mlsanityData to 7 Oct 2026

Flexible Physical Camouflage Generation Based on a Differential Approach

arXiv 2402.13575 ↗First posted 21 Feb 2024cs.CV cs.AIcited by 7

Not on the map. Why?

Abstract (arXiv)

This study introduces a novel approach to neural rendering, specifically tailored for adversarial camouflage, within an extensive 3D rendering framework. Our method, named FPA, goes beyond traditional techniques by faithfully simulating lighting conditions and material variations, ensuring a nuanced and realistic representation of textures on a 3D target. To achieve this, we employ a generative approach that learns adversarial patterns from a diffusion model. This involves incorporating a specially designed adversarial loss and covert constraint loss to guarantee the adversarial and covert nature of the camouflage in the physical world. Furthermore, we showcase the effectiveness of the proposed camouflage in sticker mode, demonstrating its ability to cover the target without compromising adversarial information. Through empirical and physical experiments, FPA exhibits strong performance in terms of attack success rate and transferability. Additionally, the designed sticker-mode camouflage, coupled with a concealment constraint, adapts to the environment, yielding diverse styles of texture. Our findings highlight the versatility and efficacy of the FPA approach in adversarial camouflage applications.

Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 46 of its 70 references that are in the map. First posted on arXiv 21 Feb 2024.

Builds on

46 of 70 references.

References · 46

  1. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  2. 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  5. 2020Denoising Diffusion Implicit Modelscited by 9,655
  6. 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
  7. 2020End-to-End Object Detection with Transformerscited by 7,384
  8. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  9. 2017Mask R-CNNcited by 7,259
  10. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  11. 2022Generative Adversarial Networkscited by 5,603
  12. 2015SSD: Single Shot MultiBox Detectorcited by 3,125
34 more
  1. 2018YOLOv3: An Incremental Improvementcited by 2,652
  2. 2017CARLA: An Open Urban Driving Simulatorcited by 2,431
  3. 2017Cascade R-CNN: Delving into High Quality Object Detectioncited by 1,275
  4. 2022YOLOv7: Trainable bag-of-freebies sets new state-of-the-art for real-time object detectorscited by 978
  5. 2019Object Detection in 20 Years: A Surveycited by 528
  6. 2023DETRs Beat YOLOs on Real-time Object Detectioncited by 526
  7. 2017Adversarial Patchcited by 514
  8. 2017Neural 3D Mesh Renderercited by 437
  9. 2019Fooling automated surveillance cameras: adversarial patches to attack person detectioncited by 268
  10. 2021The Temporal Opportunist: Self-Supervised Multi-Frame Monocular Depthcited by 190
  11. 2021On the Robustness of Vision Transformers to Adversarial Examplescited by 167
  12. 2018Physical Adversarial Examples for Object Detectorscited by 163
  13. 2018ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detectorcited by 159
  14. 2019Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectorscited by 155
  15. 2018DPatch: An Adversarial Patch Attack on Object Detectorscited by 146
  16. 2019Self-Supervised Monocular Depth Hintscited by 127
  17. 2021Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical Worldcited by 127
  18. 2022Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenoncited by 101
  19. 2022Adversarial Texture for Fooling Person Detectors in the Physical Worldcited by 96
  20. 2019On Physical Adversarial Patches for Object Detectioncited by 93
  21. 2019Universal Physical Camouflage Attacks on Object Detectorscited by 91
  22. 2021Improving Transferability of Adversarial Patches on Face Recognition with Generative Modelscited by 80
  23. 2021FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attackcited by 74
  24. 2021On Improving Adversarial Transferability of Vision Transformerscited by 70
  25. 2022Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patchescited by 57
  26. 2022DTA: Physical Camouflage Attacks using Differentiable Transformation Networkcited by 51
  27. 2023Physically Realizable Natural-Looking Clothing Textures Evade Person Detectors via 3D Modelingcited by 41
  28. 2020Physical Adversarial Attack on Vehicle Detector in the Carla Simulatorcited by 38
  29. 2023ACTIVE: Towards Highly Transferable 3D Physical Camouflage for Universal and Robust Vehicle Evasioncited by 31
  30. 2021Adversarial Mask: Real-World Universal Adversarial Attack on Face Recognition Modelcited by 19
  31. 2023Diffusion to Confusion: Naturalistic Adversarial Patch Generation Based on Diffusion Model for Object Detectorcited by 10
  32. 2020Can 3D Adversarial Logos Cloak Humans?cited by 7
  33. 2021Graph Routing between Capsulescited by 5
  34. 2022Deep-Attack over the Deep Reinforcement Learningcited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 4; 2025: 1; 2026: 2.

7 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026VFACamou: View-Fused Adversarial Camouflage for Environment-Adaptive Physical Evasion
  2. 2024CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectors
  3. 2024BadPatch: Diffusion-Based Generation of Physical Adversarial Patches
  4. 2025Text-guided Controllable Diffusion for Realistic Camouflage Images Generation
  5. 2026Tex3D: Objects as Attack Surfaces via Adversarial 3D Textures for Vision-Language-Action Models
  6. 2024Diffusion Attack: Leveraging Stable Diffusion for Naturalistic Image Attacking
  7. 2024Imperceptible Protection against Style Imitation from Diffusion Models
  8. 2025Universal Camouflage Attack on Vision-Language Models for Autonomous Driving