mlsanityData to 7 Oct 2026

A Survey and Evaluation of Adversarial Attacks for Object Detection

arXiv 2408.01934 ↗First posted 4 Aug 2024cs.CVcited by 7

Not on the map. Why?

Abstract (arXiv)

Deep learning models achieve remarkable accuracy in computer vision tasks, yet remain vulnerable to adversarial examples--carefully crafted perturbations to input images that can deceive these models into making confident but incorrect predictions. This vulnerability pose significant risks in high-stakes applications such as autonomous vehicles, security surveillance, and safety-critical inspection systems. While the existing literature extensively covers adversarial attacks in image classification, comprehensive analyses of such attacks on object detection systems remain limited. This paper presents a novel taxonomic framework for categorizing adversarial attacks specific to object detection architectures, synthesizes existing robustness metrics, and provides a comprehensive empirical evaluation of state-of-the-art attack methodologies on popular object detection models, including both traditional detectors and modern detectors with vision-language pretraining. Through rigorous analysis of open-source attack implementations and their effectiveness across diverse detection architectures, we derive key insights into attack characteristics. Furthermore, we delineate critical research gaps and emerging challenges to guide future investigations in securing object detection systems against adversarial threats. Our findings establish a foundation for developing more robust detection models while highlighting the urgent need for standardized evaluation protocols in this rapidly evolving domain.

Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 60 of its 92 references that are in the map. First posted on arXiv 4 Aug 2024.

Builds on

60 of 92 references.

References · 60

  1. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  2. 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
  3. 2020End-to-End Object Detection with Transformerscited by 7,384
  4. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  5. 2015You Only Look Once: Unified, Real-Time Object Detectioncited by 4,829
  6. 2020Deformable DETR: Deformable Transformers for End-to-End Object Detectioncited by 3,410
  7. 2023Grounding DINO: Marrying DINO with Grounded Pre-Training for Open-Set Object Detectioncited by 3,274
  8. 2015SSD: Single Shot MultiBox Detectorcited by 3,125
  9. 2018YOLOv3: An Incremental Improvementcited by 2,652
  10. 2013Rich feature hierarchies for accurate object detection and semantic segmentationcited by 2,160
  11. 2020YOLOv4: Optimal Speed and Accuracy of Object Detectioncited by 1,624
  12. 2016YOLO9000: Better, Faster, Strongercited by 1,429
38 more
  1. 2021Grounded Language-Image Pre-trainingcited by 1,147
  2. 2020RobustBench: a standardized adversarial robustness benchmarkcited by 659
  3. 2020Sparse R-CNN: End-to-End Object Detection with Learnable Proposalscited by 494
  4. 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 459
  5. 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 452
  6. 2017Adversarial Examples for Semantic Segmentation and Object Detectioncited by 275
  7. 2019Fooling automated surveillance cameras: adversarial patches to attack person detectioncited by 268
  8. 2019Libra R-CNN: Towards Balanced Learning for Object Detectioncited by 255
  9. 2021Understanding Robustness of Transformers for Image Classificationcited by 250
  10. 2021Are Transformers More Robust Than CNNs?cited by 187
  11. 2020FCOS: A simple and strong anchor-free object detectorcited by 171
  12. 2019Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectorscited by 155
  13. 2018DPatch: An Adversarial Patch Attack on Object Detectorscited by 146
  14. 2022Understanding The Robustness in Vision Transformerscited by 144
  15. 2020Adversarial Camouflage: Hiding Physical-World Attacks with Natural Stylescited by 126
  16. 2023ONE-PEACE: Exploring One General Representation Model Toward Unlimited Modalitiescited by 117
  17. 2018Transferable Adversarial Attacks for Image and Video Object Detectioncited by 109
  18. 2019ColorFool: Semantic Adversarial Colorizationcited by 89
  19. 2017Exploring the Landscape of Spatial Robustnesscited by 81
  20. 2022Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detectioncited by 79
  21. 2021RobustART: Benchmarking Robustness on Architecture Design and Training Techniquescited by 78
  22. 2021Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detectioncited by 67
  23. 2023How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defensescited by 65
  24. 2019Towards Adversarially Robust Object Detectioncited by 55
  25. 2020Detection as Regression: Certified Object Detection by Median Smoothingcited by 47
  26. 2023Human Pose as Compositional Tokenscited by 45
  27. 2023OmniVec: Learning robust representations with cross modal sharingcited by 44
  28. 2019FoveaBox: Beyond Anchor-based Object Detectorcited by 37
  29. 2019Role of Spatial Context in Adversarial Robustness for Object Detectioncited by 35
  30. 2021DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attackscited by 28
  31. 2022Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectorscited by 28
  32. 2021Class-Aware Robust Adversarial Training for Object Detectioncited by 27
  33. 2018Robust Adversarial Perturbation on Deep Proposal-based Modelscited by 26
  34. 2022Adversarially-Aware Robust Object Detectorcited by 20
  35. 2020DPAttack: Diffused Patch Attacks against Universal Object Detectioncited by 18
  36. 2021RPATTACK: Refined Patch Attack on General Object Detectorscited by 18
  37. 2021Context-Aware Transfer Attacks for Object Detectioncited by 18
  38. 2021Adversarial YOLO: Defense Human Detection Patch Attacks via Detecting Adversarial Patchescited by 17

50 most cited of 60 All 60 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 3; 2026: 4.

7 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey
  2. 2021Evaluating Adversarial Attacks on Driving Safety in Vision-Based Autonomous Vehicles
  3. 2026Corrupting Attention: Evasion-Based Adversarial Attacks on Encoder Attention in Detection Transformers
  4. 2026Detecting Adversarial Images through Response Profiles of Vision-Language Models
  5. 2024Enhancing Object Detection Robustness: Detecting and Restoring Confidence in the Presence of Adversarial Patch Attacks
  6. 2025Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems
  7. 2025MAA: Meticulous Adversarial Attack against Vision-Language Pre-trained Models
  8. 2026PHANTOM: A Large-Scale Dataset of Multimodal Adversarial Attacks for Vision-Language Models