Adversarial attack method with adaptive step size for ID card text recognition

In the field of text recognition models, existing adversarial attack algorithms mainly target white-box scenarios, which are usually limited to single-color backgrounds and short text length. However, with the complex color textures of ID card images and long text length, these methods are not satisfactory when performing adversarial attacks on ID card text data. To overcome these challenges, this paper introduces a novel black-box attack method tailored for ID card text recognition models. The proposed approach accounts for the complexities of intricate image backgrounds, extended text data, and the limitations inherent in black-box conditions. The proposed algorithm introduces an adaptive step-size search method based on line search, aiming to overcome the limitations of traditional methods that rely on fixed step sizes and projection techniques for perturbation generation. This refinement aims to enhance the success rate of black-box attacks while maintaining efficacy in white-box scenarios. Spatial transformations and random noise are incorporated to fortify the robustness of adversarial samples. Experimental results, conducted under various norms, demonstrate that the fusion of the traditional method with the adaptive step-size search method yields superior attack performance.