Attention-Guided Digital Adversarial Patches on Visual Detection

Figure 1

By detecting the key feature aggregation field in the image, the location and size of the generated adverse patch in this paper are located to achieve the purpose of the invisible detector. (a) The original car which can be detected; (b) visualize the field with high feature density; (c) the detector cannot detect the car with a patch.

(a)

(b)

(c)