Knowledge-Guided Adversarial Training for Infrared Object Detection via Thermal Radiation Modeling
Not on the map. Why?
Abstract (arXiv)
In complex environments, infrared object detection exhibits broad applicability and stability across diverse scenarios. However, infrared object detection is vulnerable to both common corruptions and adversarial examples, leading to potential security risks. To improve the robustness of infrared object detection, current methods mostly adopt a data-driven ideology, which only superficially drives the network to fit the training data without specifically considering the unique characteristics of infrared images, resulting in limited robustness. In this paper, we revisit infrared physical knowledge and find that relative thermal radiation relations between different classes can be regarded as a reliable knowledge source under the complex scenarios of adversarial examples and common corruptions. Thus, we theoretically model thermal radiation relations based on the rank order of gray values for different classes, and further quantify the stability of various inter-class thermal radiation relations. Based on the above theoretical framework, we propose Knowledge-Guided Adversarial Training (KGAT) for infrared object detection, in which infrared physical knowledge is embedded into the adversarial training process, and the predicted results are optimized to be consistent with the actual physical laws. Extensive experiments on three infrared datasets and six mainstream infrared object detection models demonstrate that KGAT effectively enhances both clean accuracy and robustness against adversarial attacks and common corruptions.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 30 of its 61 references that are in the map. First posted on arXiv 26 Mar 2026.
Builds on
30 of 61 references.
References · 30
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2020Deformable DETR: Deformable Transformers for End-to-End Object Detectioncited by 3,410
- 2015SSD: Single Shot MultiBox Detectorcited by 3,125
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2022Mask DINO: Towards A Unified Transformer-based Framework for Object Detection and Segmentationcited by 341
- 2022Target-aware Dual Adversarial Learning and a Multi-scenario Multi-Modality Benchmark to Fuse Infrared and Visible for Object Detectioncited by 313
- 2017Adversarial Examples for Semantic Segmentation and Object Detectioncited by 275
- 2019Gated-SCNN: Gated Shape CNNs for Semantic Segmentationcited by 165
- 2021Dense Nested Attention Network for Infrared Small Target Detectioncited by 132
- 2016Multispectral Deep Neural Networks for Pedestrian Detectioncited by 82
- 2019Towards Adversarially Robust Object Detectioncited by 55
- 2020A Causal View on Robustness of Neural Networkscited by 53
18 more
- 2021Fooling thermal infrared pedestrian detectors in real world using small bulbscited by 51
- 2024IRSAM: Advancing Segment Anything Model for Infrared Small Target Detectioncited by 45
- 2021Robust and Accurate Object Detection via Adversarial Learningcited by 42
- 2022Infrared Invisible Clothing:Hiding from Infrared Detectors at Multiple Angles in Real Worldcited by 42
- 2021CausalAdv: Adversarial Robustness through the Lens of Causalitycited by 37
- 2021Class-Aware Robust Adversarial Training for Object Detectioncited by 27
- 2021Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attackscited by 24
- 2022Adversarially-Aware Robust Object Detectorcited by 20
- 2022Robust Object Detection With Inaccurate Bounding Boxescited by 20
- 2022Recognizing Object by Components with Human Prior Knowledge Enhances Adversarial Robustness of Deep Neural Networkscited by 18
- 2023Demystifying Causal Features on Adversarial Examples and Causal Inoculation for Robust Network by Adversarial Instrumental Variable Regressioncited by 18
- 2023Mitigating Accuracy-Robustness Trade-off via Balanced Multi-Teacher Adversarial Distillationcited by 13
- 2022Part-Based Models Improve Adversarial Robustnesscited by 11
- 2023Adversarial Infrared Blocks: A Multi-view Black-box Attack to Thermal Infrared Detectors in Physical Worldcited by 11
- 2024InfMAE: A Foundation Model in the Infrared Modalitycited by 11
- 2025IRGPT: Understanding Real-world Infrared Image with Bi-cross-modal Curriculum on Large-scale Benchmarkcited by 11
- 2023Defending Against Physical Adversarial Patch Attacks on Infrared Human Detectioncited by 4
- 2021Robust and Accurate Object Detection via Self-Knowledge Distillationcited by 3
Built on by
Citing papers per year: 2026: 1.
1 paper.