{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/transferable-adversarial-attacks-for-image","title":"Transferable Adversarial Attacks for Image and Video Object Detection","arxiv_id":"1811.12641","date":"2018-11-30","proceeding":null,"authors":["Xingxing Wei","Siyuan Liang","Ning Chen","Xiaochun Cao"],"abstract":"Adversarial examples have been demonstrated to threaten many computer vision tasks including object detection. However, the existing attacking methods for object detection have two limitations: poor transferability, which denotes that the generated adversarial examples have low success rate to attack other kinds of detection methods, and high computation cost, which means that they need more time to generate an adversarial image, and therefore are difficult to deal with the video data. To address these issues, we utilize a generative mechanism to obtain the adversarial image and video. In this way, the processing time is reduced. To enhance the transferability, we destroy the feature maps extracted from the feature network, which usually constitutes the basis of object detectors. The proposed method is based on the Generative Adversarial Network (GAN) framework, where we combine the high-level class loss and low-level feature loss to jointly train the adversarial example generator. A series of experiments conducted on PASCAL VOC and ImageNet VID datasets show that our method can efficiently generate image and video adversarial examples, and more importantly, these adversarial examples have better transferability, and thus, are able to simultaneously attack two kinds of representative object detection models: proposal based models like Faster-RCNN, and regression based models like SSD.","url_abs":"https://arxiv.org/abs/1811.12641v5","url_pdf":"https://arxiv.org/pdf/1811.12641v5.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"transferable-adversarial-attacks-for-image","repo_url":"https://github.com/anonymous20210106/attack_detector","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok"}},{"paper_slug":"transferable-adversarial-attacks-for-image","repo_url":"https://github.com/cheonlian/DeepfakeBlock","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"tf","reach":{"status":"ok"}},{"paper_slug":"transferable-adversarial-attacks-for-image","repo_url":"https://github.com/LiangSiyuan21/Adversarial-Attacks-for-Image-and-Video-Object-Detection/tree/master/img_attack_with_attention","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":0,"framework":"pytorch","reach":null}],"tasks":[{"task_slug":null,"task_name":"Generative Adversarial Network"},{"task_slug":"object","task_name":"Object"},{"task_slug":"object-detection","task_name":"Object Detection"},{"task_slug":"video-object-detection","task_name":"Video Object Detection"},{"task_slug":"object-detection-1","task_name":"object-detection"}],"methods":[{"method_slug":"1x1-convolution","method_name":"1x1 Convolution"},{"method_slug":"convolution","method_name":"Convolution"},{"method_slug":"non-maximum-suppression","method_name":"Non Maximum Suppression"},{"method_slug":"ssd","method_name":"SSD"}],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=1811.12641","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1811.12641"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/anonymous20210106/attack_detector","reach":{"status":"ok"}},{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/LiangSiyuan21/Adversarial-Attacks-for-Image-and-Video-Object-Detection/tree/master/img_attack_with_attention","reach":null},{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/cheonlian/DeepfakeBlock","reach":{"status":"ok"}}],"summary":{"ran_honours":1,"ran_fixture":1,"ran_draft_wrong":2,"unverified":1},"by_repo_kind":{"listed":{"samples":5,"ran":4,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":5,"samples":[{"code_sha256_prefix":"b4f17392a2384ca7","entry":"L2_dist","repo":"LiangSiyuan21/Adversarial-Attacks-for-Image-and-Video-Object-Detection","repo_kind":"listed","path":"img_attack_with_attention/attacks.py","file_url":"https://github.com/LiangSiyuan21/Adversarial-Attacks-for-Image-and-Video-Object-Detection/blob/HEAD/img_attack_with_attention/attacks.py","link_basis":"first_harvest_node","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"b4f17392a2384ca7"}},{"code_sha256_prefix":"abae5e809ead5143","entry":"calAttentionMask","repo":"LiangSiyuan21/Adversarial-Attacks-for-Image-and-Video-Object-Detection","repo_kind":"listed","path":"img_attack_with_attention/attacks.py","file_url":"https://github.com/LiangSiyuan21/Adversarial-Attacks-for-Image-and-Video-Object-Detection/blob/HEAD/img_attack_with_attention/attacks.py","link_basis":"first_harvest_node","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"well_formed","behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"abae5e809ead5143"}},{"code_sha256_prefix":"10fdae626d954364","entry":"init_net","repo":"LiangSiyuan21/Adversarial-Attacks-for-Image-and-Video-Object-Detection","repo_kind":"listed","path":"img_attack_with_attention/model/GAN.py","file_url":"https://github.com/LiangSiyuan21/Adversarial-Attacks-for-Image-and-Video-Object-Detection/blob/HEAD/img_attack_with_attention/model/GAN.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"10fdae626d954364"}},{"code_sha256_prefix":"adf70cc0c6fe2f98","entry":"reduce_sum","repo":"LiangSiyuan21/Adversarial-Attacks-for-Image-and-Video-Object-Detection","repo_kind":"listed","path":"img_attack_with_attention/attacks.py","file_url":"https://github.com/LiangSiyuan21/Adversarial-Attacks-for-Image-and-Video-Object-Detection/blob/HEAD/img_attack_with_attention/attacks.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"MISDECLARED","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"adf70cc0c6fe2f98"}},{"code_sha256_prefix":"66bf9e7084c27743","entry":"define_D","repo":"LiangSiyuan21/Adversarial-Attacks-for-Image-and-Video-Object-Detection","repo_kind":"listed","path":"img_attack_with_attention/model/GAN.py","file_url":"https://github.com/LiangSiyuan21/Adversarial-Attacks-for-Image-and-Video-Object-Detection/blob/HEAD/img_attack_with_attention/model/GAN.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"66bf9e7084c27743"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}