TACO: Adversarial Camouflage Optimization on Trucks to Fool Object Detectors
Not on the map. Why?
Abstract (arXiv)
Adversarial attacks threaten the reliability of machine learning models in critical applications like autonomous vehicles and defense systems. As object detectors become more robust with models like YOLOv8, developing effective adversarial methodologies is increasingly challenging. We present Truck Adversarial Camouflage Optimization (TACO), a novel framework that generates adversarial camouflage patterns on 3D vehicle models to deceive state-of-the-art object detectors. Adopting Unreal Engine 5, TACO integrates differentiable rendering with a Photorealistic Rendering Network to optimize adversarial textures targeted at YOLOv8. To ensure the generated textures are both effective in deceiving detectors and visually plausible, we introduce the Convolutional Smooth Loss function, a generalized smooth loss function. Experimental evaluations demonstrate that TACO significantly degrades YOLOv8's detection performance, achieving an [email protected] of 0.0099 on unseen test data. Furthermore, these adversarial patterns exhibit strong transferability to other object detection models such as Faster R-CNN and earlier YOLO versions.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 28 of its 38 references that are in the map. First posted on arXiv 28 Oct 2024.
Builds on
28 of 38 references.
References · 28
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,713
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2020End-to-End Object Detection with Transformerscited by 7,414
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2018YOLOv3: An Incremental Improvementcited by 2,659
- 2018CBAM: Convolutional Block Attention Modulecited by 2,477
- 2013Describing Textures in the Wildcited by 2,125
- 2019FCOS: Fully Convolutional One-Stage Object Detectioncited by 1,577
- 2017Neural 3D Mesh Renderercited by 437
- 2019Fooling automated surveillance cameras: adversarial patches to attack person detectioncited by 268
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attackscited by 194
16 more
- 2017Tactics of Adversarial Attack on Deep Reinforcement Learning Agentscited by 166
- 2023A Comprehensive Review of YOLO Architectures in Computer Vision: From YOLOv1 to YOLOv8 and YOLO-NAScited by 151
- 2018DPatch: An Adversarial Patch Attack on Object Detectorscited by 147
- 2021Benchmarking Detection Transfer Learning with Vision Transformerscited by 131
- 2021Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical Worldcited by 127
- 2022Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenoncited by 101
- 2017Universal Adversarial Perturbations Against Semantic Image Segmentationcited by 92
- 2021FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attackcited by 74
- 2022DTA: Physical Camouflage Attacks using Differentiable Transformation Networkcited by 51
- 2023ACTIVE: Towards Highly Transferable 3D Physical Camouflage for Universal and Robust Vehicle Evasioncited by 31
- 2020Dynamic Adversarial Patch for Evading Object Detection Modelscited by 20
- 2024RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generationcited by 18
- 2021Learning Coated Adversarial Camouflages for Object Detectorscited by 17
- 2024Flexible Physical Camouflage Generation Based on a Differential Approachcited by 7
- 2024CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectorscited by 4
- 2024Attack Anything: Blind DNNs via Universal Background Adversarial Attackcited by 3
Built on by
Not cited yet.