{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/transferable-controllable-and-inconspicuous","title":"Transferable, Controllable, and Inconspicuous Adversarial Attacks on Person Re-identification With Deep Mis-Ranking","arxiv_id":"2004.04199","date":"2020-04-08","proceeding":"CVPR 2020 6","authors":["Hongjun Wang","Guangrun Wang","Ya Li","Dongyu Zhang","Liang Lin"],"abstract":"The success of DNNs has driven the extensive applications of person re-identification (ReID) into a new era. However, whether ReID inherits the vulnerability of DNNs remains unexplored. To examine the robustness of ReID systems is rather important because the insecurity of ReID systems may cause severe losses, e.g., the criminals may use the adversarial perturbations to cheat the CCTV systems. In this work, we examine the insecurity of current best-performing ReID models by proposing a learning-to-mis-rank formulation to perturb the ranking of the system output. As the cross-dataset transferability is crucial in the ReID domain, we also perform a back-box attack by developing a novel multi-stage network architecture that pyramids the features of different levels to extract general and transferable features for the adversarial perturbations. Our method can control the number of malicious pixels by using differentiable multi-shot sampling. To guarantee the inconspicuousness of the attack, we also propose a new perception loss to achieve better visual quality. Extensive experiments on four of the largest ReID benchmarks (i.e., Market1501 [45], CUHK03 [18], DukeMTMC [33], and MSMT17 [40]) not only show the effectiveness of our method, but also provides directions of the future improvement in the robustness of ReID systems. For example, the accuracy of one of the best-performing ReID systems drops sharply from 91.8% to 1.4% after being attacked by our method. Some attack results are shown in Fig. 1. The code is available at https://github.com/whj363636/Adversarial-attack-on-Person-ReID-With-Deep-Mis-Ranking.","url_abs":"https://arxiv.org/abs/2004.04199v1","url_pdf":"https://arxiv.org/pdf/2004.04199v1.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"transferable-controllable-and-inconspicuous","repo_url":"https://github.com/whj363636/Adversarial-attack-on-Person-ReID-With-Deep-Mis-Ranking","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok","spdx":"MIT"}}],"tasks":[{"task_slug":"adversarial-attack","task_name":"Adversarial Attack"},{"task_slug":"person-re-identification","task_name":"Person Re-Identification"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2004.04199","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2004.04199"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/whj363636/Adversarial-attack-on-Person-ReID-With-Deep-Mis-Ranking","reach":{"status":"ok","spdx":"MIT"}}],"summary":{"unverified":3},"by_repo_kind":{"official":{"samples":3,"ran":0,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"fa359ead7245a77f","entry":"DeepSupervision","repo":"whj363636/Adversarial-attack-on-Person-ReID-With-Deep-Mis-Ranking","repo_kind":"official","path":"advloss.py","file_url":"https://github.com/whj363636/Adversarial-attack-on-Person-ReID-With-Deep-Mis-Ranking/blob/HEAD/advloss.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"fa359ead7245a77f"}},{"code_sha256_prefix":"8b6d14c9a435635d","entry":"get_keys","repo":"whj363636/Adversarial-attack-on-Person-ReID-With-Deep-Mis-Ranking","repo_kind":"official","path":"ReID_attr.py","file_url":"https://github.com/whj363636/Adversarial-attack-on-Person-ReID-With-Deep-Mis-Ranking/blob/HEAD/ReID_attr.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"8b6d14c9a435635d"}},{"code_sha256_prefix":"4e4040c35bd7ea15","entry":"re_ranking","repo":"whj363636/Adversarial-attack-on-Person-ReID-With-Deep-Mis-Ranking","repo_kind":"official","path":"util/re_ranking.py","file_url":"https://github.com/whj363636/Adversarial-attack-on-Person-ReID-With-Deep-Mis-Ranking/blob/HEAD/util/re_ranking.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"4e4040c35bd7ea15"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}