针对YOLOv8的全局对抗攻击方案设计
Design of a Global Adversarial Attack Scheme for YOLOv8
-
摘要: 当前,基于深度学习的目标检测技术得到了快速发展,像YOLOv8等先进的目标检测器在自动驾驶等领域得到了广泛的应用。根据研究表明,此类目标检测器很容易受到对抗样本的攻击。本文针对当前先进的YOLOv8目标检测器的网络结构设计了一种不可察觉的全局扰动攻击方案Adam-TOG,该方案在梯度迭代攻击的基础上引入了Adam算法作为优化方案,很好的解决了梯度迭代过程中优化算法容易陷入欠佳的局部最优解的问题,进而提升了方案的攻击效果。实验结果表明,本文的攻击方案可以使YOLOv8目标检测器在VOC数据集上的检测精度下降至2.6%,相较于基线方案TOG (Targeted Adversarial Objectness Gradient Attacks)攻击成功率提高了1.5%,这充分说明本文提出的攻击方案的高效性。Abstract: Deep learning-based object detection technology has rapidly advanced, with state-of-the-art detectors like YOLOv8 being widely utilized in fields such as autonomous driving. Research indicates that these object detectors are highly susceptible to adversarial attacks. In response to this vulnerability, we propose an imperceptible global perturbation attack method specifically designed for the advanced YOLOv8 detector. This method builds on the Gradient Iterative Attack by incorporating the Adam optimization algorithm, effectively addressing the problem of suboptimal local minima during gradient iterations and thereby enhancing the attack's performance. Experimental results on the VOC dataset show that our proposed method can reduce the detection accuracy of the YOLOv8 detector to 2.6%, with a 1.5% improvement in attack success rate compared to the baseline TOG (Targeted Adversarial Objectness Gradient Attacks) method. These results clearly demonstrate the efficiency and effectiveness of the proposed attack strategy.