{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2023,11,24]],"date-time":"2023-11-24T00:35:09Z","timestamp":1700786109384},"reference-count":0,"publisher":"Zarqa University","issue":"5","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IAJIT"],"published-print":{"date-parts":[[2023]]},"abstract":"<jats:p>The adversarial examples make the object detection model make a wrong judgment, which threatens the security of driverless cars. In this paper, by improving the Momentum Iterative Fast Gradient Sign Method (MI-FGSM), based on ensemble learning, combined with L\u221e perturbation and spatial transformation, a strong transferable black-box adversarial attack algorithm for object detection model of driverless cars is proposed. Through a large number of experiments on the nuScenes driverless dataset, it is proved that the adversarial attack algorithm proposed in this paper have strong transferability, and successfully make the mainstream object detection models such as FasterRcnn, SSD, YOLOv3 make wrong judgments. Based on the adversarial attack algorithm proposed in this paper, the parametric noise injection with adversarial training is performed to generate a defense model with strong robustness. The defense model proposed in this paper significantly improves the robustness of the object detection model. It can effectively alleviate various adversarial attacks against the object detection model of driverless cars, and does not affect the accuracy of clean samples. This is of great significance for studying the application of object detection model of driverless cars in the real physical world.<\/jats:p>","DOI":"10.34028\/iajit\/20\/5\/6","type":"journal-article","created":{"date-parts":[[2023,7,26]],"date-time":"2023-07-26T08:11:49Z","timestamp":1690359109000},"source":"Crossref","is-referenced-by-count":0,"title":["Research on a Method of Defense Adversarial Samples for Target Detection Model of Driverless Cars"],"prefix":"10.34028","volume":"20","author":[{"given":"Ruzhi","family":"Xu","sequence":"first","affiliation":[]},{"given":"Min","family":"Li","sequence":"additional","affiliation":[]},{"given":"Xin","family":"Yang","sequence":"additional","affiliation":[]},{"given":"Dexin","family":"Liu","sequence":"additional","affiliation":[]},{"given":"Dawei","family":"Chen","sequence":"additional","affiliation":[]}],"member":"19944","published-online":{"date-parts":[[2023]]},"container-title":["The International Arab Journal of Information Technology"],"original-title":[],"language":"en","deposited":{"date-parts":[[2023,11,23]],"date-time":"2023-11-23T11:58:33Z","timestamp":1700740713000},"score":1,"resource":{"primary":{"URL":"https:\/\/iajit.org\/upload\/files\/Research-on-a-Method-of-Defense-Adversarial-Samples-for-Target-Detection-Model-of-Driverless-Cars.pdf"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":0,"journal-issue":{"issue":"5","published-online":{"date-parts":[[2023]]},"published-print":{"date-parts":[[2023]]}},"URL":"https:\/\/doi.org\/10.34028\/iajit\/20\/5\/6","archive":["Internet Archive"],"relation":{},"ISSN":["2309-4524","1683-3198"],"issn-type":[{"value":"2309-4524","type":"electronic"},{"value":"1683-3198","type":"print"}],"subject":[],"published":{"date-parts":[[2023]]}}}