mlsanityData to 14 Oct 2026

SRAW-Attack: Space-Reweighted Adversarial Warping Attack for SAR Target Recognition

arXiv 2601.10324 ↗First posted 15 Jan 2026cs.CV eess.IVcited by 0

Not on the map. Why?

Abstract (arXiv)

Synthetic aperture radar (SAR) imagery exhibits intrinsic information sparsity due to its unique electromagnetic scattering mechanism. Despite the widespread adoption of deep neural network (DNN)-based SAR automatic target recognition (SAR-ATR) systems, they remain vulnerable to adversarial examples and tend to over-rely on background regions, leading to degraded adversarial robustness. Existing adversarial attacks for SAR-ATR often require visually perceptible distortions to achieve effective performance, thereby necessitating an attack method that balances effectiveness and stealthiness. In this paper, a novel attack method termed Space-Reweighted Adversarial Warping (SRAW) is proposed, which generates adversarial examples through optimized spatial deformation with reweighted budgets across foreground and background regions. Extensive experiments demonstrate that SRAW significantly degrades the performance of state-of-the-art SAR-ATR models and consistently outperforms existing methods in terms of imperceptibility and adversarial transferability. Code is made available at https://github.com/boremycin/SAR-ATR-TransAttack.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 25 of its 34 references that are in the map. First posted on arXiv 15 Jan 2026.

Builds on

25 of 34 references.

References · 25

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  3. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
  4. 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,139
  5. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
  6. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  7. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,733
  8. 2016Densely Connected Convolutional Networkscited by 6,720
  9. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  10. 2013Intriguing properties of neural networkscited by 5,155
  11. 2022A ConvNet for the 2020scited by 3,579
  12. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
13 more
  1. 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
  2. 2016Adversarial examples in the physical worldcited by 1,769
  3. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
  4. 2016A study of the effect of JPG compression on adversarial imagescited by 197
  5. 2016Deep Pyramidal Residual Networkscited by 163
  6. 2023Boosting Adversarial Transferability by Block Shuffle and Rotationcited by 64
  7. 2020Automatic Target Recognition on Synthetic Aperture Radar Imagery: A Surveycited by 18
  8. 2024Boosting Adversarial Transferability across Model Genus by Deformation-Constrained Warpingcited by 18
  9. 2023Discovering and Explaining the Non-Causality of Deep Learning in SAR ATRcited by 9
  10. 2024Boosting Adversarial Transferability with Low-Cost Optimization via Maximin Expected Flatnesscited by 7
  11. 2024Low-Rank Adversarial PGD Attackcited by 4
  12. 2025Beyond Vulnerabilities: A Survey of Adversarial Attacks as Both Threats and Defenses in Computer Vision Systemscited by 4
  13. 2025SAIPAS: Simulating aspect-angles-invariant physical adversarial attacks on SAR target recognition modelscited by 1

Built on by

Not cited yet.