{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T04:42:03Z","timestamp":1760244123089,"version":"build-2065373602"},"reference-count":35,"publisher":"MDPI AG","issue":"10","license":[{"start":{"date-parts":[[2022,9,29]],"date-time":"2022-09-29T00:00:00Z","timestamp":1664409600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"SASTIND","award":["JCKY2021206B102"],"award-info":[{"award-number":["JCKY2021206B102"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Information"],"abstract":"<jats:p>The deep model is widely used and has been demonstrated to have more hidden security risks. An adversarial attack can bypass the traditional means of defense. By modifying the input data, the attack on the deep model is realized, and it is imperceptible to humans. The existing adversarial example generation methods mainly attack the whole image. The optimization iterative direction is easy to predict, and the attack flexibility is low. For more complex scenarios, this paper proposes an edge-restricted adversarial example generation algorithm (Re-AEG) based on semantic segmentation. The algorithm can attack one or more specific objects in the image so that the detector cannot detect the objects. First, the algorithm automatically locates the attack objects according to the application requirements. Through the semantic segmentation algorithm, the attacked object is separated and the mask matrix for the object is generated. The algorithm proposed in this paper can attack the object in the region, converge quickly and successfully deceive the deep detection model. The algorithm only hides some sensitive objects in the image, rather than completely invalidating the detection model and causing reported errors, so it has higher concealment than the previous adversarial example generation algorithms. In this paper, a comparative experiment is carried out on ImageNet and coco2017 datasets, and the attack success rate is higher than 92%.<\/jats:p>","DOI":"10.3390\/info13100465","type":"journal-article","created":{"date-parts":[[2022,9,29]],"date-time":"2022-09-29T23:09:29Z","timestamp":1664492969000},"page":"465","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["An Adversarial Attack Method against Specified Objects Based on Instance Segmentation"],"prefix":"10.3390","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7536-9764","authenticated-orcid":false,"given":"Dapeng","family":"Lang","sequence":"first","affiliation":[{"name":"School of Computer Science and Technology, Harbin University of Science and Technology, Harbin 150080, China"},{"name":"College of Computer Science and Technology, Harbin Engineering University, Harbin 150001, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Deyun","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Harbin University of Science and Technology, Harbin 150080, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sizhao","family":"Li","sequence":"additional","affiliation":[{"name":"Faculty of Engineering, The Chinese University of Hong Kong, Hong Kong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yongjun","family":"He","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Harbin University of Science and Technology, Harbin 150080, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2022,9,29]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"834","DOI":"10.1109\/TPAMI.2017.2699184","article-title":"Deeplab: Semantic image segmentation with deep convolutional nets, atrous convolution, and fully connected crfs","volume":"40","author":"Chen","year":"2018","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"ref_2","unstructured":"Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., and Fergus, R. (2013). Intriguing properties of neural networks. arXiv."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Richter, M.L., Schoning, J., Wiedenroth, A., and Krumnack, U. (2021). Should you go deeper? Optimizing convolutional neural network architectures without training. arXiv.","DOI":"10.1109\/ICMLA52953.2021.00159"},{"key":"ref_4","unstructured":"Finlayson, S.G., Chung, H.W., Kohane, I.S., and Beam, A.L. (2018). Adversarial attacks against medical deep learning systems. arXiv."},{"key":"ref_5","unstructured":"Croce, F., and Hein, M. (2020). Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. arXiv."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Nguyen, A., Yosinski, J., and Clune, J. (2014, January 23\u201328). Deep neural networks are easily fooled: High confidence predictions for unrecognizable images. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR), Columbus, OH, USA.","DOI":"10.1109\/CVPR.2015.7298640"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Tabacof, P., and Valle, E. (2016, January 24\u201329). Exploring the space of adversarial images. Proceedings of the 2016 International Joint Conference on Neural Networks (IJCNN), Vancouver, BC, Canada.","DOI":"10.1109\/IJCNN.2016.7727230"},{"key":"ref_8","unstructured":"Goodfellow, I.J., Shlens, J., and Szegedy, C. (2014). Explaining and harnessing adversarial examples. arXiv."},{"key":"ref_9","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., and Vladu, A. (2017). Towards deep learning models resistant to adversarial attacks. arXiv."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfoolis, M., Fawzi, A., and Frossard, P. (2016, January 27\u201330). Deepfool: A simple and accurate method to fool deep neural networks. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR), Las Vegas, NV, USA.","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.M., Fawzi, A., Fawzi, O., and Frossard, P. (2017, January 21\u201326). Universal adversarial perturbations. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR), Honolulu, HI, USA.","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Carlini, N., and Wagner, D. (2017, January 22). Towards evaluating the robustness of neural networks. Proceedings of the IEEE Symposium on Security and Privacy (S&P), San Jose, CA, USA.","DOI":"10.1109\/SP.2017.49"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Shi, Y., and Han, Y. (2018, January 23\u201327). Schmidt: Image augmentation for black-box adversarial attack. Proceedings of the IEEE International Conference on Multimedia and Expo (ICME), San Diego, CA, USA.","DOI":"10.1109\/ICME.2018.8486449"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Liu, Y., Zhang, W., and Yu, N. (2019, January 8\u201312). Query-free embedding attack against deep learning. Proceedings of the IEEE International Conference on Multimedia and Expo (ICME), Shanghai, China.","DOI":"10.1109\/ICME.2019.00073"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Gao, L., Zhang, Q., Song, J., Liu, X., and Shen, H.T. (2020). Patch-Wise Attack for Fooling Deep Neural Network. European Conference on Computer Vision, Springer.","DOI":"10.1007\/978-3-030-58604-1_19"},{"key":"ref_16","unstructured":"Z\u00fcgner, D., Akbarnejad, A., and G\u00fcnnemann, S. Adversarial attacks on neural networks for graph data. Proceedings of the 24th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining, London, UK."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Marra, F., Gragnaniello, D., Verdoliva, L., and Poggi, G. (2019, January 28\u201330). Do GANs leave artificial fingerprints?. Proceedings of the 2019 IEEE Conference on Multimedia Information Processing and Retrieval (MIPR), San Jose, CA, USA.","DOI":"10.1109\/MIPR.2019.00103"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"6637936","DOI":"10.1155\/2021\/6637936","article-title":"Attention-guided digital adversarial patches on visual detection","volume":"2021","author":"Lang","year":"2021","journal-title":"Secur. Commun. Netw."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Sharif, M., Bhagavatula, S., Bauer, L., and Reiter, M.K. (2016, January 24\u201328). Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition. Proceedings of the 23rd ACM Conference Computer and Communications Security (CCS), Vienna, Austria.","DOI":"10.1145\/2976749.2978392"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Xu, K., Zhang, G., Liu, S., Fan, Q., Sun, M., Chen, H., Chen, P.Y., Wang, Y., and Lin, X. (2020, January 23\u201328). Adversarial t-shirt evading person detectors in a physical world. Proceedings of the European Conference on Computer Vision (ECCV), Glasgow, UK.","DOI":"10.1007\/978-3-030-58558-7_39"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Ariyanto, M., and Purnamasari, P.D. (2021, January 13\u201315). Object detection system for self-checkout cashier system based on faster region-based convolution neural network and YOLO9000. Proceedings of the 2021 17th International Conference on Quality in Research (QIR): International Symposium on Electrical and Computer Engineering, Virtual Conference.","DOI":"10.1109\/QIR54354.2021.9716200"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"1025","DOI":"10.1109\/TPAMI.2019.2961900","article-title":"Adversarial cross-spectral face completion for NIR-VIS face recognition","volume":"42","author":"He","year":"2020","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Thys, S., Van Ranst, W., and Goedeme, T. (2019, January 16\u201317). Fooling automated surveillance cameras: Adversarial patches to attack person detection. Proceedings of the 2019 IEEE\/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW), Long Beach, CA, USA.","DOI":"10.1109\/CVPRW.2019.00012"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Duan, R., Ma, X., Wang, Y., Bailey, J., Qin, A.K., and Yang, Y. (2020, January 13\u201319). Adversarial camouflage: Hiding physical-world attacks with natural styles. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Seattle, WA, USA.","DOI":"10.1109\/CVPR42600.2020.00108"},{"key":"ref_25","unstructured":"Xin, L., Yang, H., Liu, Z., Song, L., and Hai, L. (2018). DPatch: An adversarial patch attack on object detectors. arXiv."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Mou, L., Hua, Y., and Zhu, X.X. (2019). A relation-augmented fully convolutional network for semantic segmentation in aerial scenes. arXiv.","DOI":"10.1109\/CVPR.2019.01270"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Yu, C., Wang, J., Gao, C., Yu, G., Shen, C., and Sang, N. (2020, January 13\u201319). Context prior for scene segmentation. Proceedings of the 2020 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), Seattle, WA, USA.","DOI":"10.1109\/CVPR42600.2020.01243"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Zhang, X., Zhang, Y., Hu, M., and Ju, X. (November, January 30). Insulator defect detection based on YOLO and SPP-Net. Proceedings of the 2020 International Conference on Big Data & Artificial Intelligence & Software Engineering (ICBASE), Bangkok, Thailand.","DOI":"10.1109\/ICBASE51474.2020.00092"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Wang, T., Zhang, X., Yuan, L., and Feng, J. (2019, January 16\u201320). Few-Shot Adaptive Faster R-CNN. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Long Beach, CA, USA.","DOI":"10.1109\/CVPR.2019.00734"},{"key":"ref_30","unstructured":"He, K., Sun, J., Zhang, X., Ren, S., and Microsoft Technology Licensing LLC. (2017). Spatial Pyramid Pooling Networks for Image Processing. (9,542,621), U.S. Patent."},{"key":"ref_31","first-page":"73","article-title":"Machine learning data detection poisoning attacks using resource schemes multi-linear regression","volume":"28","author":"Ganesan","year":"2020","journal-title":"Neural Parallel Sci. Comput."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Brendel, W., Rauber, J., Kurakin, A., Papernot, N., and Bethge, M. (2018). Adversarial vision challenge. arXiv.","DOI":"10.1007\/978-3-030-29135-8_5"},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"22924","DOI":"10.1073\/pnas.1908018116","article-title":"The importance of better models in stochastic optimization","volume":"116","author":"Asi","year":"2019","journal-title":"Proc. Natl. Acad. Sci. USA"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1007\/s11263-015-0816-y","article-title":"Imagenet large scale visual recognition challenge","volume":"115","author":"Russakovsky","year":"2015","journal-title":"nt. J. Comput. Vis."},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Lin, T.Y., Maire, M., Belongie, S., Hays, J., and Zitnick, C.L. (2014, January 6\u201312). Microsoft coco: Common objects in context. Proceedings of the 13th European Conference, Zurich, Switzerland.","DOI":"10.1007\/978-3-319-10602-1_48"}],"container-title":["Information"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2078-2489\/13\/10\/465\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T00:41:48Z","timestamp":1760143308000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2078-2489\/13\/10\/465"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,9,29]]},"references-count":35,"journal-issue":{"issue":"10","published-online":{"date-parts":[[2022,10]]}},"alternative-id":["info13100465"],"URL":"https:\/\/doi.org\/10.3390\/info13100465","relation":{},"ISSN":["2078-2489"],"issn-type":[{"type":"electronic","value":"2078-2489"}],"subject":[],"published":{"date-parts":[[2022,9,29]]}}}