Flexible Physical Camouflage Generation Based on a Differential Approach
Not on the map. Why?
Abstract (arXiv)
This study introduces a novel approach to neural rendering, specifically tailored for adversarial camouflage, within an extensive 3D rendering framework. Our method, named FPA, goes beyond traditional techniques by faithfully simulating lighting conditions and material variations, ensuring a nuanced and realistic representation of textures on a 3D target. To achieve this, we employ a generative approach that learns adversarial patterns from a diffusion model. This involves incorporating a specially designed adversarial loss and covert constraint loss to guarantee the adversarial and covert nature of the camouflage in the physical world. Furthermore, we showcase the effectiveness of the proposed camouflage in sticker mode, demonstrating its ability to cover the target without compromising adversarial information. Through empirical and physical experiments, FPA exhibits strong performance in terms of attack success rate and transferability. Additionally, the designed sticker-mode camouflage, coupled with a concealment constraint, adapts to the environment, yielding diverse styles of texture. Our findings highlight the versatility and efficacy of the FPA approach in adversarial camouflage applications.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 46 of its 70 references that are in the map. First posted on arXiv 21 Feb 2024.
Builds on
46 of 70 references.
References · 46
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
- 2020End-to-End Object Detection with Transformerscited by 7,384
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Mask R-CNNcited by 7,259
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2022Generative Adversarial Networkscited by 5,603
- 2015SSD: Single Shot MultiBox Detectorcited by 3,125
34 more
- 2018YOLOv3: An Incremental Improvementcited by 2,652
- 2017CARLA: An Open Urban Driving Simulatorcited by 2,431
- 2017Cascade R-CNN: Delving into High Quality Object Detectioncited by 1,275
- 2022YOLOv7: Trainable bag-of-freebies sets new state-of-the-art for real-time object detectorscited by 978
- 2019Object Detection in 20 Years: A Surveycited by 528
- 2023DETRs Beat YOLOs on Real-time Object Detectioncited by 526
- 2017Adversarial Patchcited by 514
- 2017Neural 3D Mesh Renderercited by 437
- 2019Fooling automated surveillance cameras: adversarial patches to attack person detectioncited by 268
- 2021The Temporal Opportunist: Self-Supervised Multi-Frame Monocular Depthcited by 190
- 2021On the Robustness of Vision Transformers to Adversarial Examplescited by 167
- 2018Physical Adversarial Examples for Object Detectorscited by 163
- 2018ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detectorcited by 159
- 2019Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectorscited by 155
- 2018DPatch: An Adversarial Patch Attack on Object Detectorscited by 146
- 2019Self-Supervised Monocular Depth Hintscited by 127
- 2021Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical Worldcited by 127
- 2022Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenoncited by 101
- 2022Adversarial Texture for Fooling Person Detectors in the Physical Worldcited by 96
- 2019On Physical Adversarial Patches for Object Detectioncited by 93
- 2019Universal Physical Camouflage Attacks on Object Detectorscited by 91
- 2021Improving Transferability of Adversarial Patches on Face Recognition with Generative Modelscited by 80
- 2021FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attackcited by 74
- 2021On Improving Adversarial Transferability of Vision Transformerscited by 70
- 2022Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patchescited by 57
- 2022DTA: Physical Camouflage Attacks using Differentiable Transformation Networkcited by 51
- 2023Physically Realizable Natural-Looking Clothing Textures Evade Person Detectors via 3D Modelingcited by 41
- 2020Physical Adversarial Attack on Vehicle Detector in the Carla Simulatorcited by 38
- 2023ACTIVE: Towards Highly Transferable 3D Physical Camouflage for Universal and Robust Vehicle Evasioncited by 31
- 2021Adversarial Mask: Real-World Universal Adversarial Attack on Face Recognition Modelcited by 19
- 2023Diffusion to Confusion: Naturalistic Adversarial Patch Generation Based on Diffusion Model for Object Detectorcited by 10
- 2020Can 3D Adversarial Logos Cloak Humans?cited by 7
- 2021Graph Routing between Capsulescited by 5
- 2022Deep-Attack over the Deep Reinforcement Learningcited by 5
Built on by
Citing papers per year: 2024: 4; 2025: 1; 2026: 2.
7 papers.
- 2024Attack Anything: Blind DNNs via Universal Background Adversarial Attackcited by 3
- 2024RenderBender: A Survey on Adversarial Attacks Using Differentiable Renderingcited by 3
- 2025UNDREAM: Bridging Differentiable Rendering and Photorealistic Simulation for End-to-end Adversarial Attackscited by 1
- 2024Physical Adversarial Attack on Monocular Depth Estimation via Shape-Varying Patchescited by 0
- 2024TACO: Adversarial Camouflage Optimization on Trucks to Fool Object Detectorscited by 0
- 2026ALLUDE: A Unified Evaluation System for Configurable Attacks in Differentiable Environmentscited by 0
- 2026Physical Adversarial Examples for Person Detectors in Thermal Images Based on 3D Modelingcited by 0
- 2026Physical Adversarial Examples for Person Detectors in Thermal Images Based on 3D Modeling31 Aug 2026
- 2026ALLUDE: A Unified Evaluation System for Configurable Attacks in Differentiable Environments19 Jul 2026
- 2025UNDREAM: Bridging Differentiable Rendering and Photorealistic Simulation for End-to-end Adversarial Attacks19 Oct 2025
- 2024RenderBender: A Survey on Adversarial Attacks Using Differentiable Rendering14 Nov 2024
- 2024TACO: Adversarial Camouflage Optimization on Trucks to Fool Object Detectors28 Oct 2024
- 2024Attack Anything: Blind DNNs via Universal Background Adversarial Attack17 Aug 2024
- 2024Physical Adversarial Attack on Monocular Depth Estimation via Shape-Varying Patches24 Jul 2024
Similar, not cited
Close in wording, no citation either way
- 2026VFACamou: View-Fused Adversarial Camouflage for Environment-Adaptive Physical Evasion
- 2024CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectors
- 2024BadPatch: Diffusion-Based Generation of Physical Adversarial Patches
- 2025Text-guided Controllable Diffusion for Realistic Camouflage Images Generation
- 2026Tex3D: Objects as Attack Surfaces via Adversarial 3D Textures for Vision-Language-Action Models
- 2024Diffusion Attack: Leveraging Stable Diffusion for Naturalistic Image Attacking
- 2024Imperceptible Protection against Style Imitation from Diffusion Models
- 2025Universal Camouflage Attack on Vision-Language Models for Autonomous Driving