mlsanityData to 14 Oct 2026

VFACamou: View-Fused Adversarial Camouflage for Environment-Adaptive Physical Evasion

arXiv 2606.19736 ↗First posted 18 Jun 2026cs.CVcited by 0

Not on the map. Why?

Abstract (arXiv)

Adversarial camouflage in the physical world remains highly challenging, particularly under UAV reconnaissance where targets undergo continuous geometric changes and extreme illumination variations. Existing methods either optimize 2D digital perturbations that fail to generalize to dynamic viewpoints or produce visually unnatural textures that cannot be deployed in real scenarios. Therefore, we propose an end-to-end framework for adversarial camouflage generation that automatically produces wearable adversarial patterns and maintains stable attack performance in real physical environments with changing viewpoints, poses, and lighting conditions. Our method integrates UV-volume rendering with a diffusion-based texture generator, enabling consistent appearance under varying scales, poses, and lighting conditions. To ensure environmental realism, we propose an illumination color consistency estimator that extracts dominant background attributes and guides a natural texture loss to align the generated UV texture with the surrounding environment. A multi-scale dynamic training strategy further enhances robustness against viewpoint shifts and body deformation. Extensive experiments across multiple mainstream detectors demonstrate that our method achieves strong and stable physical attack performance while maintaining high perceptual naturalness, reducing human detection rates without introducing unnatural artifacts.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 35 of its 43 references that are in the map. First posted on arXiv 18 Jun 2026.

Builds on

35 of 43 references.

References · 35

  1. 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,639
  2. 2017Mask R-CNNcited by 7,277
  3. 2015SSD: Single Shot MultiBox Detectorcited by 3,130
  4. 2015Fast R-CNNcited by 2,933
  5. 2018YOLOv3: An Incremental Improvementcited by 2,659
  6. 2019FCOS: Fully Convolutional One-Stage Object Detectioncited by 1,577
  7. 2020Neural Body: Implicit Neural Representations with Structured Latent Codes for Novel View Synthesis of Dynamic Humanscited by 634
  8. 2024YOLOv9: Learning What You Want to Learn Using Programmable Gradient Informationcited by 425
  9. 2019Fooling automated surveillance cameras: adversarial patches to attack person detectioncited by 268
  10. 2023AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learningcited by 103
  11. 2022Adversarial Texture for Fooling Person Detectors in the Physical Worldcited by 96
  12. 2023Physically Realizable Natural-Looking Clothing Textures Evade Person Detectors via 3D Modelingcited by 41
23 more
  1. 2023Downstream-agnostic Adversarial Examplescited by 32
  2. 2024DarkSAM: Fooling Segment Anything Model to Segment Nothingcited by 32
  3. 2022BadHash: Invisible Backdoor Attacks against Deep Hashing with Clean Labelcited by 28
  4. 2024Transferable Adversarial Facial Images for Privacy Protectioncited by 27
  5. 2025ADVEDM:Fine-grained Adversarial Attack against VLM-based Embodied Agentscited by 23
  6. 2024Securely Fine-tuning Pre-trained Encoders Against Adversarial Examplescited by 21
  7. 2024NumbOD: A Spatial-Frequency Fusion Attack Against Object Detectorscited by 17
  8. 2024Unlearnable 3D Point Clouds: Class-wise Transformation Is All You Needcited by 16
  9. 2024PB-UAP: Hybrid Universal Adversarial Attack For Image Segmentationcited by 14
  10. 2025Test-Time Backdoor Detection for Object Detection Modelscited by 14
  11. 2024Breaking Barriers in Physical-World Adversarial Examples: Improving Robustness and Transferability via Robust Featurecited by 13
  12. 2025When Lighting Deceives: Exposing Vision-Language Models' Illumination Vulnerability Through Illumination Transformation Attackcited by 11
  13. 2025Vanish into Thin Air: Cross-prompt Universal Adversarial Attacks for SAM2cited by 11
  14. 2023Adv3D: Generating 3D Adversarial Examples for 3D Object Detection in Driving Scenarios with NeRFcited by 10
  15. 2025Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLMcited by 10
  16. 2024ECLIPSE: Expunging Clean-label Indiscriminate Poisons via Sparse Diffusion Purificationcited by 9
  17. 2025UV-Attack: Physical-World Adversarial Attacks for Person Detection via Dynamic-NeRF-based UV Mappingcited by 9
  18. 2025Towards Reliable Forgetting: A Survey on Machine Unlearning Verificationcited by 8
  19. 2025SegTrans: Transferable Adversarial Examples for Segmentation Modelscited by 8
  20. 2025MARS: A Malignity-Aware Backdoor Defense in Federated Learningcited by 7
  21. 2025DarkHash: A Data-Free Backdoor Attack Against Deep Hashingcited by 6
  22. 2026Erosion Attack for Adversarial Training to Enhance Semantic Segmentation Robustnesscited by 3
  23. 2026Transferable Physical-World Adversarial Patches Against Pedestrian Detection Modelscited by 2

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2024Flexible Physical Camouflage Generation Based on a Differential Approach
  2. 2024CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectors
  3. 2026Tex3D: Objects as Attack Surfaces via Adversarial 3D Textures for Vision-Language-Action Models
  4. 2026Still Camouflage, Moving Illusion: View-Induced Trajectory Manipulation in Autonomous Driving
  5. 2025Universal Camouflage Attack on Vision-Language Models for Autonomous Driving
  6. 2024Prompt-Guided Environmentally Consistent Adversarial Patch
  7. 2026Across Viewpoints and Time: Trajectory-Generalizable Physical Attacks on World Models and Video Understanding Models
  8. 2024Diffusion Attack: Leveraging Stable Diffusion for Naturalistic Image Attacking