Physically-Induced Atmospheric Adversarial Perturbations: Enhancing Transferability and Robustness in Remote Sensing Image Classification
Not on the map. Why?
Abstract (arXiv)
Adversarial attacks pose a severe threat to the reliability of deep learning models in remote sensing (RS) image classification. Most existing methods rely on direct pixel-wise perturbations, failing to exploit the inherent atmospheric characteristics of RS imagery or survive real-world image degradations. In this paper, we propose FogFool, a physically plausible adversarial framework that generates fog-based perturbations by iteratively optimizing atmospheric patterns based on Perlin noise. By modeling fog formations with natural, irregular structures, FogFool generates adversarial examples that are not only visually consistent with authentic RS scenes but also deceptive. By leveraging the spatial coherence and mid-to-low-frequency nature of atmospheric phenomena, FogFool embeds adversarial information into structural features shared across diverse architectures. Extensive experiments on two benchmark RS datasets demonstrate that FogFool achieves superior performance: not only does it exceed in white-box settings, but also exhibits exceptional black-box transferability (reaching 83.74% TASR) and robustness against common preprocessing-based defenses such as JPEG compression and filtering. Detailed analyses, including confusion matrices and Class Activation Map (CAM) visualizations, reveal that our atmospheric-driven perturbations induce a universal shift in model attention. These results indicate that FogFool represents a practical, stealthy, and highly persistent threat to RS classification systems, providing a robust benchmark for evaluating model reliability in complex environments.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 55 of its 80 references that are in the map. First posted on arXiv 16 Apr 2026.
Builds on
55 of 80 references.
References · 55
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Densely Connected Convolutional Networkscited by 6,691
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,415
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2016Adversarial examples in the physical worldcited by 1,762
38 more
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2017Remote Sensing Image Scene Classification: Benchmark and State of the Artcited by 791
- 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 591
- 2017Countering Adversarial Images using Input Transformationscited by 517
- 2019Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attackscited by 440
- 2016Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samplescited by 439
- 2019Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attackscited by 352
- 2021Enhancing the Transferability of Adversarial Attacks through Variance Tuningcited by 242
- 2016A study of the effect of JPG compression on adversarial imagescited by 196
- 2020Adversarial Camouflage: Hiding Physical-World Attacks with Natural Stylescited by 126
- 2024Mobile Edge Intelligence for Large Language Models: A Contemporary Surveycited by 125
- 2022Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenoncited by 101
- 2023Efficient Parallel Split Learning over Resource-constrained Wireless Edge Networkscited by 95
- 2021Adversarial Sticker: A Stealthy Attack Method in the Physical Worldcited by 92
- 2020Remote Sensing Image Scene Classification Meets Deep Learning: Challenges, Methods, Benchmarks, and Opportunitiescited by 71
- 2023Split Learning in 6G Edge Networkscited by 68
- 2024AdaptSFL: Adaptive Split Federated Learning in Resource-constrained Edge Networkscited by 64
- 2024SplitLoRA: A Split Parameter-Efficient Fine-Tuning Framework for Large Language Modelscited by 60
- 2024Automated Federated Pipeline for Parameter-Efficient Fine-Tuning of Large Language Modelscited by 49
- 2023FedSN: A Federated Learning Framework over Heterogeneous LEO Satellite Networkscited by 38
- 2024Hierarchical Split Federated Learning: Convergence Analysis and System Optimizationcited by 38
- 2021Exploring Misclassifications of Robust Neural Networks to Enhance Adversarial Attackscited by 33
- 2023Optimal Resource Allocation for U-Shaped Parallel Split Learningcited by 33
- 2025HSplitLoRA: A Heterogeneous Split Parameter-Efficient Fine-Tuning Framework for Large Language Modelscited by 30
- 2022Universal Adversarial Examples in Remote Sensing: Methodology and Benchmarkcited by 24
- 2022AI Security for Geoscience and Remote Sensing: Challenges and Future Trendscited by 23
- 2025LEO-Split: A Semi-Supervised Split Learning Framework over LEO Satellite Networkscited by 22
- 2024SatFed: A Resource-Efficient LEO Satellite-Assisted Heterogeneous Federated Learning Frameworkcited by 21
- 2018Adversarial Examples in Remote Sensingcited by 19
- 2025HASFL: Heterogeneity-aware Split Federated Learning over Edge Computing Systemscited by 15
- 2024SATSense: Multi-Satellite Collaborative Framework for Spectrum Sensingcited by 14
- 2024Sums: Sniffing Unknown Multiband Signals under Low Sampling Ratescited by 12
- 2026HFedMoE: Resource-aware Heterogeneous Federated Learning with Mixture-of-Expertscited by 11
- 2024LEO Satellite Networks Assisted Geo-distributed Data Processingcited by 10
- 2025Dynamic Uncertainty-aware Multimodal Fusion for Outdoor Health Monitoringcited by 10
- 2019Adversarial Example in Remote Sensing Image Recognitioncited by 8
- 2022fakeWeather: Adversarial Attacks for Deep Neural Networks Emulating Weather Conditions on the Camera Lens of Autonomous Systemscited by 8
- 2023Defense against Adversarial Cloud Attack on Remote Sensing Salient Object Detectioncited by 8
50 most cited of 55 All 55 (JSON)
Built on by
Citing papers per year: 2026: 1.
1 paper.