mlsanityData to 7 Oct 2026

Cross-Modality Perturbation Synergy Attack for Person Re-identification

arXiv 2401.10090 ↗First posted 18 Jan 2024cs.CVcited by 45

Not on the map. Why?

Abstract (arXiv)

In recent years, there has been significant research focusing on addressing security concerns in single-modal person re-identification (ReID) systems that are based on RGB images. However, the safety of cross-modality scenarios, which are more commonly encountered in practical applications involving images captured by infrared cameras, has not received adequate attention. The main challenge in cross-modality ReID lies in effectively dealing with visual differences between different modalities. For instance, infrared images are typically grayscale, unlike visible images that contain color information. Existing attack methods have primarily focused on the characteristics of the visible image modality, overlooking the features of other modalities and the variations in data distribution among different modalities. This oversight can potentially undermine the effectiveness of these methods in image retrieval across diverse modalities. This study represents the first exploration into the security of cross-modality ReID models and proposes a universal perturbation attack specifically designed for cross-modality ReID. This attack optimizes perturbations by leveraging gradients from diverse modality data, thereby disrupting the discriminator and reinforcing the differences between modalities. We conducted experiments on three widely used cross-modality datasets, namely RegDB, SYSU, and LLCM. The results not only demonstrate the effectiveness of our method but also provide insights for future improvements in the robustness of cross-modality ReID systems. The code will be available at https://github.com/finger-monkey/cmps__attack.

Key facts. Cited by 45 papers in the map (data through 7 Oct 2026). Builds on 26 of its 55 references that are in the map. First posted on arXiv 18 Jan 2024.

Builds on

26 of 55 references.

References · 26

  1. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  2. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  3. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
  4. 2016Identity Mappings in Deep Residual Networkscited by 1,960
  5. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
  6. 2017In Defense of the Triplet Loss for Person Re-Identificationcited by 784
  7. 2016Universal adversarial perturbationscited by 774
  8. 2020Deep Learning for Person Re-identification: A Survey and Outlookcited by 547
  9. 2017Beyond Part Models: Person Retrieval with Refined Part Pooling (and a Strong Convolutional Baseline)cited by 472
  10. 2022X-CLIP: End-to-End Multi-grained Contrastive Learning for Video-Text Retrievalcited by 279
  11. 2016Person Re-identification: Past, Present and Futurecited by 180
  12. 2020Dynamic Dual-Attentive Aggregation Learning for Visible-Infrared Person Re-Identificationcited by 111
14 more
  1. 2019Functional Adversarial Attackscited by 82
  2. 2023Diverse Embedding Expansion Network and Low-Light Cross-Modality Benchmark for Visible-Infrared Person Re-identificationcited by 79
  3. 2017Camera Style Adaptation for Person Re-identificationcited by 67
  4. 2021Person Re-identification Method Based on Color Attack and Joint Defencecited by 56
  5. 2019Learning to Adapt Invariance in Memory for Person Re-identificationcited by 43
  6. 2020Transferable, Controllable, and Inconspicuous Adversarial Attacks on Person Re-identification With Deep Mis-Rankingcited by 42
  7. 2021Eliminate Deviation with Deviation for Data Augmentation and a General Multi-modal Data Learning Methodcited by 42
  8. 20233D-STMN: Dependency-Driven Superpoint-Text Matching Network for End-to-End 3D Referring Expression Segmentationcited by 36
  9. 2018Universal Perturbation Attack Against Image Retrievalcited by 31
  10. 2022Dynamic Prototype Mask for Occluded Person Re-Identificationcited by 30
  11. 2023UFineBench: Towards Text-based Person Retrieval with Ultra-fine Granularitycited by 30
  12. 2022Lifelong Person Re-Identification via Knowledge Refreshing and Consolidationcited by 26
  13. 2023Towards Local Visual Modeling for Image Captioningcited by 26
  14. 2023MRCN: A Novel Modality Restitution and Compensation Network for Visible-Infrared Person Re-identificationcited by 12

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 15; 2025: 20; 2026: 10.

45 papers.

Sort:

By area:

  1. 2025Towards Universal Modal Tracking with Online Dense Temporal Token Learningcited by 30
  2. 2025IDEA: Inverted Text with Cooperative Deformable Aggregation for Multi-modal Object Re-Identificationcited by 27
  3. 2024Exploring Color Invariance through Image-Level Ensemble Learningcited by 23
  4. 2024Beyond Augmentation: Empowering Model Robustness under Extreme Capture Environmentscited by 23
  5. 2024Learning Pattern-Specific Experts for Time Series Forecasting Under Patch-level Distribution Shiftcited by 23
  6. 2024Phy124: Fast Physics-Driven 4D Content Generation from a Single Imagecited by 22
  7. 2024Beyond Dropout: Robust Convolutional Neural Networks Based on Local Feature Maskingcited by 19
  8. 2024RLE: A Unified Perspective of Data Augmentation for Cross-Spectral Re-identificationcited by 15
  9. 2024Learning Commonality, Divergence and Variety for Unsupervised Visible-Infrared Person Re-identificationcited by 13
  10. 2024Cross-Modality Attack Boosted by Gradient-Evolutionary Multiform Optimizationcited by 11
  11. 2024Cross-Task Attack: A Self-Supervision Generative Framework Based on Attention Shiftcited by 9
  12. 2025LLaVA-ReID: Selective Multi-image Questioner for Interactive Person Re-Identificationcited by 9
33 more
  1. 2024Cross-video Identity Correlating for Person Re-identification Pre-trainingcited by 8
  2. 2025Self-Reinforcing Prototype Evolution with Dual-Knowledge Cooperation for Semi-Supervised Lifelong Person Re-Identificationcited by 7
  3. 2024Ask, Attend, Attack: A Effective Decision-Based Black-Box Targeted Attack for Image-to-Text Modelscited by 5
  4. 2025NEXT: Multi-Grained Mixture of Experts via Text-Modulation for Multi-Modal Object Re-Identificationcited by 5
  5. 2025A Theory-Inspired Framework for Few-Shot Cross-Modal Sketch Person Re-Identificationcited by 5
  6. 2024Seeing is Deceiving: Exploitation of Visual Pathways in Multi-Modal Language Modelscited by 4
  7. 2025VisionLaw: Inferring Interpretable Intrinsic Dynamics from Visual Observations via Bilevel Optimizationcited by 3
  8. 2026Statistical Characteristic-Guided Denoising for Rapid High-Resolution Transmission Electron Microscopy Imagingcited by 3
  9. 2025SSCM: A Spatial-Semantic Consistent Model for Multi-Contrast MRI Super-Resolutioncited by 2
  10. 2025Learning with Dual-level Noisy Correspondence for Multi-modal Entity Alignmentcited by 2
  11. 2025Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarkscited by 2
  12. 2026Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarkingcited by 2
  13. 2026Vision-Language Attribute Disentanglement and Reinforcement for Lifelong Person Re-Identificationcited by 2
  14. 2025RDI: An adversarial robustness evaluation metric for deep neural networks based on model statistical featurescited by 1
  15. 2025Geometrically Regularized Transfer Learning with On-Manifold and Off-Manifold Perturbationcited by 1
  16. 2026Editing on the Generative Manifold: A Theoretical and Empirical Study of General Diffusion-Based Image Editing Trade-offscited by 1
  17. 2024A Review of Image Retrieval Techniques: Data Augmentation and Adversarial Learning Approachescited by 0
  18. 2024Fusing Physics-Driven Strategies and Cross-Modal Adversarial Learning: Toward Multi-Domain Applicationscited by 0
  19. 2024EOV-Seg: Efficient Open-Vocabulary Panoptic Segmentationcited by 0
  20. 2025Modality Unified Attack for Omni-Modality Person Re-Identificationcited by 0
  21. 2025On the Mechanisms of Adversarial Data Augmentation for Robust and Adaptive Transfer Learningcited by 0
  22. 2025GAMA: Geometry-Aware Manifold Alignment via Structured Adversarial Perturbations for Robust Domain Adaptationcited by 0
  23. 2025Disentangled Geometric Alignment with Adaptive Contrastive Perturbation for Reliable Domain Transfercited by 0
  24. 2025Dynamic Epsilon Scheduling: A Multi-Factor Adaptive Perturbation Budget for Adversarial Trainingcited by 0
  25. 2025Dynamic Modality Scheduling for Multimodal Large Models via Confidence, Uncertainty, and Semantic Consistencycited by 0
  26. 2025Robust RGB-T Tracking via Learnable Visual Fourier Prompt Fine-tuning and Modality Fusion Prompt Generationcited by 0
  27. 2025DeRainMamba: A Frequency-Aware State Space Model with Detail Enhancement for Image Derainingcited by 0
  28. 2026UBATrack: Spatio-Temporal State Space Model for General Multi-Modal Trackingcited by 0
  29. 2026When Denoising Becomes Unsigning: Theoretical and Empirical Analysis of Watermark Fragility Under Diffusion-Based Image Editingcited by 0
  30. 2026Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarkingcited by 0
  31. 2026AI Evasion and Impersonation Attacks on Facial Re-Identification with Activation Map Explanationscited by 0
  32. 2026ReconMIL: Synergizing Latent Space Reconstruction with Bi-Stream Mamba for Whole Slide Image Analysiscited by 0
  33. 2026SCORE: SubDistribution-aware Collaborative Knowledge Reinforcing for Cloth-Hybrid Lifelong Person Re-Identificationcited by 0