Adversarial Examples in Remote Sensing
It addresses vulnerabilities in remote sensing, a domain with unique challenges not fully covered by natural image research, though it is incremental as a starting point for future studies.
The paper investigates adversarial attacks on machine learning algorithms for satellite image classification, focusing on scenarios where classifiers have multiple temporal observations of the same location, and provides a preliminary analysis using a curated dataset.
This paper considers attacks against machine learning algorithms used in remote sensing applications, a domain that presents a suite of challenges that are not fully addressed by current research focused on natural image data such as ImageNet. In particular, we present a new study of adversarial examples in the context of satellite image classification problems. Using a recently curated data set and associated classifier, we provide a preliminary analysis of adversarial examples in settings where the targeted classifier is permitted multiple observations of the same location over time. While our experiments to date are purely digital, our problem setup explicitly incorporates a number of practical considerations that a real-world attacker would need to take into account when mounting a physical attack. We hope this work provides a useful starting point for future studies of potential vulnerabilities in this setting.