{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/evading-real-time-person-detectors-by","title":"Adversarial T-shirt! Evading Person Detectors in A Physical World","arxiv_id":"1910.11099","date":"2019-10-18","proceeding":"ECCV 2020 8","authors":["Kaidi Xu","Gaoyuan Zhang","Sijia Liu","Quanfu Fan","Mengshu Sun","Hongge Chen","Pin-Yu Chen","Yanzhi Wang","Xue Lin"],"abstract":"It is known that deep neural networks (DNNs) are vulnerable to adversarial attacks. The so-called physical adversarial examples deceive DNN-based decisionmakers by attaching adversarial patches to real objects. However, most of the existing works on physical adversarial attacks focus on static objects such as glass frames, stop signs and images attached to cardboard. In this work, we proposed adversarial T-shirts, a robust physical adversarial example for evading person detectors even if it could undergo non-rigid deformation due to a moving person's pose changes. To the best of our knowledge, this is the first work that models the effect of deformation for designing physical adversarial examples with respect to-rigid objects such as T-shirts. We show that the proposed method achieves74% and 57% attack success rates in the digital and physical worlds respectively against YOLOv2. In contrast, the state-of-the-art physical attack method to fool a person detector only achieves 18% attack success rate. Furthermore, by leveraging min-max optimization, we extend our method to the ensemble attack setting against two object detectors YOLO-v2 and Faster R-CNN simultaneously.","url_abs":"https://arxiv.org/abs/1910.11099v3","url_pdf":"https://arxiv.org/pdf/1910.11099v3.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"evading-real-time-person-detectors-by","repo_url":"https://github.com/jandress94/adversarial_tshirt","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"none","reach":null}],"tasks":[],"methods":[{"method_slug":"1x1-convolution","method_name":"1x1 Convolution"},{"method_slug":"average-pooling","method_name":"Average Pooling"},{"method_slug":"batch-normalization","method_name":"Batch Normalization"},{"method_slug":"convolution","method_name":"Convolution"},{"method_slug":"darknet-19","method_name":"Darknet-19"},{"method_slug":"faster-r-cnn","method_name":"Faster R-CNN"},{"method_slug":"global-average-pooling","method_name":"Global Average Pooling"},{"method_slug":"max-pooling","method_name":"Max Pooling"},{"method_slug":"rpn","method_name":"RPN"},{"method_slug":"roipool","method_name":"RoIPool"},{"method_slug":"softmax","method_name":"Softmax"},{"method_slug":"yolov2","method_name":"YOLOv2"}],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":"https://syntology.ai/paper/1910.11099","atlas_url":"https://app.syntology.ai/?focus=1910.11099","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1910.11099"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-25T09:33:49+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/jandress94/adversarial_tshirt","reach":null}],"summary":{"ran_draft_wrong":1,"ran_fixture":1,"ran_honours":1},"by_repo_kind":{"listed":{"samples":3,"ran":3,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":3,"samples":[{"code_sha256_prefix":"68f83542798faefe","entry":"get_spline_fn","repo":"jandress94/adversarial_tshirt","repo_kind":"listed","path":"adversarial_tshirt/tps/tps.py","file_url":"https://github.com/jandress94/adversarial_tshirt/blob/HEAD/adversarial_tshirt/tps/tps.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"68f83542798faefe"}},{"code_sha256_prefix":"5694cbeb2338472b","entry":"solve_tps","repo":"jandress94/adversarial_tshirt","repo_kind":"listed","path":"adversarial_tshirt/tps/tps.py","file_url":"https://github.com/jandress94/adversarial_tshirt/blob/HEAD/adversarial_tshirt/tps/tps.py","link_basis":"first_harvest_node","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"5694cbeb2338472b"}},{"code_sha256_prefix":"f97aa79b83dc3788","entry":"u","repo":"jandress94/adversarial_tshirt","repo_kind":"listed","path":"adversarial_tshirt/tps/tps.py","file_url":"https://github.com/jandress94/adversarial_tshirt/blob/HEAD/adversarial_tshirt/tps/tps.py","link_basis":"first_harvest_node","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"f97aa79b83dc3788"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}