A Survey and Evaluation of Adversarial Attacks for Object Detection
Not on the map. Why?
Abstract (arXiv)
Deep learning models achieve remarkable accuracy in computer vision tasks, yet remain vulnerable to adversarial examples--carefully crafted perturbations to input images that can deceive these models into making confident but incorrect predictions. This vulnerability pose significant risks in high-stakes applications such as autonomous vehicles, security surveillance, and safety-critical inspection systems. While the existing literature extensively covers adversarial attacks in image classification, comprehensive analyses of such attacks on object detection systems remain limited. This paper presents a novel taxonomic framework for categorizing adversarial attacks specific to object detection architectures, synthesizes existing robustness metrics, and provides a comprehensive empirical evaluation of state-of-the-art attack methodologies on popular object detection models, including both traditional detectors and modern detectors with vision-language pretraining. Through rigorous analysis of open-source attack implementations and their effectiveness across diverse detection architectures, we derive key insights into attack characteristics. Furthermore, we delineate critical research gaps and emerging challenges to guide future investigations in securing object detection systems against adversarial threats. Our findings establish a foundation for developing more robust detection models while highlighting the urgent need for standardized evaluation protocols in this rapidly evolving domain.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 60 of its 92 references that are in the map. First posted on arXiv 4 Aug 2024.
Builds on
60 of 92 references.
References · 60
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
- 2020End-to-End Object Detection with Transformerscited by 7,384
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2015You Only Look Once: Unified, Real-Time Object Detectioncited by 4,829
- 2020Deformable DETR: Deformable Transformers for End-to-End Object Detectioncited by 3,410
- 2023Grounding DINO: Marrying DINO with Grounded Pre-Training for Open-Set Object Detectioncited by 3,274
- 2015SSD: Single Shot MultiBox Detectorcited by 3,125
- 2018YOLOv3: An Incremental Improvementcited by 2,652
- 2013Rich feature hierarchies for accurate object detection and semantic segmentationcited by 2,160
- 2020YOLOv4: Optimal Speed and Accuracy of Object Detectioncited by 1,624
- 2016YOLO9000: Better, Faster, Strongercited by 1,429
38 more
- 2021Grounded Language-Image Pre-trainingcited by 1,147
- 2020RobustBench: a standardized adversarial robustness benchmarkcited by 659
- 2020Sparse R-CNN: End-to-End Object Detection with Learnable Proposalscited by 494
- 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 459
- 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 452
- 2017Adversarial Examples for Semantic Segmentation and Object Detectioncited by 275
- 2019Fooling automated surveillance cameras: adversarial patches to attack person detectioncited by 268
- 2019Libra R-CNN: Towards Balanced Learning for Object Detectioncited by 255
- 2021Understanding Robustness of Transformers for Image Classificationcited by 250
- 2021Are Transformers More Robust Than CNNs?cited by 187
- 2020FCOS: A simple and strong anchor-free object detectorcited by 171
- 2019Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectorscited by 155
- 2018DPatch: An Adversarial Patch Attack on Object Detectorscited by 146
- 2022Understanding The Robustness in Vision Transformerscited by 144
- 2020Adversarial Camouflage: Hiding Physical-World Attacks with Natural Stylescited by 126
- 2023ONE-PEACE: Exploring One General Representation Model Toward Unlimited Modalitiescited by 117
- 2018Transferable Adversarial Attacks for Image and Video Object Detectioncited by 109
- 2019ColorFool: Semantic Adversarial Colorizationcited by 89
- 2017Exploring the Landscape of Spatial Robustnesscited by 81
- 2022Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detectioncited by 79
- 2021RobustART: Benchmarking Robustness on Architecture Design and Training Techniquescited by 78
- 2021Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detectioncited by 67
- 2023How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defensescited by 65
- 2019Towards Adversarially Robust Object Detectioncited by 55
- 2020Detection as Regression: Certified Object Detection by Median Smoothingcited by 47
- 2023Human Pose as Compositional Tokenscited by 45
- 2023OmniVec: Learning robust representations with cross modal sharingcited by 44
- 2019FoveaBox: Beyond Anchor-based Object Detectorcited by 37
- 2019Role of Spatial Context in Adversarial Robustness for Object Detectioncited by 35
- 2021DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attackscited by 28
- 2022Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectorscited by 28
- 2021Class-Aware Robust Adversarial Training for Object Detectioncited by 27
- 2018Robust Adversarial Perturbation on Deep Proposal-based Modelscited by 26
- 2022Adversarially-Aware Robust Object Detectorcited by 20
- 2020DPAttack: Diffused Patch Attacks against Universal Object Detectioncited by 18
- 2021RPATTACK: Refined Patch Attack on General Object Detectorscited by 18
- 2021Context-Aware Transfer Attacks for Object Detectioncited by 18
- 2021Adversarial YOLO: Defense Human Detection Patch Attacks via Detecting Adversarial Patchescited by 17
50 most cited of 60 All 60 (JSON)
Built on by
Citing papers per year: 2025: 3; 2026: 4.
7 papers.
- 2025AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systemscited by 4
- 2025Out-of-the-box: Black-box Causal Attacks on Object Detectorscited by 1
- 2026Vision-Assisted Foundation Model for Solving Multi-Task Vehicle Routing Problemscited by 1
- 2025Structured Universal Adversarial Attacks on Object Detection for Video Sequencescited by 0
- 2026AD2: Analysis and Detection of Adversarial Threats in Visual Perception for End-to-End Autonomous Driving Systemscited by 0
- 2026Adversarial Attack and Disturbance Detection by Hadamard-Coded Output Representations for Object Detection and Semantic Segmentationcited by 0
- 2026LipSSD: Lipschitz-Constrained Single-Shot Detection for Adversarially Robust Object Detectioncited by 0
- 2026LipSSD: Lipschitz-Constrained Single-Shot Detection for Adversarially Robust Object Detection6 Jul 2026
- 2026Vision-Assisted Foundation Model for Solving Multi-Task Vehicle Routing Problems9 Jun 2026
- 2026Adversarial Attack and Disturbance Detection by Hadamard-Coded Output Representations for Object Detection and Semantic Segmentation8 Jun 2026
- 2026AD2: Analysis and Detection of Adversarial Threats in Visual Perception for End-to-End Autonomous Driving Systems10 Feb 2026
- 2025Out-of-the-box: Black-box Causal Attacks on Object Detectors3 Dec 2025
- 2025Structured Universal Adversarial Attacks on Object Detection for Video Sequences16 Oct 2025
- 2025AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems22 May 2025
Similar, not cited
Close in wording, no citation either way
- 2024Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey
- 2021Evaluating Adversarial Attacks on Driving Safety in Vision-Based Autonomous Vehicles
- 2026Corrupting Attention: Evasion-Based Adversarial Attacks on Encoder Attention in Detection Transformers
- 2026Detecting Adversarial Images through Response Profiles of Vision-Language Models
- 2024Enhancing Object Detection Robustness: Detecting and Restoring Confidence in the Presence of Adversarial Patch Attacks
- 2025Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems
- 2025MAA: Meticulous Adversarial Attack against Vision-Language Pre-trained Models
- 2026PHANTOM: A Large-Scale Dataset of Multimodal Adversarial Attacks for Vision-Language Models