基于扩散模型的无人机遥感目标检测物理对抗攻击方法研究OA
Research on Physical Adversarial Attack Methods for UAV Remote Sensing Target Detection Based on Diffusion Models
深度神经网络虽然在各类视觉任务中取得了显著进展,但易受到对抗样本的攻击;相较于数字域对抗攻击,物理域对抗攻击更具挑战;针对无人机遥感图像目标检测的对抗攻击需在多视角、距离变化及光照差异等复杂条件下保持稳定的有效性,攻击方法的优化过程需充分考虑真实物理成像环境的动态性与多样性.现有物理域对抗攻击方法虽能降低目标检测模型性能,但这些方法通常仅依赖像素级的局部纹理优化,导致生成的对抗纹理模式单一、适应性有限.为解决上述问题,本文提出一种基于扩散模型的物理对抗攻击方法.该方法以预训练扩散模型作为生成器,结合图像与文本先验特征引导对抗纹理的生成,基于全覆盖的物理对抗攻击框架实现无人机遥感目标检测任务下的车辆伪装.实验结果表明:本文方法在多个目标检测模型上均表现出较高的攻击成功率与良好的跨模型迁移能力,且在纹理多样性和稳定性方面均优于对比方法.
Although deep neural networks have achieved significant advancements across a range of visual tasks,they continue to be vulnerable to adversarial attacks.Compared to digital-domain attacks,physical-world adversarial attacks pose greater threats.In the context of adversarial attacks on UAV remote-sensing image object detection,it's essential to maintain stable effectiveness under complex conditions,such as varying viewpoints,distances,and lighting conditions.Optimising attack methods must be fully considered in light of the dynamics and diversity of real-world imaging environments.Although existing physical-domain adversarial attack methods can degrade the performance of object detection models,they often rely solely on pixel-level local texture optimisation,resulting in monotonous adversarial texture patterns and limited adaptability.To address the aforementioned issues,this paper proposed a diffusion model-based physical adversarial attack method.The proposed approach employed a pre-trained diffusion model as the generator,leveraging both image and text priors to guide the generation of adversarial textures.Within a comprehensive physical attack framework,it enabled vehicle camouflage in UAV remote-sensing object-detection tasks.Experimental results demonstrate that the proposed method achieves high attack success rates and strong cross-model transferability across multiple object detection models,outperforming comparative methods in attack effectiveness and texture pattern diversity.
夏筱彦;张宇;胡锡坤;钟平
国防科技大学 电子科学学院,湖南 长沙 410073国防科技大学 电子科学学院,湖南 长沙 410073国防科技大学 电子科学学院,湖南 长沙 410073国防科技大学 电子科学学院,湖南 长沙 410073
航空航天
无人机遥感图像深度神经网络物理对抗攻击扩散模型目标检测
UAV remote sensing imagesdeep neural networksphysical adversarial attackdiffusion modelobject detection
《空天防御》 2026 (1)
52-62,11
国家自然科学基金资助项目(62301574)湖南省科技创新计划资助项目(2024RC3119)
评论