{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T08:50:33Z","timestamp":1782377433171,"version":"3.54.5"},"reference-count":54,"publisher":"MDPI AG","issue":"7","license":[{"start":{"date-parts":[[2026,6,24]],"date-time":"2026-06-24T00:00:00Z","timestamp":1782259200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Independent Research Project of High-Level Talent Program: Research on Key Technologies for Intelligent Perception and Characteristic Regulation of Photoelectric Properties","award":["(2022) BJ07070"],"award-info":[{"award-number":["(2022) BJ07070"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Entropy"],"abstract":"<jats:p>Adversarial camouflage has attracted growing research attention owing to its ability to execute multi-view, persistent attacks in real physical environments, outperforming conventional single-view adversarial patches. However, most existing methods are confined to non-targeted attacks, which induce arbitrary incorrect detection results without specifying target categories. This ambiguity weakens attack destructiveness and stealthiness, posing limitations for security evaluation of real-world vision systems. To address this gap, we present TACT, an approach built upon the full-coverage physical camouflage pipeline. By replacing the original category supervision with a predefined target class, TACT redirects the optimization gradient to guide 3D texture toward the target category features. Such a scheme only employs the inherent feature alignment mechanism of off-the-shelf object detectors, without redesigning network modules, defining novel loss functions, or modifying the rendering pipeline. Extensive experiments across digital and physical domains validate its effectiveness: on seven mainstream general-purpose object detectors, TACT-person achieves an average targeted attack success rate of 51.91%, and delivers cross-architecture and cross-version transferability. In physical tests, TACT-bird reduces mAP50-95 by 59.87% on YOLOv8, yet a TCER\u2013TASR gap suggests that the physical pipeline acts as a low-pass filter: coarse-grained target classes transfer robustly while fine-grained ones suffer feature collapse. These results confirm the viability of native supervision redirection and reveal an empirical pattern: coarse-grained target classes transfer more robustly through the physical pipeline than fine-grained ones, suggesting that target class feature granularity consistently influences physical-domain attack effectiveness.<\/jats:p>","DOI":"10.3390\/e28070718","type":"journal-article","created":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T08:14:12Z","timestamp":1782375252000},"page":"718","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Targeted Adversarial Camouflage Texture for Fooling Object Detectors via Native Supervision Redirection"],"prefix":"10.3390","volume":"28","author":[{"given":"Xingyu","family":"Di","sequence":"first","affiliation":[{"name":"College of Missile Engineering, Rocket Force University of Engineering, Xi\u2019an 710025, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wei","family":"Cai","sequence":"additional","affiliation":[{"name":"College of Missile Engineering, Rocket Force University of Engineering, Xi\u2019an 710025, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xin","family":"Wang","sequence":"additional","affiliation":[{"name":"College of Missile Engineering, Rocket Force University of Engineering, Xi\u2019an 710025, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhongjie","family":"Yin","sequence":"additional","affiliation":[{"name":"College of Missile Engineering, Rocket Force University of Engineering, Xi\u2019an 710025, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shuhui","family":"Li","sequence":"additional","affiliation":[{"name":"College of Missile Engineering, Rocket Force University of Engineering, Xi\u2019an 710025, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haoran","family":"Jia","sequence":"additional","affiliation":[{"name":"College of Missile Engineering, Rocket Force University of Engineering, Xi\u2019an 710025, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2026,6,24]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"257","DOI":"10.1109\/JPROC.2023.3238524","article-title":"Object Detection in 20 Years: A Survey","volume":"111","author":"Zou","year":"2023","journal-title":"Proc. IEEE"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"9797","DOI":"10.1109\/TPAMI.2024.3430860","article-title":"Physical Adversarial Attack Meets Computer Vision: A Decade Survey","volume":"46","author":"Wei","year":"2024","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"6795","DOI":"10.1109\/TIFS.2024.3422920","article-title":"Stealthy and Effective Physical Adversarial Attacks in Autonomous Driving","volume":"19","author":"Zhou","year":"2024","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Wang, D., Yao, W., Jiang, T., Tang, G., and Chen, X. (2023). A Survey on Physical Adversarial Attack in Computer Vision. arXiv.","DOI":"10.21203\/rs.3.rs-2459893\/v1"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"346","DOI":"10.1016\/j.eng.2019.12.012","article-title":"Adversarial Attacks and Defenses in Deep Learning","volume":"6","author":"Ren","year":"2020","journal-title":"Engineering"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"8041","DOI":"10.1007\/s11263-025-02552-x","article-title":"What Do Visual Models Look At? Dilated Attention for Targeted Transferable Attacks","volume":"133","author":"Wei","year":"2025","journal-title":"Int. J. Comput Vis."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Wang, J., Liu, A., Yin, Z., Liu, S., Tang, S., and Liu, X. (2021, January 20\u201325). Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Nashville, TN, USA.","DOI":"10.1109\/CVPR46437.2021.00846"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Huang, Y., Dong, Y., Ruan, S., Yang, X., Su, H., and Wei, X. (2024, January 16\u201322). Towards Transferable Targeted 3D Adversarial Attack in the Physical World. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Seattle, WA, USA.","DOI":"10.1109\/CVPR52733.2024.02314"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Suryanto, N., Kim, Y., Larasati, H.T., Kang, H., Le, T.T.H., Hong, Y., Yang, H., Oh, S.Y., and Kim, H. (2023, January 2\u20133). ACTIVE: Towards Highly Transferable 3D Physical Camouflage for Universal and Robust Vehicle Evasion. Proceedings of the IEEE\/CVF International Conference on Computer Vision, Paris, France.","DOI":"10.1109\/ICCV51070.2023.00397"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Vedaldi, A., Bischof, H., Brox, T., and Frahm, J.M. (2020). Adversarial T-Shirt! Evading Person Detectors in a Physical World. Computer Vision\u2014ECCV 2020, Springer.","DOI":"10.1007\/978-3-030-58542-6"},{"key":"ref_11","first-page":"2414","article-title":"FCA: Learning a 3D Full-Coverage Vehicle Camouflage for Multi-View Physical Adversarial Attack","volume":"36","author":"Wang","year":"2022","journal-title":"Proc. AAAI Conf. Artif. Intell."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Suryanto, N., Kim, Y., Kang, H., Larasati, H.T., Yun, Y., Le, T.T.H., Yang, H., Oh, S.Y., and Kim, H. (2022, January 18\u201324). DTA: Physical Camouflage Attacks Using Differentiable Transformation Network. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, New Orleans, LA, USA.","DOI":"10.1109\/CVPR52688.2022.01487"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Zhu, H., and Rong, D. (July, January 30). Multiview Consistent Physical Adversarial Camouflage Generation through Semantic Guidance. Proceedings of the 2024 International Joint Conference on Neural Networks (IJCNN), Yokohama, Japan.","DOI":"10.1109\/IJCNN60899.2024.10650270"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"7272","DOI":"10.1109\/TDSC.2025.3596311","article-title":"Toward Robust and Accurate Adversarial Camouflage Generation Against Vehicle Detectors","volume":"22","author":"Zhou","year":"2025","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"898","DOI":"10.1109\/TIFS.2024.3520016","article-title":"Stealthiness Assessment of Adversarial Perturbation: From a Visual Perspective","volume":"20","author":"Liu","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Wang, D., Yao, W., Jiang, T., Li, C., and Chen, X. (2023, January 2\u20133). RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World. Proceedings of the IEEE\/CVF International Conference on Computer Vision, Paris, France.","DOI":"10.1109\/ICCV51070.2023.00411"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"103345","DOI":"10.1016\/j.cose.2023.103345","article-title":"Light Can Be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Spot Light","volume":"132","author":"Li","year":"2023","journal-title":"Comput. Secur."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"123761","DOI":"10.1016\/j.eswa.2024.123761","article-title":"State-of-the-Art Optical-Based Physical Adversarial Attacks for Deep Learning Computer Vision Systems","volume":"250","author":"Fang","year":"2024","journal-title":"Expert Syst. Appl."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Zhong, Y., Liu, X., Zhai, D., Jiang, J., and Ji, X. (2022, January 18\u201324). Shadows Can Be Dangerous: Stealthy and Effective Physical-World Adversarial Attack by Natural Phenomenon. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, New Orleans, LA, USA.","DOI":"10.1109\/CVPR52688.2022.01491"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"3307","DOI":"10.1109\/TDSC.2025.3529197","article-title":"MagShadow: Physical Adversarial Example Attacks via Electromagnetic Injection","volume":"22","author":"Liu","year":"2025","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_21","unstructured":"Brown, T.B., Man\u00e9, D., Roy, A., Abadi, M., and Gilmer, J. (2018). Adversarial Patch. arXiv."},{"key":"ref_22","unstructured":"Liu, X., Yang, H., Liu, Z., Song, L., Li, H., and Chen, Y. (2019). DPatch: An Adversarial Patch Attack on Object Detectors. arXiv."},{"key":"ref_23","unstructured":"Zhu, W., Ji, X., Cheng, Y., Zhang, S., and Xu, W. (2023, January 9\u201311). TPatch: A Triggered Physical Adversarial Patch. Proceedings of the 32nd USENIX Security Symposium (USENIX Security 23), Anaheim, CA, USA."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Thys, S., Van Ranst, W., and Goedeme, T. (2019, January 16\u201317). Fooling Automated Surveillance Cameras: Adversarial Patches to Attack Person Detection. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition Workshops, Long Beach, CA, USA.","DOI":"10.1109\/CVPRW.2019.00012"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"5639611","DOI":"10.1109\/TGRS.2024.3434430","article-title":"Physical Strip Attack for Object Detection in Optical Remote Sensing","volume":"62","author":"Sun","year":"2024","journal-title":"IEEE Trans. Geosci. Remote Sens."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"459","DOI":"10.1016\/j.ins.2020.08.087","article-title":"Towards a Physical-World Adversarial Patch for Blinding Object Detection Models","volume":"556","author":"Wang","year":"2021","journal-title":"Inf. Sci."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Hu, Y.C.T., Chen, J.C., Kung, B.H., Hua, K.L., and Tan, D.S. (2021, January 10\u201317). Naturalistic Physical Adversarial Patch for Object Detectors. Proceedings of the 2021 IEEE\/CVF International Conference on Computer Vision (ICCV), Montreal, QC, Canada.","DOI":"10.1109\/ICCV48922.2021.00775"},{"key":"ref_28","first-page":"2711","article-title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","volume":"45","author":"Wei","year":"2023","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Zhu, X., Liu, Y., Hu, Z., Li, J., and Hu, X. (2024, January 16\u201322). Infrared Adversarial Car Stickers. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Seattle, WA, USA.","DOI":"10.1109\/CVPR52733.2024.02292"},{"key":"ref_30","unstructured":"Zhang, Y., Foroosh, H., David, P., and Gong, B. (2019, January 6\u20139). CAMOU: Learning Physical Vehicle Camouflages to Adversarially Attack Detectors in the Wild. Proceedings of the International Conference on Learning Representations, New Orleans, LA, USA."},{"key":"ref_31","unstructured":"Wu, T., Ning, X., Li, W., Huang, R., Yang, H., and Wang, Y. (2020). Physical Adversarial Attack on Vehicle Detector in the Carla Simulator. arXiv."},{"key":"ref_32","unstructured":"Chen, W., Zhang, Y., Li, Z., and Wang, Y. (August, January 31). MFA: Multi-layer Feature-aware Attack for Object Detection. Proceedings of the 39th Conference on Uncertainty in Artificial Intelligence, Pittsburgh, PA, USA."},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Wang, Z., Yang, H., Feng, Y., Sun, P., Guo, H., Zhang, Z., and Rent, K. (2023, January 18\u201322). Towards Transferable Targeted Adversarial Examples. Proceedings of the 2023 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), Vancouver, BC, Canada.","DOI":"10.1109\/CVPR52729.2023.01967"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Naseer, M., Khan, S., Hayat, M., Khan, F.S., and Porikli, F. (2021, January 10\u201317). On Generating Transferable Targeted Perturbations. Proceedings of the IEEE\/CVF International Conference on Computer Vision, Montreal, QC, Canada.","DOI":"10.1109\/ICCV48922.2021.00761"},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Zhao, A., Chu, T., Liu, Y., Li, W., Li, J., and Duan, L. (2023, January 18\u201322). Minimizing Maximum Model Discrepancy for Transferable Black-Box Targeted Attacks. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Vancouver, BC, Canada.","DOI":"10.1109\/CVPR52729.2023.00788"},{"key":"ref_36","first-page":"6115","article-title":"On Success and Simplicity: A Second Look at Transferable Targeted Attacks","volume":"Volume 34","author":"Zhao","year":"2021","journal-title":"Proceedings of the Advances in Neural Information Processing Systems"},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Fleet, D., Pajdla, T., Schiele, B., and Tuytelaars, T. (2014). Microsoft COCO: Common Objects in Context. Computer Vision\u2014ECCV 2014, Springer.","DOI":"10.1007\/978-3-319-10584-0"},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Deng, J., Dong, W., Socher, R., Li, L.J., Li, K., and Fei-Fei, L. (2009, January 20\u201325). ImageNet: A Large-Scale Hierarchical Image Database. Proceedings of the 2009 IEEE Conference on Computer Vision and Pattern Recognition, Miami, FL, USA.","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref_39","unstructured":"Redmon, J., and Farhadi, A. (2018). YOLOv3: An Incremental Improvement. arXiv."},{"key":"ref_40","unstructured":"Dosovitskiy, A., Ros, G., Codevilla, F., Lopez, A., and Koltun, V. (2017, January 13\u201315). CARLA: An Open Urban Driving Simulator. Proceedings of the 1st Annual Conference on Robot Learning, Mountain View, CA, USA."},{"key":"ref_41","unstructured":"Sabour, S., Cao, Y., Faghri, F., and Fleet, D.J. (2016). Adversarial Manipulation of Deep Representations. arXiv."},{"key":"ref_42","first-page":"3320","article-title":"How Transferable Are Features in Deep Neural Networks?","volume":"27","author":"Yosinski","year":"2014","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"1137","DOI":"10.1109\/TPAMI.2016.2577031","article-title":"Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks","volume":"39","author":"Ren","year":"2017","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"He, K., Gkioxari, G., Dollar, P., and Girshick, R. (2017, January 22\u201329). Mask R-CNN. Proceedings of the IEEE International Conference on Computer Vision, Venice, Italy.","DOI":"10.1109\/ICCV.2017.322"},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Leibe, B., Matas, J., Sebe, N., and Welling, M. (2016). SSD: Single Shot MultiBox Detector. Computer Vision\u2014ECCV 2016, Springer.","DOI":"10.1007\/978-3-319-46448-0"},{"key":"ref_46","doi-asserted-by":"crossref","unstructured":"Zhao, Y., Lv, W., Xu, S., Wei, J., Wang, G., Dang, Q., Liu, Y., and Chen, J. (2024, January 16\u201322). DETRs Beat YOLOs on Real-time Object Detection. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Seattle, WA, USA.","DOI":"10.1109\/CVPR52733.2024.01605"},{"key":"ref_47","unstructured":"(2025, December 12). GitHub\u2014Ultralytics\/Ultralytics: Ultralytics YOLO. Available online: https:\/\/github.com\/ultralytics\/ultralytics."},{"key":"ref_48","unstructured":"(2025, December 12). GitHub\u2014Open-Mmlab\/Mmdetection: OpenMMLab Detection Toolbox and Benchmark. Available online: https:\/\/github.com\/open-mmlab\/mmdetection."},{"key":"ref_49","doi-asserted-by":"crossref","unstructured":"Li, M., Deng, C., Li, T., Yan, J., Gao, X., and Huang, H. (2020, January 14\u201319). Towards Transferable Targeted Attack. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Seattle, WA, USA.","DOI":"10.1109\/CVPR42600.2020.00072"},{"key":"ref_50","doi-asserted-by":"crossref","unstructured":"Wei, Z., Chen, J., Wu, Z., and Jiang, Y.G. (2023, January 18\u201322). Enhancing the Self-Universality for Transferable Targeted Attacks. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Vancouver, BC, Canada.","DOI":"10.1109\/CVPR52729.2023.01182"},{"key":"ref_51","doi-asserted-by":"crossref","unstructured":"Li, Z., Wang, W., Li, J., Zhang, S., Hu, Y., and Guo, S. (2025, January 19\u201323). Enhancing Transferability of Targeted Adversarial Examples via Inverse Target Gradient Competition and Spatial Distance Stretching. Proceedings of the IEEE\/CVF International Conference on Computer Vision, Honolulu, HI, USA.","DOI":"10.1109\/ICCV51701.2025.00354"},{"key":"ref_52","unstructured":"Geirhos, R., Rubisch, P., Michaelis, C., Bethge, M., Wichmann, F.A., and Brendel, W. (2019, January 6\u20139). ImageNet-trained CNNs Are Biased towards Texture; Increasing Shape Bias Improves Accuracy and Robustness. Proceedings of the 7th International Conference on Learning Representations, ICLR 2019, New Orleans, LA, USA."},{"key":"ref_53","doi-asserted-by":"crossref","unstructured":"Zhou, B., Khosla, A., Lapedriza, A., Oliva, A., and Torralba, A. (2016, January 27\u201330). Learning Deep Features for Discriminative Localization. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Las Vegas, NV, USA.","DOI":"10.1109\/CVPR.2016.319"},{"key":"ref_54","doi-asserted-by":"crossref","unstructured":"Cai, W., Di, X., Wang, X., Gao, W., and Jia, H. (2024). Stealthy Vehicle Adversarial Camouflage Texture Generation Based on Neural Style Transfer. Entropy, 26.","DOI":"10.3390\/e26110903"}],"container-title":["Entropy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1099-4300\/28\/7\/718\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T08:33:58Z","timestamp":1782376438000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1099-4300\/28\/7\/718"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,24]]},"references-count":54,"journal-issue":{"issue":"7","published-online":{"date-parts":[[2026,7]]}},"alternative-id":["e28070718"],"URL":"https:\/\/doi.org\/10.3390\/e28070718","relation":{},"ISSN":["1099-4300"],"issn-type":[{"value":"1099-4300","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6,24]]}}}