论文标题
AD2ATTACK:对实时无人机跟踪的自适应对抗性攻击
Ad2Attack: Adaptive Adversarial Attack on Real-Time UAV Tracking
论文作者
论文摘要
视觉跟踪被采用用于广泛的无人机(UAV)相关应用,这导致对无人机跟踪器的鲁棒性的高度要求。但是,添加不可察觉的扰动可以轻松欺骗跟踪器并导致跟踪故障。目前,这种风险经常被忽视,很少研究。因此,为了帮助提高对无人机跟踪的潜在风险和鲁棒性的认识,这项工作提出了一种新型的自适应对抗攻击方法,即针对无人机对象跟踪的AD $^2 $攻击。具体而言,在搜索补丁图像的重新采样期间在线生成对抗示例,这会导致跟踪器在以下帧中丢失目标。 AD $^2 $攻击是由直接下采样模块和具有自适应阶段的超分辨率上采样模块组成的。提出了一种新颖的优化函数,以平衡攻击的不可识别性和效率。对几个众所周知的基准和现实情况的全面实验表明了我们的攻击方法的有效性,这大大降低了最先进的暹罗跟踪器的性能。
Visual tracking is adopted to extensive unmanned aerial vehicle (UAV)-related applications, which leads to a highly demanding requirement on the robustness of UAV trackers. However, adding imperceptible perturbations can easily fool the tracker and cause tracking failures. This risk is often overlooked and rarely researched at present. Therefore, to help increase awareness of the potential risk and the robustness of UAV tracking, this work proposes a novel adaptive adversarial attack approach, i.e., Ad$^2$Attack, against UAV object tracking. Specifically, adversarial examples are generated online during the resampling of the search patch image, which leads trackers to lose the target in the following frames. Ad$^2$Attack is composed of a direct downsampling module and a super-resolution upsampling module with adaptive stages. A novel optimization function is proposed for balancing the imperceptibility and efficiency of the attack. Comprehensive experiments on several well-known benchmarks and real-world conditions show the effectiveness of our attack method, which dramatically reduces the performance of the most advanced Siamese trackers.