Towards Physically Realizable Adversarial Attenuation Patch against SAR Object Detection

• URL: http://arxiv.org/abs/2604.00887v2
• Date: Thu, 02 Apr 2026 01:50:50 GMT
• Title: Towards Physically Realizable Adversarial Attenuation Patch against SAR Object Detection
• Abstract summary: A novel Adversarial Attenuation Patch (AAP) method is proposed that employs energy-constrained optimization strategy.<n>AAP exhibits strong potential for physical realization by aligning with signal-level electronic jamming mechanisms.<n>This study provides a physical grounded perspective for adversarial attacks on SAR target detection systems.
• Score: 4.7157664259744285
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Deep neural networks have demonstrated excellent performance in SAR target detection tasks but remain susceptible to adversarial attacks. Existing SAR-specific attack methods can effectively deceive detectors; however, they often introduce noticeable perturbations and are largely confined to digital domain, neglecting physical implementation constrains for attacking SAR systems. In this paper, a novel Adversarial Attenuation Patch (AAP) method is proposed that employs energy-constrained optimization strategy coupled with an attenuation-based deployment framework to achieve a seamless balance between attack effectiveness and stealthiness. More importantly, AAP exhibits strong potential for physical realization by aligning with signal-level electronic jamming mechanisms. Experimental results show that AAP effectively degrades detection performance while preserving high imperceptibility, and shows favorable transferability across different models. This study provides a physical grounded perspective for adversarial attacks on SAR target detection systems and facilitates the design of more covert and practically deployable attack strategies. The source code is made available at https://github.com/boremycin/SAAP.

Related papers

• Enhancing Adversarial Robustness in Network Intrusion Detection: A Layer-wise Adaptive Regularization Approach [0.20443308797642964]
  New wave of adversarial attacks makes Network Intrusion Detection Systems more open to such threats.<n>State-the-art adversarial training methods have shown promising results in producing more robust robustnesss.<n>We present an insightful approach, called LARAR, that incorporates additional layer-wise vulnerability analysis and adaptive weighting in conventional adversarial training methods.
  arXiv  Detail & Related papers  (2026-05-09T12:10:01Z)
• Defending against Patch-Based and Texture-Based Adversarial Attacks with Spectral Decomposition [29.049635093468456]
  Adversarial examples present significant challenges to the security of Deep Neural Network (DNN) applications.<n> patch-based and texture-based attacks pose real threats to security-critical applications such as person detection in surveillance and autonomous systems.<n>We propose Adversarial Spectrum Defense (ASD) to analyze adversarial patterns across multiple frequency scales.
  arXiv  Detail & Related papers  (2026-04-12T16:24:08Z)
• SRAW-Attack: Space-Reweighted Adversarial Warping Attack for SAR Target Recognition [4.643429435927802]
  Space-Reweighted Adrial Warping (SRAW) is proposed, which generates adversarial examples through optimized spatial deformation.<n>Experiments demonstrate that SRAW significantly degrades the performance of state-of-the-art SAR-ATR models.
  arXiv  Detail & Related papers  (2026-01-15T12:09:49Z)
• Generative Adversarial Evasion and Out-of-Distribution Detection for UAV Cyber-Attacks [6.956559003734227]
  This paper introduces a conditional generative adversarial network (cGAN)-based framework for crafting stealthy adversarial attacks that evade IDS mechanisms.<n>Our findings emphasize the importance of advanced probabilistic modeling to strengthen IDS capabilities against adaptive, generative-model-based cyber intrusions.
  arXiv  Detail & Related papers  (2025-06-26T10:56:34Z)
• Realistic Scatterer Based Adversarial Attacks on SAR Image Classifiers [7.858656052565242]
  An adversarial attack perturbs SAR images of on-ground targets such that the classifiers are misled into making incorrect predictions. We propose the On-Target Scatterer Attack (OTSA), a scatterer-based physical adversarial attack. We show that our attack obtains significantly higher success rates under the positioning constraint compared with the existing method.
  arXiv  Detail & Related papers  (2023-12-05T17:36:34Z)
• DALA: A Distribution-Aware LoRA-Based Adversarial Attack against Language Models [64.79319733514266]
  Adversarial attacks can introduce subtle perturbations to input data. Recent attack methods can achieve a relatively high attack success rate (ASR) We propose a Distribution-Aware LoRA-based Adversarial Attack (DALA) method.
  arXiv  Detail & Related papers  (2023-11-14T23:43:47Z)
• Guidance Through Surrogate: Towards a Generic Diagnostic Attack [101.36906370355435]
  We develop a guided mechanism to avoid local minima during attack optimization, leading to a novel attack dubbed Guided Projected Gradient Attack (G-PGA) Our modified attack does not require random restarts, large number of attack iterations or search for an optimal step-size. More than an effective attack, G-PGA can be used as a diagnostic tool to reveal elusive robustness due to gradient masking in adversarial defenses.
  arXiv  Detail & Related papers  (2022-12-30T18:45:23Z)
• Benchmarking Adversarial Patch Against Aerial Detection [11.591143898488312]
  A novel adaptive-patch-based physical attack (AP-PA) framework is proposed. AP-PA generates adversarial patches that are adaptive in both physical dynamics and varying scales. We establish one of the first comprehensive, coherent, and rigorous benchmarks to evaluate the attack efficacy of adversarial patches on aerial detection tasks.
  arXiv  Detail & Related papers  (2022-10-30T07:55:59Z)
• Illusory Attacks: Information-Theoretic Detectability Matters in Adversarial Attacks [76.35478518372692]
  We introduce epsilon-illusory, a novel form of adversarial attack on sequential decision-makers. Compared to existing attacks, we empirically find epsilon-illusory to be significantly harder to detect with automated methods. Our findings suggest the need for better anomaly detectors, as well as effective hardware- and system-level defenses.
  arXiv  Detail & Related papers  (2022-07-20T19:49:09Z)
• On Trace of PGD-Like Adversarial Attacks [77.75152218980605]
  Adversarial attacks pose safety and security concerns for deep learning applications. We construct Adrial Response Characteristics (ARC) features to reflect the model's gradient consistency. Our method is intuitive, light-weighted, non-intrusive, and data-undemanding.
  arXiv  Detail & Related papers  (2022-05-19T14:26:50Z)
• Defending From Physically-Realizable Adversarial Attacks Through Internal Over-Activation Analysis [61.68061613161187]
  Z-Mask is a robust and effective strategy to improve the robustness of convolutional networks against adversarial attacks. The presented defense relies on specific Z-score analysis performed on the internal network features to detect and mask the pixels corresponding to adversarial objects in the input image. Additional experiments showed that Z-Mask is also robust against possible defense-aware attacks.
  arXiv  Detail & Related papers  (2022-03-14T17:41:46Z)
• Evaluating the Robustness of Semantic Segmentation for Autonomous Driving against Real-World Adversarial Patch Attacks [62.87459235819762]
  In a real-world scenario like autonomous driving, more attention should be devoted to real-world adversarial examples (RWAEs) This paper presents an in-depth evaluation of the robustness of popular SS models by testing the effects of both digital and real-world adversarial patches.
  arXiv  Detail & Related papers  (2021-08-13T11:49:09Z)
• Investigating Robustness of Adversarial Samples Detection for Automatic Speaker Verification [78.51092318750102]
  This work proposes to defend ASV systems against adversarial attacks with a separate detection network. A VGG-like binary classification detector is introduced and demonstrated to be effective on detecting adversarial samples.
  arXiv  Detail & Related papers  (2020-06-11T04:31:56Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.