Stealthy Adversarial Attacks: Decreasing Target Detection Performance through the Saturation Channel in HSV Color Space

With the widespread deployment of deep learning models in numerous security-critical applications, the security and robustness of these models have become a hot topic of research. Adversarial attacks, which inject imperceptible perturbations into input data, have revealed the vulnerabilities of these systems. This paper proposes an innovative adversarial attack strategy focusing on the saturation (S) channel in the HSV (Hue, Saturation, Value) color space. We hypothesize that by introducing carefully designed perturbations in the S channel, we can significantly reduce the performance of detectors without significantly altering the overall visual perception of the image. This study introduces subtle but effective adversarial perturbations in the S channel of the HSV color space, which are calculated based on the gradient of the detector in that channel. Through a series of experiments, we demonstrate that this method not only significantly reduces the accuracy of detectors but also has a high degree of stealth. Our research results indicate that the S channel is a potential weakness in target detection systems, and adversarial attacks can lead to a reduction in mean Average Precision (mAP) by up to 99% under specific conditions. Furthermore, we discuss the implications of these findings and propose possible defense measures against such attacks.

Authors

Institutions

Publication Details

Published
2024-12-29
DOI
https://doi.org/10.1109/iceace63551.2024.10898922
Primary Topic
Adversarial Robustness in Machine Learning
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Stealthy Adversarial Attacks: Decreasing Target Detection Performance through the Saturation Channel in HSV Color Space

Jie Wu
Adversarial Robustness in Machine Learning
article

Stealthy Adversarial Attacks: Decreasing Target Detection Performance through the Saturation Channel in HSV Color Space

Jie Wu
article en

Abstract

With the widespread deployment of deep learning models in numerous security-critical applications, the security and robustness of these models have become a hot topic of research. Adversarial attacks, which inject imperceptible perturbations into input data, have revealed the vulnerabilities of these systems. This paper proposes an innovative adversarial attack strategy focusing on the saturation (S) channel in the HSV (Hue, Saturation, Value) color space. We hypothesize that by introducing carefully designed perturbations in the S channel, we can significantly reduce the performance of detectors without significantly altering the overall visual perception of the image. This study introduces subtle but effective adversarial perturbations in the S channel of the HSV color space, which are calculated based on the gradient of the detector in that channel. Through a series of experiments, we demonstrate that this method not only significantly reduces the accuracy of detectors but also has a high degree of stealth. Our research results indicate that the S channel is a potential weakness in target detection systems, and adversarial attacks can lead to a reduction in mean Average Precision (mAP) by up to 99% under specific conditions. Furthermore, we discuss the implications of these findings and propose possible defense measures against such attacks.

Nanjing Institute of Technology (CN)
Openalex Percentile: Top 75%
Adversarial Robustness in Machine Learning
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

Stealthy Adversarial Attacks: Decreasing Target Detection Performance through the Saturation Channel in HSV Color Space — Jie Wu · (2024) | TGRS Research Map | TGRS