Trusted-AI/adversarial-robustness-toolbox

Adversarial Patch attack is not working in **attack_adversarial_patch_pytorch_yolo.ipynb**

Tmoxic opened this issue · 3 comments

I used yolov5 to perform the adversarial patch attack for object detection with my own trained weight which was trained on Dior Dataset, I followed the steps described in "attack_adversarial_patch_pytorch_yolo.ipynb", but the output image does not affect the detection result, as can be seen from the image showing below.
Screenshot from 2023-06-20 15-07-52

Try setting targeted=False and also playing around with the patch_location. Maybe try patch_location=(100, 100)

Try setting targeted=False and also playing around with the patch_location. Maybe try patch_location=(100, 100)

It worked, it detected the patch as different objects. but the airplane is still detected as airplane, is that common?
Predictions on image with patch

In my testing, yeah that is what happens. However, if you want to suppress detection entirely, you might want to try RobustDPatch.