对于评估3D对象检测稳定性的ConvNet生成的对抗性扰动
Temesgen Mikael Abraha1, John Brandon Graham-Knight1, Patricia Lasserre1
1Computer Science, University of British Columbia Okanagan, Kelowna, BC V1V 1V7, Canada.
Sensors (Basel, Switzerland)
|October 16, 2025
概括
本研究介绍了一种使用卷积神经网络 (ConvNet) 的无梯度方法,用于评估3D对象检测系统对敌对攻击的稳定性. 这种新的方法有效地降低了检测性能,特别是对于较小的物体,同时保持在传感器误差范围内.
科学领域:
- 计算机视觉 计算机视觉
- 机器学习 机器学习
- 自动驾驶自动驾驶的自动驾驶
背景情况:
- 对3D物体检测的稳定性评估对于自动驾驶安全至关重要.
- 现有的基于梯度的方法对于实时推断来说在计算上是昂贵的.
- 反对干扰可以显著降低深度学习模型的性能.
研究的目的:
- 提出一种新的,无梯度的对抗性卷积神经网络 (ConvNet) 方法来评估3D点云对象检测系统的稳定性.
- 为了使得在推断时有效和实际的对抗性稳定性评估.
- 分析不同对象类对对抗性扰动的脆弱性.
主要方法:
- 一个ConvNet嵌入到对象检测管道在voxel功能层面.
- 通过使用多组件损失约束 (强度,偏差,不平衡),ConvNet被训练来最大限度地提高检测损失.
- 干扰被限制在传感器误差范围内,确保实现现实的场景.
主要成果:
- 观察到显著的平均精度 (mAP) 降低:在SECOND/KITTI上为8%,在CenterPoint/NuScenes上为24%.
- 像行人 (13-32%) 和骑自行车的人 (14%) 等较小的物体比较大的车辆 (0.2%) 更容易受到攻击.
- 敌对扰动保持在典型的传感器误差范围 (0.05-0.09%L2规范) 之内.
结论:
- 拟议的ConvNet方法为3D物体探测器的对抗性稳定性评估提供了一种有效和高效的无梯度方法.
- 这些发现突出了较小的物体对敌对攻击的关键脆弱性,需要有针对性的防御策略.
- 这种方法促进了实际的,持续的漏洞监测,以提高自动驾驶的安全性.
相关概念视频
Survival Tree
383
Survival trees are a non-parametric method used in survival analysis to model the relationship between a set of covariates and the time until an event of interest occurs, often referred to as the "time-to-event" or "survival time." This method is particularly useful when dealing with censored data, where the event has not occurred for some individuals by the end of the study period, or when the exact time of the event is unknown.
Building a Survival Tree
Constructing a...
Building a Survival Tree
Constructing a...
383
Force Classification
2.3K
Forces play a crucial role in the study of physics and engineering. They are essential in describing the motion, behavior, and equilibrium of objects in the physical world. Forces can be classified based on their origin, type, and direction of action.
Contact and non-contact forces are two of the most widely used categories of forces. As the name suggests, contact forces require physical contact between two objects to act upon each other. Examples of contact forces include frictional,...
Contact and non-contact forces are two of the most widely used categories of forces. As the name suggests, contact forces require physical contact between two objects to act upon each other. Examples of contact forces include frictional,...
2.3K
Difference from Background: Limit of Detection
8.0K
The limit of detection (LOD) is the smallest amount of analyte that can be distinguished from the background noise. The LOD value corresponds to the concentration at which the analyte signal is three times larger than the standard deviation of the blank signal. Below this value, the analyte signal cannot be differentiated from the background noise. It is calculated by dividing the calibration slope by 3 times the standard deviation of the blank signals.
The LOD indicates the presence or absence...
The LOD indicates the presence or absence...
8.0K
Three-Dimensional Force System:Problem Solving
1.3K
A three-dimensional force system refers to a scenario in which three forces act simultaneously in three different directions. This type of problem is commonly encountered in physics and engineering, where it is necessary to calculate the resultant force on the system, which can then be used to predict or analyze the behavior of the object or structure under consideration.
To solve a three-dimensional force system, first resolve each force into its respective scalar components. Do this using...
To solve a three-dimensional force system, first resolve each force into its respective scalar components. Do this using...
1.3K
Elastic Collisions: Case Study
20.2K
Elastic collision of a system demands conservation of both momentum and kinetic energy. To solve problems involving one-dimensional elastic collisions between two objects, the equations for conservation of momentum and conservation of internal kinetic energy can be used. For the two objects, the sum of momentum before the collision equals the total momentum after the collision. An elastic collision conserves internal kinetic energy, and so the sum of kinetic energies before the collision equals...
20.2K
Detection of Black Holes
2.5K
Although black holes were theoretically postulated in the 1920s, they remained outside the domain of observational astronomy until the 1970s.
Their closest cousins are neutron stars, which are composed almost entirely of neutrons packed against each other, making them extremely dense. A neutron star has the same mass as the Sun but its diameter is only a few kilometers. Therefore, the escape velocity from their surface is close to the speed of light.
Not until the 1960s, when the first neutron...
Their closest cousins are neutron stars, which are composed almost entirely of neutrons packed against each other, making them extremely dense. A neutron star has the same mass as the Sun but its diameter is only a few kilometers. Therefore, the escape velocity from their surface is close to the speed of light.
Not until the 1960s, when the first neutron...
2.5K
