Adversarial Attacked Teacher for Domain Adaptive Object Detection Under Poor Visibility Conditions

Camera-based object detection encounters challenges in adverse weather, which can compromise the robustness of the perception module within autonomous driving systems. Cutting-edge domain adaptive object detection methods use the teacher-student framework and domain adversarial learning to generate domain-invariant pseudo-labels for self-training. However, the pseudo-labels generated by the teacher model often exhibit a bias toward the majority class, incorporating overconfident false positives and underconfident false negatives. We reveal that pseudo-labels vulnerable to adversarial attacks are more likely to be of low quality. To address this issue, we propose a simple yet effective framework named Adversarial Attacked Teacher (AAT) to improve pseudo-label quality. Specifically, we apply adversarial attacks on the teacher model, prompting it to generate adversarial pseudo-labels to correct bias, suppress overconfidence, and encourage underconfident proposals. We introduce an adaptive pseudo-label regularization to emphasize the influence of pseudo-labels with high certainty and reduce the negative impacts of uncertain predictions. Moreover, reliable minority pseudo-labels, verified by pseudo-label regularization, are oversampled to minimize dataset imbalance without introducing false positives. AAT establishes a new state-of-the-art, achieving 53.0 mAP on the Cityscapes to Foggy Cityscapes benchmark. The code is publicly available at https://github.com/KIT-MRT/AAT/.

Authors

Institutions

Publication Details

Published
2025-06-22
DOI
https://doi.org/10.1109/iv64158.2025.11097815
Primary Topic
Adversarial Robustness in Machine Learning
Type
article
Field-Weighted Citation Impact
0.00

Funders

Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Adversarial Attacked Teacher for Domain Adaptive Object Detection Under Poor Visibility Conditions

Martin Lauer, Yinzhe Shen, Kaiwen Wang
Adversarial Robustness in Machine Learning
article

Adversarial Attacked Teacher for Domain Adaptive Object Detection Under Poor Visibility Conditions

Martin Lauer, Yinzhe Shen, Kaiwen Wang
article en

Abstract

Camera-based object detection encounters challenges in adverse weather, which can compromise the robustness of the perception module within autonomous driving systems. Cutting-edge domain adaptive object detection methods use the teacher-student framework and domain adversarial learning to generate domain-invariant pseudo-labels for self-training. However, the pseudo-labels generated by the teacher model often exhibit a bias toward the majority class, incorporating overconfident false positives and underconfident false negatives. We reveal that pseudo-labels vulnerable to adversarial attacks are more likely to be of low quality. To address this issue, we propose a simple yet effective framework named Adversarial Attacked Teacher (AAT) to improve pseudo-label quality. Specifically, we apply adversarial attacks on the teacher model, prompting it to generate adversarial pseudo-labels to correct bias, suppress overconfidence, and encourage underconfident proposals. We introduce an adaptive pseudo-label regularization to emphasize the influence of pseudo-labels with high certainty and reduce the negative impacts of uncertain predictions. Moreover, reliable minority pseudo-labels, verified by pseudo-label regularization, are oversampled to minimize dataset imbalance without introducing false positives. AAT establishes a new state-of-the-art, achieving 53.0 mAP on the Cityscapes to Foggy Cityscapes benchmark. The code is publicly available at https://github.com/KIT-MRT/AAT/.

Karlsruhe Institute of Technology (DE)
Bundesministerium für Bildung und Forschung
Openalex Percentile: Top 90%
Adversarial Robustness in Machine Learning
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.