mlsanityData to 7 Oct 2026

Cross-Modality Attack Boosted by Gradient-Evolutionary Multiform Optimization

arXiv 2409.17977 ↗First posted 26 Sep 2024cs.CVcited by 11

Not on the map. Why?

Abstract (arXiv)

In recent years, despite significant advancements in adversarial attack research, the security challenges in cross-modal scenarios, such as the transferability of adversarial attacks between infrared, thermal, and RGB images, have been overlooked. These heterogeneous image modalities collected by different hardware devices are widely prevalent in practical applications, and the substantial differences between modalities pose significant challenges to attack transferability. In this work, we explore a novel cross-modal adversarial attack strategy, termed multiform attack. We propose a dual-layer optimization framework based on gradient-evolution, facilitating efficient perturbation transfer between modalities. In the first layer of optimization, the framework utilizes image gradients to learn universal perturbations within each modality and employs evolutionary algorithms to search for shared perturbations with transferability across different modalities through secondary optimization. Through extensive testing on multiple heterogeneous datasets, we demonstrate the superiority and robustness of Multiform Attack compared to existing techniques. This work not only enhances the transferability of cross-modal adversarial attacks but also provides a new perspective for understanding security vulnerabilities in cross-modal systems.

Key facts. Cited by 11 papers in the map (data through 7 Oct 2026). Builds on 24 of its 46 references that are in the map. First posted on arXiv 26 Sep 2024.

Builds on

24 of 46 references.

References · 24

  1. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  2. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
  3. 2016Adversarial examples in the physical worldcited by 1,762
  4. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
  5. 2017In Defense of the Triplet Loss for Person Re-Identificationcited by 784
  6. 2016Universal adversarial perturbationscited by 774
  7. 2017One pixel attack for fooling deep neural networkscited by 579
  8. 2020Deep Learning for Person Re-identification: A Survey and Outlookcited by 547
  9. 2020Dynamic Dual-Attentive Aggregation Learning for Visible-Infrared Person Re-Identificationcited by 111
  10. 2022Adversarial Texture for Fooling Person Detectors in the Physical Worldcited by 96
  11. 2019Functional Adversarial Attackscited by 82
  12. 2020Sparse-RS: a versatile framework for query-efficient sparse black-box adversarial attackscited by 65
12 more
  1. 2021Person Re-identification Method Based on Color Attack and Joint Defencecited by 56
  2. 2024Cross-Modality Perturbation Synergy Attack for Person Re-identificationcited by 45
  3. 2019Learning to Adapt Invariance in Memory for Person Re-identificationcited by 43
  4. 2020Transferable, Controllable, and Inconspicuous Adversarial Attacks on Person Re-identification With Deep Mis-Rankingcited by 42
  5. 2021Eliminate Deviation with Deviation for Data Augmentation and a General Multi-modal Data Learning Methodcited by 42
  6. 2018Universal Perturbation Attack Against Image Retrievalcited by 31
  7. 2024Multi-Memory Matching for Unsupervised Visible-Infrared Person Re-Identificationcited by 27
  8. 2024Exploring Color Invariance through Image-Level Ensemble Learningcited by 23
  9. 2024Beyond Augmentation: Empowering Model Robustness under Extreme Capture Environmentscited by 23
  10. 2024Beyond Dropout: Robust Convolutional Neural Networks Based on Local Feature Maskingcited by 19
  11. 2024Adversarial Learning for Neural PDE Solvers with Sparse Datacited by 16
  12. 2023Attention Disturbance and Dual-Path Constraint Network for Occluded Person Re-identificationcited by 6

Built on by

Cited by year

Citing papers per year: 2024: 2; 2025: 9.

11 papers.