IPG: Incremental Patch Generation for Generalized Adversarial Patch Training
Not on the map. Why?
Abstract (arXiv)
The advent of adversarial patches poses a significant challenge to the robustness of AI models, particularly in the domain of computer vision tasks such as object detection. In contradistinction to traditional adversarial examples, these patches target specific regions of an image, resulting in the malfunction of AI models. This paper proposes Incremental Patch Generation (IPG), a method that generates adversarial patches up to 11.1 times more efficiently than existing approaches while maintaining comparable attack performance. The efficacy of IPG is demonstrated by experiments and ablation studies including YOLO's feature distribution visualization and adversarial training results, which show that it produces well-generalized patches that effectively cover a broader range of model vulnerabilities. Furthermore, IPG-generated datasets can serve as a robust knowledge foundation for constructing a robust model, enabling structured representation, advanced reasoning, and proactive defenses in AI security ecosystems. The findings of this study suggest that IPG has considerable potential for future utilization not only in adversarial patch defense but also in real-world applications such as autonomous vehicles, security systems, and medical imaging, where AI models must remain resilient to adversarial attacks in dynamic and high-stakes environments.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 13 of its 21 references that are in the map. First posted on arXiv 13 Aug 2025.
Builds on
13 of 21 references.
References · 13
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2015You Only Look Once: Unified, Real-Time Object Detectioncited by 4,852
- 2016Deep Learning with Differential Privacycited by 2,728
- 2015Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networkscited by 2,054
- 2017Adversarial Patchcited by 517
- 2018DPatch: An Adversarial Patch Attack on Object Detectorscited by 147
- 2018LaVAN: Localized and Visible Adversarial Noisecited by 113
- 2020Certified Defenses for Adversarial Patchescited by 101
- 2020(De)Randomized Smoothing for Certifiable Defense against Patch Attackscited by 98
- 2018Local Gradients Smoothing: Defense against localized adversarial attackscited by 87
- 2020Adversarial Training against Location-Optimized Adversarial Patchescited by 50
- 2022Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Surveycited by 17
1 more
Built on by
Not cited yet.