Thermal Topology Collapse: Universal Physical Patch Attacks on Infrared Vision Systems
This addresses security risks in infrared vision systems used in visual perception tasks, offering a novel universal attack method that improves upon existing costly and less robust approaches.
The paper tackles the vulnerability of infrared pedestrian detectors to physical adversarial attacks by proposing the Universal Physical Patch Attack (UPPA), which achieves an outstanding physical attack success rate without online computational overhead and exhibits strong cross-domain generalization and reliable black-box transferability.
Although infrared pedestrian detectors have been widely deployed in visual perception tasks, their vulnerability to physical adversarial attacks is becoming increasingly apparent. Existing physical attack methods predominantly rely on instance-specific online optimization and rigid pattern design, leading to high deployment costs and insufficient physical robustness. To address these limitations, this work proposes the Universal Physical Patch Attack (UPPA), the first universal physical attack method in the infrared domain. This method employs geometrically constrained parameterized Bezier blocks to model perturbations and utilizes the Particle Swarm Optimization (PSO) algorithm to perform unified optimization across the global data distribution, thus maintaining topological stability under dynamic deformations. In the physical deployment phase, we materialize the optimized digital perturbations into physical cold patches, achieving a continuous and smooth low-temperature distribution that naturally aligns with the thermal radiation characteristics of infrared imaging. Extensive experiments demonstrate that UPPA achieves an outstanding physical attack success rate without any online computational overhead, while also exhibiting strong cross-domain generalization and reliable black-box transferability.