Murdoch University Research Repository

Welcome to the Murdoch University Research Repository

The Murdoch University Research Repository is an open access digital collection of research
created by Murdoch University staff, researchers and postgraduate students.

Learn more

Adversary distillation for One-Shot attacks on 3D target tracking

Wang, Z., Wang, X., Sohel, F., Bennamoun, M., Liao, Y. and Yu, J. (2022) Adversary distillation for One-Shot attacks on 3D target tracking. In: ICASSP 2022 - 2022 IEEE International Conference on Acoustics, Speech and Signal Processing, 23 - 27 May 2022, Singapore pp. 2749-2453.

Link to Published Version:
*Subscription may be required


Considering the vulnerability of existing deep models in the adversarial scenario, the robustness of 3D target tracking is not guaranteed. In this paper, we present an efficient generation based adversarial attack, termed Adversary Distillation Network (AD-Net), which is able to distract a victim tracker in a single shot. In contrast to existing adversarial attacks derived from point perturbations, the proposed method designs a generative network to distill an adversarial example from a tracking template through point-wise filtration. A binary distribution encoding layer is specialized to filter points, which is modeled as a Bernoulli distribution and approximated in a differentiable formulation. To boost the performance of adversarial example generation, a feature extraction module is deployed, which leverages the PointNet++ architecture to learn hierarchical features for the template points as well as similarities with the search areas. Experimental results on the KITTI vision benchmark show that the proposed adversarial attack can effectively mislead popular deep 3D trackers.

Item Type: Conference Paper
Murdoch Affiliation(s): IT, Media and Communications
Publisher: IEEE
Item Control Page Item Control Page