Cross-Modality Attack Boosted by Gradient-Evolutionary Multiform Optimization
Not on the map. Why?
Abstract (arXiv)
In recent years, despite significant advancements in adversarial attack research, the security challenges in cross-modal scenarios, such as the transferability of adversarial attacks between infrared, thermal, and RGB images, have been overlooked. These heterogeneous image modalities collected by different hardware devices are widely prevalent in practical applications, and the substantial differences between modalities pose significant challenges to attack transferability. In this work, we explore a novel cross-modal adversarial attack strategy, termed multiform attack. We propose a dual-layer optimization framework based on gradient-evolution, facilitating efficient perturbation transfer between modalities. In the first layer of optimization, the framework utilizes image gradients to learn universal perturbations within each modality and employs evolutionary algorithms to search for shared perturbations with transferability across different modalities through secondary optimization. Through extensive testing on multiple heterogeneous datasets, we demonstrate the superiority and robustness of Multiform Attack compared to existing techniques. This work not only enhances the transferability of cross-modal adversarial attacks but also provides a new perspective for understanding security vulnerabilities in cross-modal systems.
Key facts. Cited by 11 papers in the map (data through 7 Oct 2026). Builds on 24 of its 46 references that are in the map. First posted on arXiv 26 Sep 2024.
Builds on
24 of 46 references.
References · 24
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2016Adversarial examples in the physical worldcited by 1,762
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2017In Defense of the Triplet Loss for Person Re-Identificationcited by 784
- 2016Universal adversarial perturbationscited by 774
- 2017One pixel attack for fooling deep neural networkscited by 579
- 2020Deep Learning for Person Re-identification: A Survey and Outlookcited by 547
- 2020Dynamic Dual-Attentive Aggregation Learning for Visible-Infrared Person Re-Identificationcited by 111
- 2022Adversarial Texture for Fooling Person Detectors in the Physical Worldcited by 96
- 2019Functional Adversarial Attackscited by 82
- 2020Sparse-RS: a versatile framework for query-efficient sparse black-box adversarial attackscited by 65
12 more
- 2021Person Re-identification Method Based on Color Attack and Joint Defencecited by 56
- 2024Cross-Modality Perturbation Synergy Attack for Person Re-identificationcited by 45
- 2019Learning to Adapt Invariance in Memory for Person Re-identificationcited by 43
- 2020Transferable, Controllable, and Inconspicuous Adversarial Attacks on Person Re-identification With Deep Mis-Rankingcited by 42
- 2021Eliminate Deviation with Deviation for Data Augmentation and a General Multi-modal Data Learning Methodcited by 42
- 2018Universal Perturbation Attack Against Image Retrievalcited by 31
- 2024Multi-Memory Matching for Unsupervised Visible-Infrared Person Re-Identificationcited by 27
- 2024Exploring Color Invariance through Image-Level Ensemble Learningcited by 23
- 2024Beyond Augmentation: Empowering Model Robustness under Extreme Capture Environmentscited by 23
- 2024Beyond Dropout: Robust Convolutional Neural Networks Based on Local Feature Maskingcited by 19
- 2024Adversarial Learning for Neural PDE Solvers with Sparse Datacited by 16
- 2023Attention Disturbance and Dual-Path Constraint Network for Occluded Person Re-identificationcited by 6
Built on by
Citing papers per year: 2024: 2; 2025: 9.
11 papers.
- 2024LLM-Virus: Evolutionary Jailbreak Attack on Large Language Modelscited by 7
- 2025StruSR: Structure-Aware Symbolic Regression with Physics-Informed Taylor Guidancecited by 5
- 2025SSCM: A Spatial-Semantic Consistent Model for Multi-Contrast MRI Super-Resolutioncited by 2
- 2025Geometrically Regularized Transfer Learning with On-Manifold and Off-Manifold Perturbationcited by 1
- 2024Enhancing Large-scale UAV Route Planing with Global and Local Features via Reinforcement Graph Fusioncited by 0
- 2025On the Mechanisms of Adversarial Data Augmentation for Robust and Adaptive Transfer Learningcited by 0
- 2025GAMA: Geometry-Aware Manifold Alignment via Structured Adversarial Perturbations for Robust Domain Adaptationcited by 0
- 2025Dynamic Modality Scheduling for Multimodal Large Models via Confidence, Uncertainty, and Semantic Consistencycited by 0
- 2025FADE: Adversarial Concept Erasure in Flow Modelscited by 0
- 2025Robust Concept Erasure in Diffusion Models: A Theoretical Perspective on Security and Robustnesscited by 0
- 2025DeRainMamba: A Frequency-Aware State Space Model with Detail Enhancement for Image Derainingcited by 0
- 2025DeRainMamba: A Frequency-Aware State Space Model with Detail Enhancement for Image Deraining8 Oct 2025
- 2025StruSR: Structure-Aware Symbolic Regression with Physics-Informed Taylor Guidance8 Oct 2025
- 2025SSCM: A Spatial-Semantic Consistent Model for Multi-Contrast MRI Super-Resolution23 Sep 2025
- 2025Robust Concept Erasure in Diffusion Models: A Theoretical Perspective on Security and Robustness15 Sep 2025
- 2025FADE: Adversarial Concept Erasure in Flow Models16 Jul 2025
- 2025Dynamic Modality Scheduling for Multimodal Large Models via Confidence, Uncertainty, and Semantic Consistency15 Jun 2025
- 2025GAMA: Geometry-Aware Manifold Alignment via Structured Adversarial Perturbations for Robust Domain Adaptation21 May 2025
- 2025Geometrically Regularized Transfer Learning with On-Manifold and Off-Manifold Perturbation21 May 2025
- 2025On the Mechanisms of Adversarial Data Augmentation for Robust and Adaptive Transfer Learning19 May 2025
- 2024LLM-Virus: Evolutionary Jailbreak Attack on Large Language Models28 Dec 2024
- 2024Enhancing Large-scale UAV Route Planing with Global and Local Features via Reinforcement Graph Fusion20 Dec 2024