2024Phy124: Fast Physics-Driven 4D Content Generation from a Single Imagecited by 22
- 2025Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarkscited by 2
- 2026Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarkingcited by 2
- 2026Editing on the Generative Manifold: A Theoretical and Empirical Study of General Diffusion-Based Image Editing Trade-offscited by 1
- 2026When Denoising Becomes Unsigning: Theoretical and Empirical Analysis of Watermark Fragility Under Diffusion-Based Image Editingcited by 0
- 2026Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarkingcited by 0
- 2026Editing on the Generative Manifold: A Theoretical and Empirical Study of General Diffusion-Based Image Editing Trade-offs31 Mar 2026
- 2026Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarking13 Mar 2026
- 2026When Denoising Becomes Unsigning: Theoretical and Empirical Analysis of Watermark Fragility Under Diffusion-Based Image Editing5 Mar 2026
- 2026Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarking24 Feb 2026
- 2025Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarks5 Nov 2025
- 2024Phy124: Fast Physics-Driven 4D Content Generation from a Single Image11 Sep 2024
- 2025Towards Universal Modal Tracking with Online Dense Temporal Token Learningcited by 30
- 2025IDEA: Inverted Text with Cooperative Deformable Aggregation for Multi-modal Object Re-Identificationcited by 27
- 2024Exploring Color Invariance through Image-Level Ensemble Learningcited by 23
- 2024Beyond Augmentation: Empowering Model Robustness under Extreme Capture Environmentscited by 23
- 2024Learning Pattern-Specific Experts for Time Series Forecasting Under Patch-level Distribution Shiftcited by 23
- 2024Beyond Dropout: Robust Convolutional Neural Networks Based on Local Feature Maskingcited by 19
- 2024RLE: A Unified Perspective of Data Augmentation for Cross-Spectral Re-identificationcited by 15
- 2024Learning Commonality, Divergence and Variety for Unsupervised Visible-Infrared Person Re-identificationcited by 13
- 2024Cross-Modality Attack Boosted by Gradient-Evolutionary Multiform Optimizationcited by 11
- 2024Cross-Task Attack: A Self-Supervision Generative Framework Based on Attention Shiftcited by 9
- 2025LLaVA-ReID: Selective Multi-image Questioner for Interactive Person Re-Identificationcited by 9
- 2024Cross-video Identity Correlating for Person Re-identification Pre-trainingcited by 8
12 most cited of 35 All 35 (JSON)
- 2026SCORE: SubDistribution-aware Collaborative Knowledge Reinforcing for Cloth-Hybrid Lifelong Person Re-Identification11 Sep 2026
- 2026Vision-Language Attribute Disentanglement and Reinforcement for Lifelong Person Re-Identification20 Mar 2026
- 2026Statistical Characteristic-Guided Denoising for Rapid High-Resolution Transmission Electron Microscopy Imaging19 Mar 2026
- 2026AI Evasion and Impersonation Attacks on Facial Re-Identification with Activation Map Explanations16 Mar 2026
- 2025A Theory-Inspired Framework for Few-Shot Cross-Modal Sketch Person Re-Identification24 Nov 2025
- 2025Learning with Dual-level Noisy Correspondence for Multi-modal Entity Alignment21 Oct 2025
- 2025DeRainMamba: A Frequency-Aware State Space Model with Detail Enhancement for Image Deraining8 Oct 2025
- 2025Robust RGB-T Tracking via Learnable Visual Fourier Prompt Fine-tuning and Modality Fusion Prompt Generation24 Sep 2025
- 2025SSCM: A Spatial-Semantic Consistent Model for Multi-Contrast MRI Super-Resolution23 Sep 2025
- 2025VisionLaw: Inferring Interpretable Intrinsic Dynamics from Visual Observations via Bilevel Optimization19 Aug 2025
- 2025Towards Universal Modal Tracking with Online Dense Temporal Token Learning27 Jul 2025
- 2025Self-Reinforcing Prototype Evolution with Dual-Knowledge Cooperation for Semi-Supervised Lifelong Person Re-Identification2 Jul 2025
12 newest of 35 All 35 (JSON)