{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,30]],"date-time":"2026-04-30T10:09:19Z","timestamp":1777543759780,"version":"3.51.4"},"reference-count":29,"publisher":"Wiley","license":[{"start":{"date-parts":[[2021,4,7]],"date-time":"2021-04-07T00:00:00Z","timestamp":1617753600000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"2020 Information Security Software Project, Network Threat Depth Analysis Software","award":["KY10600200021"],"award-info":[{"award-number":["KY10600200021"]}]},{"name":"2019 Industrial Internet Innovation and Development Engineering, On-site Emergency Detection Tools in the Field of Industrial Internet Security","award":["KY10600200021"],"award-info":[{"award-number":["KY10600200021"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security and Communication Networks"],"published-print":{"date-parts":[[2021,4,7]]},"abstract":"<jats:p>Deep learning has been widely used in the field of image classification and image recognition and achieved positive practical results. However, in recent years, a number of studies have found that the accuracy of deep learning model based on classification greatly drops when making only subtle changes to the original examples, thus realizing the attack on the deep learning model. The main methods are as follows: adjust the pixels of attack examples invisible to human eyes and induce deep learning model to make the wrong classification; by adding an adversarial patch on the detection target, guide and deceive the classification model to make it misclassification. Therefore, these methods have strong randomness and are of very limited use in practical application. Different from the previous perturbation to traffic signs, our paper proposes a method that is able to successfully hide and misclassify vehicles in complex contexts. This method takes into account the complex real scenarios and can perturb with the pictures taken by a camera and mobile phone so that the detector based on deep learning model cannot detect the vehicle or misclassification. In order to improve the robustness, the position and size of the adversarial patch are adjusted according to different detection models by introducing the attachment mechanism. Through the test of different detectors, the patch generated in the single target detection algorithm can also attack other detectors and do well in transferability. Based on the experimental part of this paper, the proposed algorithm is able to significantly lower the accuracy of the detector. Affected by the real world, such as distance, light, angles, resolution, etc., the false classification of the target is realized by reducing the confidence level and background of the target, which greatly perturbs the detection results of the target detector. In COCO Dataset 2017, it reveals that the success rate of this algorithm reaches 88.7%.<\/jats:p>","DOI":"10.1155\/2021\/6637936","type":"journal-article","created":{"date-parts":[[2021,4,8]],"date-time":"2021-04-08T21:51:26Z","timestamp":1617918686000},"page":"1-11","source":"Crossref","is-referenced-by-count":9,"title":["Attention-Guided Digital Adversarial Patches on Visual Detection"],"prefix":"10.1155","volume":"2021","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7536-9764","authenticated-orcid":true,"given":"Dapeng","family":"Lang","sequence":"first","affiliation":[{"name":"School of Computer Science and Technology, Harbin University of Science and Technology, Harbin 150001, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5176-7725","authenticated-orcid":true,"given":"Deyun","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Harbin University of Science and Technology, Harbin 150001, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9785-9406","authenticated-orcid":true,"given":"Ran","family":"Shi","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Heilongjiang University, Harbin 150001, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5156-651X","authenticated-orcid":true,"given":"Yongjun","family":"He","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Harbin University of Science and Technology, Harbin 150001, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","reference":[{"key":"1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2020.08.087"},{"key":"2","article-title":"This looks like that: deep learning for interpretable image recognition","volume":"1","author":"C. Chen","year":"2019","journal-title":"Advances in Neural Information Processing System"},{"key":"3","first-page":"502","article-title":"Gaussian YOLOv3: an accurate and fast object detector using localization uncertainty for autonomous driving","author":"J. Choi"},{"key":"4","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.324"},{"key":"5","doi-asserted-by":"publisher","DOI":"10.1155\/2020\/5890820"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.690"},{"key":"7","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2016.2577031"},{"key":"8","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2964424"},{"key":"9","doi-asserted-by":"publisher","DOI":"10.1109\/taslp.2016.2615239"},{"key":"10","article-title":"Self-similarity grouping: a simple unsupervised cross domain adaptation approach for person re-identification","author":"Y. Fu","year":"2019"},{"key":"11","article-title":"Physical adversarial examples for object detectors","author":"K. Eykholt","year":"2018"},{"key":"12","article-title":"Protecting privacy in shared photos via adversarial examples based stealth","volume":"2017","author":"L. Yujia","year":"2017","journal-title":"Security and Communication Networks"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2018.00210"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1109\/tnnls.2018.2886017"},{"issue":"4","key":"15","first-page":"1731","article-title":"A state space abstract algorithm of incremental data recognition based on model checking","volume":"10","author":"D. Lang","year":"2014","journal-title":"Journal of Computational Information Systems"},{"key":"16","doi-asserted-by":"crossref","article-title":"PairedCycleGAN: asymmetric style transfer for applying and removing makeup","author":"H. Chang","DOI":"10.1109\/CVPR.2018.00012"},{"key":"17","article-title":"NO need to worry about adversarial examples in object detection in autonomous vehicles","author":"J. Marniemi","year":"1975"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins2020.12.042"},{"key":"19","doi-asserted-by":"publisher","DOI":"10.1109\/tcsvt.2019.2944430"},{"key":"20","first-page":"5967","article-title":"Image-to-Image translation with conditional adversarial networks","author":"P. Isola"},{"key":"21","doi-asserted-by":"publisher","DOI":"10.1007\/s10845-020-01639-1"},{"key":"22","article-title":"Cycle-consistent adversarial GAN","author":"L. Jiang","year":"2020"},{"key":"23","first-page":"839","article-title":"Grad-CAM++: generalized gradient-based visual explanations for deep convolutional networks","author":"A. Chattopadhay"},{"key":"24","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-019-01228-7"},{"key":"25","doi-asserted-by":"publisher","DOI":"10.1002\/jcd.21358"},{"key":"26","doi-asserted-by":"crossref","article-title":"The CRO kernel: using concomitant rank order hashes for sparse high dimensional randomized feature maps","author":"K. Eshghi","DOI":"10.1109\/ICDE.2016.7498284"},{"key":"27","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2020.106939"},{"key":"28","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33011028"},{"key":"29","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00055"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/6637936.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/6637936.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/6637936.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,4,8]],"date-time":"2021-04-08T21:51:35Z","timestamp":1617918695000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/scn\/2021\/6637936\/"}},"subtitle":[],"editor":[{"given":"Tom","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"editor","vocabulary":"crossref"}]}],"short-title":[],"issued":{"date-parts":[[2021,4,7]]},"references-count":29,"alternative-id":["6637936","6637936"],"URL":"https:\/\/doi.org\/10.1155\/2021\/6637936","relation":{},"ISSN":["1939-0122","1939-0114"],"issn-type":[{"value":"1939-0122","type":"electronic"},{"value":"1939-0114","type":"print"}],"subject":[],"published":{"date-parts":[[2021,4,7]]}}}