Papers › Tracklet-Switch Adversarial Attack against Pedestrian Multi-Object Tracking Trackers

Tracklet-Switch Adversarial Attack against Pedestrian Multi-Object Tracking Trackers

17 Nov 2021arXiv:2111.08954archive 2025-07-28

Delv Lin, Qi Chen, Chengyu Zhou, Kun He

Multi-Object Tracking (MOT) has achieved aggressive progress and derived many excellent deep learning trackers. Meanwhile, most deep learning models are known to be vulnerable to adversarial examples that are crafted with small perturbations but could mislead the model prediction. In this work, we observe that the robustness on the MOT trackers is rarely studied, and it is challenging to attack the MOT system since its mature association algorithms are designed to be robust against errors during the tracking. To this end, we analyze the vulnerability of popular MOT trackers and propose a novel adversarial attack method called Tracklet-Switch (TraSw) against the complete tracking pipeline of MOT. The proposed TraSw can fool the advanced deep pedestrian trackers (i.e., FairMOT and ByteTrack), causing them fail to track the targets in the subsequent frames by perturbing very few frames. Experiments on the MOT-Challenge datasets (i.e., 2DMOT15, MOT17, and MOT20) show that TraSw can achieve an extraordinarily high success attack rate of over 95% by attacking only four frames on average. To our knowledge, this is the first work on the adversarial attack against the pedestrian MOT trackers. Code is available at https://github.com/JHL-HUST/TraSw .

PaperPDFCode

Code

derryhub/fairmot-attack officialmentioned in papermentioned on GitHubpytorch report
jhl-hust/trasw officialmentioned in papermentioned on GitHubpytorch report
DerryHub/ByteTrack-attack mentioned on GitHubpytorch report
zhou0123/JDE-attack mentioned on GitHubpytorch report
zhou0123/JDE_F_ATTACK mentioned on GitHubpytorch report

Repository list and official/mentioned flags are the archive's, frozen 2025-07-28. Reachability, where shown, is from one Syntology probe window (2026-09-16 to 2026-09-18); repositories not probed show nothing. GitHub stars are not tracked.

Code Syntology ran Syntology

Not run by Syntology. Nothing on this page verifies that the listed code works.

Tasks

Adversarial AttackMulti-Object TrackingObject DetectionObject Tracking

Results from the paper archive 2025-07-28

No leaderboard rows for this paper in the archive.

Methods

DLAFairMOT

Report a problem or propose a change · a person checks every report against the paper or source before anything changes; decisions are listed on /corrections