mlsanityData to 7 Oct 2026

In-the-Wild Camouflage Attack on Vehicle Detectors through Controllable Image Editing

arXiv 2603.19456 ↗First posted 19 Mar 2026cs.CVcited by 0

Not on the map. Why?

Abstract (arXiv)

Deep neural networks (DNNs) have achieved remarkable success in computer vision but remain highly vulnerable to adversarial attacks. Among them, camouflage attacks manipulate an object's visible appearance to deceive detectors while remaining stealthy to humans. In this paper, we propose a new framework that formulates vehicle camouflage attacks as a conditional image-editing problem. Specifically, we explore both image-level and scene-level camouflage generation strategies, and fine-tune a ControlNet to synthesize camouflaged vehicles directly on real images. We design a unified objective that jointly enforces vehicle structural fidelity, style consistency, and adversarial effectiveness. Extensive experiments on the COCO and LINZ datasets show that our method achieves significantly stronger attack effectiveness, leading to more than 38% AP50 decrease, while better preserving vehicle structure and improving human-perceived stealthiness compared to existing approaches. Furthermore, our framework generalizes effectively to unseen black-box detectors and exhibits promising transferability to the physical world. Project page is available at https://humansensinglab.github.io/CtrlCamo

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 39 of its 48 references that are in the map. First posted on arXiv 19 Mar 2026.

Builds on

39 of 48 references.

References · 39

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  5. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
  6. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  7. 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
  8. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  9. 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
  10. 2022Flow Matching for Generative Modelingcited by 5,426
  11. 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,094
  12. 2022Flow Straight and Fast: Learning to Generate and Transfer Data with Rectified Flowcited by 3,550
27 more
  1. 2024SAM 2: Segment Anything in Images and Videoscited by 2,784
  2. 2017CARLA: An Open Urban Driving Simulatorcited by 2,431
  3. 2025InternVL3: Exploring Advanced Training and Test-Time Recipes for Open-Source Multimodal Modelscited by 1,769
  4. 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
  5. 2019MMDetection: Open MMLab Detection Toolbox and Benchmarkcited by 1,379
  6. 2016Colorful Image Colorizationcited by 1,113
  7. 2022Exploring Plain Vision Transformer Backbones for Object Detectioncited by 723
  8. 2020Image Segmentation Using Deep Learning: A Surveycited by 659
  9. 2025Depth Anything 3: Recovering the Visual Space from Any Viewscited by 626
  10. 2018Object Detection with Deep Learning: A Reviewcited by 524
  11. 2020Adversarial Camouflage: Hiding Physical-World Attacks with Natural Stylescited by 126
  12. 2023Diffusion Models for Imperceptible and Transferable Adversarial Attackcited by 93
  13. 2023Real-Time Flying Object Detection with YOLOv8cited by 93
  14. 2024Distilling Diffusion Models into Conditional GANscited by 78
  15. 2023Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllabilitycited by 66
  16. 2023AdvDiff: Generating Unrestricted Adversarial Examples using Diffusion Modelscited by 46
  17. 2023Towards Benchmarking and Assessing Visual Naturalness of Physical World Adversarial Attackscited by 18
  18. 2024RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generationcited by 18
  19. 2025TurboFill: Adapting Few-step Text-to-image Model for Fast Image Inpaintingcited by 15
  20. 2025Dual-Process Image Generationcited by 12
  21. 2025UV-Attack: Physical-World Adversarial Attacks for Person Detection via Dynamic-NeRF-based UV Mappingcited by 8
  22. 2020TOG: Targeted Adversarial Objectness Gradient Attacks on Real-time Object Detection Systemscited by 7
  23. 2025AdvAD: Exploring Non-Parametric Diffusion for Imperceptible Adversarial Attackscited by 7
  24. 2024CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectorscited by 4
  25. 2024BadPatch: Diffusion-Based Generation of Physical Adversarial Patchescited by 4
  26. 2025Adapting Vehicle Detectors for Aerial Imagery to Unseen Domains with Weak Supervisioncited by 2
  27. 2025SynthDrive: Scalable Real2Sim2Real Sensor Simulation Pipeline for High-Fidelity Asset Generation and Driving Data Synthesiscited by 1

Built on by

Not cited yet.