2020
DOI: 10.48550/arxiv.2002.03751
|View full text |Cite
Preprint
|
Sign up to set email alerts
|

Weighted Average Precision: Adversarial Example Detection in the Visual Perception of Autonomous Vehicles

Abstract: Recent works have shown that neural networks are vulnerable to carefully crafted adversarial examples (AE). By adding small perturbations to input images, AEs are able to make the victim model predicts incorrect outputs. Several research work in adversarial machine learning started to focus on the detection of AEs in autonomous driving. However, the existing studies either use preliminary assumption on outputs of detections or ignore the tracking system in the perception pipeline. In this paper, we firstly pro… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
4
1

Citation Types

0
1
0

Year Published

2022
2022
2023
2023

Publication Types

Select...
2

Relationship

0
2

Authors

Journals

citations
Cited by 2 publications
(5 citation statements)
references
References 42 publications
0
1
0
Order By: Relevance
“…We achieved the highest detection rate of 97.4 while detecting shot-noised adversarial attacks, while the lowest detection rate of 90% was recorded when detecting Gaussian-noise-based adversarial attacks. On the other hand, the highest detection rate of the detector proposed in [79] was recorded at 74.1% in detecting FGSM attacks in the black-box setting.…”
Section: Comparative Analysis With Existing Approachesmentioning
confidence: 95%
See 3 more Smart Citations
“…We achieved the highest detection rate of 97.4 while detecting shot-noised adversarial attacks, while the lowest detection rate of 90% was recorded when detecting Gaussian-noise-based adversarial attacks. On the other hand, the highest detection rate of the detector proposed in [79] was recorded at 74.1% in detecting FGSM attacks in the black-box setting.…”
Section: Comparative Analysis With Existing Approachesmentioning
confidence: 95%
“…We compared attacking models, the approach to detect adversarial attacks, and the performance of the proposed approach with [78,79]. We considered the most commonly used black-box attacks to attack the target model because white-box attacks are hard to implement in ADSs in real time.…”
Section: Comparative Analysis With Existing Approachesmentioning
confidence: 99%
See 2 more Smart Citations
“…The average AP over various IoU thresholds is called mAP. Average AP over all classes [27]. The formula of mAP is as in (5).…”
Section: Mean Average Precision (Map)mentioning
confidence: 99%