{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,6]],"date-time":"2026-02-06T05:31:12Z","timestamp":1770355872526,"version":"3.49.0"},"reference-count":40,"publisher":"MDPI AG","issue":"21","license":[{"start":{"date-parts":[[2021,10,29]],"date-time":"2021-10-29T00:00:00Z","timestamp":1635465600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"the National Nature Sciences Foundation of China","award":["61771372"],"award-info":[{"award-number":["61771372"]}]},{"name":"the Shenzhen Science and Technology Program","award":["KQTD20190929172704911"],"award-info":[{"award-number":["KQTD20190929172704911"]}]},{"name":"the Open Fund of Science and Technology on 486 Electromagnetic Scattering Key Laboratory","award":["61424090112"],"award-info":[{"award-number":["61424090112"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Remote Sensing"],"abstract":"<jats:p>Some recent articles have revealed that synthetic aperture radar automatic target recognition (SAR-ATR) models based on deep learning are vulnerable to the attacks of adversarial examples and cause security problems. The adversarial attack can make a deep convolutional neural network (CNN)-based SAR-ATR system output the intended wrong label predictions by adding small adversarial perturbations to the SAR images. The existing optimization-based adversarial attack methods generate adversarial examples by minimizing the mean-squared reconstruction error, causing smooth target edge and blurry weak scattering centers in SAR images. In this paper, we build a UNet-generative adversarial network (GAN) to refine the generation of the SAR-ATR models\u2019 adversarial examples. The UNet learns the separable features of the targets and generates the adversarial examples of SAR images. The GAN makes the generated adversarial examples approximate to real SAR images (with sharp target edge and explicit weak scattering centers) and improves the generation efficiency. We carry out abundant experiments using the proposed adversarial attack algorithm to fool the SAR-ATR models based on several advanced CNNs, which are trained on the measured SAR images of the ground vehicle targets. The quantitative and qualitative results demonstrate the high-quality adversarial example generation and excellent attack effectiveness and efficiency improvement.<\/jats:p>","DOI":"10.3390\/rs13214358","type":"journal-article","created":{"date-parts":[[2021,11,1]],"date-time":"2021-11-01T22:24:22Z","timestamp":1635805462000},"page":"4358","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":34,"title":["Adversarial Attack for SAR Target Recognition Based on UNet-Generative Adversarial Network"],"prefix":"10.3390","volume":"13","author":[{"given":"Chuan","family":"Du","sequence":"first","affiliation":[{"name":"School of Electronics and Communication Engineering, Sun Yat-sen University, Shenzhen 518107, China"}]},{"given":"Lei","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Electronics and Communication Engineering, Sun Yat-sen University, Shenzhen 518107, China"}]}],"member":"1968","published-online":{"date-parts":[[2021,10,29]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"2115","DOI":"10.1109\/JSTARS.2017.2787728","article-title":"Multiple mode SAR raw data simulation and parallel acceleration for Gaofen-3 mission","volume":"11","author":"Zhang","year":"2008","journal-title":"IEEE J. Sel. Topics Appl. Earth Observ. Remote Sens."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"217","DOI":"10.1109\/TAES.1967.5408745","article-title":"Synthetic aperture radar","volume":"3","author":"Brown","year":"1967","journal-title":"IEEE Trans. Aerosp. Electron. Syst."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"6","DOI":"10.1109\/MGRS.2013.2248301","article-title":"A tutorial on synthetic aperture radar","volume":"1","author":"Moreira","year":"2013","journal-title":"IEEE Geosci. Remote Sens. Mag."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"1842","DOI":"10.1109\/18.857795","article-title":"Model-based classification of radar images","volume":"46","author":"Chiang","year":"2000","journal-title":"IEEE Trans. Inf. Theory"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"112","DOI":"10.1109\/TAES.2007.357120","article-title":"Adaptive boosting for SAR automatic target recognition","volume":"43","author":"Sun","year":"2007","journal-title":"IEEE Trans. Aerosp. Electron. Syst."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"591","DOI":"10.1109\/TAES.2013.120340","article-title":"SAR automatic target recognition using discriminative graphical models","volume":"50","author":"Srinivas","year":"2014","journal-title":"IEEE Trans. Aerosp. Electron. Syst."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Rodger, M., and Guida, R. (2021). Classification-Aided SAR and AIS Data Fusion for Space-Based Maritime Surveillance. Remote Sens., 13.","DOI":"10.3390\/rs13010104"},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"7177","DOI":"10.1109\/TGRS.2017.2743222","article-title":"Complex-valued convolutional neural network and its application in polarimetric SAR image classification","volume":"55","author":"Zhang","year":"2017","journal-title":"IEEE Trans. Geosci. Remote Sens."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"4806","DOI":"10.1109\/TGRS.2016.2551720","article-title":"Target classification using the deep convolutional networks for SAR images","volume":"54","author":"Chen","year":"2016","journal-title":"IEEE Trans. Geosci. Remote Sens."},{"key":"ref_10","first-page":"364","article-title":"Convolutional neural network with data augmentation for SAR target recognition","volume":"13","author":"Ding","year":"2016","journal-title":"IEEE Geosci. Remote Sens. Lett."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"176","DOI":"10.1016\/j.sigpro.2019.01.006","article-title":"Factorized discriminative conditional variational auto-encoder for radar HRRP target recognition","volume":"158","author":"Du","year":"2019","journal-title":"Signal Process."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Vint, D., Anderson, M., Yang, Y., Ilioudis, C., Di Caterina, G., and Clemente, C. (2021). Automatic Target Recognition for Low Resolution Foliage Penetrating SAR Images Using CNNs and GANs. Remote Sens., 13.","DOI":"10.3390\/rs13040596"},{"key":"ref_13","unstructured":"Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., and Fergus, R. (2014, January 14\u201316). Intriguing properties of neural networks. Proceedings of the International Conference on Learning Representations, Banff, AB, Canada."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"159","DOI":"10.1016\/j.ins.2020.03.066","article-title":"Adversarial attacks on deep-learning-based radar range profile target recognition","volume":"531","author":"Huang","year":"2020","journal-title":"Inf. Sci."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"102632","DOI":"10.1016\/j.jnca.2020.102632","article-title":"Adversarial attacks on deep-learning-based SAR image target recognition","volume":"162","author":"Huang","year":"2020","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Du, C., Huo, C., Zhang, L., Chen, B., and Yuan, Y. (2021). Fast C&W: A Fast Adversarial Attack Algorithm to Fool SAR Target Recognition with Deep Convolutional Neural Networks. IEEE Geosci. Remote Sens. Lett.","DOI":"10.1109\/LGRS.2021.3058011"},{"key":"ref_17","unstructured":"Li, C., Xu, Z., Li, Q., Peng, J., Wang, S., and Li, H. (2021). An Empirical Study of Adversarial Examples on Remote Sensing Image Scene Classification. IEEE Trans. Geosci. Remote Sens."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"1604","DOI":"10.1109\/TGRS.2020.2999962","article-title":"Assessing the Threat of Adversarial Examples on Deep Neural Networks for Remote Sensing Scene Classification: Attacks and Defenses","volume":"59","author":"Xu","year":"2021","journal-title":"Trans. Geosci. Remote Sens."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"1333","DOI":"10.1109\/JSTARS.2020.3038683","article-title":"Adversarial Examples for CNN-Based SAR Image Classification: An Experience Study","volume":"14","author":"Li","year":"2021","journal-title":"IEEE J. Sel. Top. Appl. Earth Obs. Remote Sens."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"213","DOI":"10.1109\/LWC.2018.2867459","article-title":"Adversarial attacks on deep-learning based radio signal classification","volume":"8","author":"Sadeghi","year":"2018","journal-title":"IEEE Wireless Commun. Lett."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"847","DOI":"10.1109\/LCOMM.2019.2901469","article-title":"Physical adversarial attacks against end-to-end autoencoder communication systems","volume":"23","author":"Sadeghi","year":"2019","journal-title":"IEEE Commun. Lett."},{"key":"ref_22","unstructured":"Goodfellow, I., Shlens, J., and Szegedy, C. (2015, January 7\u20139). Explaining and harnessing adversarial examples. Proceedings of the International Conference on Learning Representations, San Diego, CA, USA."},{"key":"ref_23","unstructured":"Kurakin, A., Goodfellow, I., and Bengio, S. (2017, January 24\u201326). Adversarial examples in the physical world. Proceedings of the International Conference on Learning Representation, Toulon, France."},{"key":"ref_24","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., and Vladu, A. (May, January 30). Towards deep learning models resistant to adversarial attacks. Proceedings of the International Conference on Learning Representation, Vancouver, CB, Canada."},{"key":"ref_25","unstructured":"Moosavi-Dezfooli, S.M., Fawzi, A., and Frossard, P. (July, January 26). DeepFool: A simple and accurate method to fool deep neural networks. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Las Vegas, NV, USA."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Papernot, N., McDaniel, P., Wu, X., Jha, S., and Swami, A. (2016, January 22\u201326). Distillation as a defense to adversarial perturbations against deep neural networks. Proceedings of the IEEE Symposium on Security and Privacy, San Jose, CA, USA.","DOI":"10.1109\/SP.2016.41"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Carlini, N., and Wagner, D. (2017, January 22\u201326). Towards evaluating the robustness of neural networks. Proceedings of the IEEE Symposium on Security and Privacy, San Jose, CA, USA.","DOI":"10.1109\/SP.2017.49"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"1179","DOI":"10.1109\/8.785750","article-title":"A parametric model for synthetic aperture radar measurements","volume":"47","author":"Gerry","year":"1999","journal-title":"IEEE Trans. Antennas Propag."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Ronneberger, O., Fischer, P., and Brox, T. (2015, January 5\u20139). U-net: Convolutional networks for biomedical image segmentation. Proceedings of the 18th International Conference on Medical Image Computing and Computer-Assisted Intervention, Munich, Germany.","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"ref_30","unstructured":"Goodfellow, I.J., Pouget-Abadie, J., Mirza, M., Xu, B., Warde-Farley, D., Ozair, S., Courville, A., and Bengio, Y. (2014, January 8\u201313). Generative adversarial nets. Proceedings of the Neural Information Processing Systems Conference, Montr\u00e9al, QC, Canada."},{"key":"ref_31","first-page":"228","article-title":"MSTAR extended operating conditions: A tutorial","volume":"Volume 2757","author":"Keydel","year":"1996","journal-title":"Algorithms for Synthetic Aperture Radar Imagery III"},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"566","DOI":"10.1117\/12.321859","article-title":"Standard SAR ATR evaluation experiments using the MSTAR public release data set","volume":"Volume 3370","author":"Ross","year":"1998","journal-title":"Algorithms for Synthetic Aperture Radar Imagery V"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Wang, C., Pei, J., Wang, Z., Huang, Y., Wu, J., Yang, H., and Yang, J. (2020). When Deep Learning Meets Multi-Task Learning in SAR ATR: Simultaneous Target Recognition and Segmentation. Remote Sens., 12.","DOI":"10.3390\/rs12233863"},{"key":"ref_34","unstructured":"Krizhevsky, A., Sutskever, I., and Hinton, G.E. (2012, January 3\u20138). ImageNet classification with deep convolutional neural networks. Proceedings of the Neural Information Processing Systems Conference, Lake Tahoe, NV, USA."},{"key":"ref_35","unstructured":"Simonyan, K., and Zisserman, A. (2015, January 7\u20139). Very deep convolutional networks for large-scale image recognition. Proceedings of the International Conference on Learning Representations, San Diego, CA, USA."},{"key":"ref_36","unstructured":"He, K., Zhang, X., Ren, S., and Sun, J. (July, January 26). Deep residual learning for image recognition. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Las Vegas, NV, USA."},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Du, C., Xie, P., Zhang, L., Ma, Y., and Tian, L. (2021). Conditional Prior Probabilistic Generative Model With Similarity Measurement for ISAR Imaging. IEEE Geosci. Remote Sens. Lett.","DOI":"10.1109\/LGRS.2021.3073691"},{"key":"ref_38","unstructured":"Kingma, D.P., and Ba, J.L. (2014, January 14\u201316). Adam: A method for stochastic optimization. Proceedings of the Second International Conference on Learning Representations, Banff, AB, Canada."},{"key":"ref_39","first-page":"2579","article-title":"Visualizing High-Dimensional Data Using t-SNE","volume":"9","author":"Hinton","year":"2008","journal-title":"J. Mach. Learn. Res."},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"137477","DOI":"10.1109\/ACCESS.2020.3011639","article-title":"Attack Selectivity of Adversarial Examples in Remote Sensing Image Scene Classification","volume":"8","author":"Chen","year":"2020","journal-title":"IEEE Access"}],"container-title":["Remote Sensing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2072-4292\/13\/21\/4358\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T07:22:42Z","timestamp":1760167362000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2072-4292\/13\/21\/4358"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,10,29]]},"references-count":40,"journal-issue":{"issue":"21","published-online":{"date-parts":[[2021,11]]}},"alternative-id":["rs13214358"],"URL":"https:\/\/doi.org\/10.3390\/rs13214358","relation":{},"ISSN":["2072-4292"],"issn-type":[{"value":"2072-4292","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,10,29]]}}}