Adversarial attacks on thermal infrared imaging expose the risk of related applications. Estimating the security of these systems is essential for safely deploying them in the real world. In many cases, realizing the attacks in the physical space requires elaborate special perturbations. These solutions are often \emph{impractical} and \emph{attention-grabbing}. To address the need for a physically practical and stealthy adversarial attack, we introduce \textsc{HotCold} Block, a novel physical attack for infrared detectors that hide persons utilizing the wearable Warming Paste and Cooling Paste. By attaching these readily available temperature-controlled materials to the body, \textsc{HotCold} Block evades human eyes efficiently. Moreover, unlike existing methods that build adversarial patches with complex texture and structure features, \textsc{HotCold} Block utilizes an SSP-oriented adversarial optimization algorithm that enables attacks with pure color blocks and explores the influence of size, shape, and position on attack performance. Extensive experimental results in both digital and physical environments demonstrate the performance of our proposed \textsc{HotCold} Block. \emph{Code is available: \textcolor{magenta}{https://github.com/weihui1308/HOTCOLDBlock}}.
翻译:热红外线成像的Adversarial攻击暴露了相关应用的风险。 估计这些系统的安全性对于安全地在现实世界部署这些系统至关重要。 在许多情况下, 实现这些系统的安全性对于在物理空间进行攻击需要精心设计特殊的扰动。 这些解决方案往往是 emph{ impractical} 和\ emph{ 注意- grabbing} 。 为解决物理实用和隐性对抗攻击的需要, 我们引入了\ textsc{ HotCold} 区块, 这是红外探测器的新物理攻击, 将使用磨损性粘贴和冷却粘贴的人隐藏起来。 通过将这些容易获得的温度控制材料附加在身体上,\ textsc{ HotC} 区块可以有效地躲避人类的眼睛。 此外, 与现有的建立具有复杂纹理和结构特征的对立式补补丁法的方法不同, 我们使用的SSP- plock- 制式对调控式调调调调算法, 能够用纯色块进行攻击, 并探索攻击性动作、 形状和位置的影响。 在数字和物理环境中都显示我们的拟议C/ crexexb/ clexb/ c/ crob/ crob/ c) 。 。 。 在数字/ crotologtalxx