Adversarial attack algorithm for object detection based on improved differential evolution
Jinhui Ye, Yongping Wang, Xiaolin Zhang, Xu Li, Ruizhi Ni · 6th International Workshop on Advanced Algorithms and Control Engineering (IWAACE 2022) · 2022
With the wide application of deep learning object detection model, its internal security vulnerability is also highlighted. In this paper, a black box adversarial attack algorithm SAD-DE based on improved differential evolution is proposed to reveal the possible security risks of the object detection model. Taking full advantage of the high optimization efficiency and simple parameter setting of differential evolution algorithm, multi mutation strategy is adopted, and the mutation rate and crossover rate are adaptively improved to effectively improve the optimization efficiency. In this paper, two public data sets are randomly exampled as test sets to counter attacks on YOLOv3 and Fast R-CNN respectively. Experimental results show that this method achieves a high fooling rate while maintaining a low anti disturbance, and achieves a maximum improvement of 33% compared with other black box attack algorithms.