arXiv Computer Vision
Mirage: a Clean-Label Backdoor against LiDAR 3D Object Detection
Read the original on arXiv Computer Vision →The Flow has not summarised this story yet — read it at arXiv Computer Vision.
Related stories
Hugging Face Trending Papers
Jul 2
Comprehensive Robustness Analysis of LiDAR-based 3D Object Detection in Autonomous Driving
Recent advancements in LiDAR-only 3D object detection have demonstrated improved detection accuracy over benchmark datasets. However, the adversarial robustness of these models remains untested.
arXiv AI
Aug 20
Detecting Backdoors in Object Detection via Pre-NMS Prediction Distribution Shift
The paper introduces DistScan, a backdoor detection framework for object detection models that identifies malicious behavior by detecting shifts in the pre‑NMS prediction class distribution relative to training class frequencies. DistScan operates on clean validation data, requiring no access to model weights, trigger knowledge, or additional training, and it aggregates intermediate predictions to flag backdoored models. Experiments on MS‑COCO and PASCAL VOC across two architectures and three scene‑level attack scenarios show that DistScan outperforms existing methods, improving average detection accuracy by 27.32 percentage points over the best baseline.
arXiv Computer Vision
Sep 4
Beyond Small Patches: Black-Box Detection and Purification of Diverse Backdoor Triggers
The paper introduces TRIM, a black‑box defense for backdoor attacks in computer vision models. TRIM identifies and removes malicious trigger regions at inference time using region‑based segmentation, adaptive trigger discovery via inpainting and diffusion, and selective purification, without needing model internals, training data, or clean samples. Experiments on various datasets and trigger types show TRIM reduces attack success rates to as low as 1.16% while maintaining high clean accuracy.
arXiv Machine Learning
Jul 8
Assessing the Operational Impact of Poisoning Attacks over Augmented 3D Point Cloud Public Datasets for Connected and Autonomous Vehicles
arXiv:2607. 06484v1 Announce Type: cross Abstract: Poisoning attacks against public datasets lead to major concerns, such as (i) misclassification of perceived objects when the poisoned data is used for training and (ii) embedding of backdoors that may eventually be triggered later on, when specific conditions in the system apply over the learned models.
Hugging Face Trending Papers
Sep 23
ODPure: Backdoor Purification for Object Detection via Ensemble Corruption Consensus
With the development of applications like autonomous driving, object detection has gained significant attention, while also highlighting critical vulnerabilities like backdoor attacks that severely co...
arXiv AI
Aug 18
Statistical Adversaries: Natural Backdoor-like Adversarial Features in Clean Vision Datasets
arXiv:2607. 05516v2 Announce Type: replace-cross Abstract: Model-specific adversarial attacks have been extensively studied.