SYNTOLOGY HomeExplorerAtlasCodeMethodologyAboutDevelopersFeedPricing
Paper · 2202.01811 · 2022

ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking

arXiv · PDF · Open in the Atlas

Code that ran

We lifted 10 functions out of this paper's own repositories and ran 8 of them in a sandbox. "Ran" means the function executed on a synthesized input and returned a value. It is not a reproduction of the paper's results.

RepositoryRoleRan
inspire-group/ObjectSeeker canonical 8 of 10
FunctionStatusWhere it lives
IoA Ran inspire-group/ObjectSeeker/yolor/utils/augmentation.py
code served (permissive licence) · get_code("0e88ba61612a75fb")
compute_ap Ran inspire-group/ObjectSeeker/objseeker/coco_eval.py
code served (permissive licence) · get_code("13f4eac2fda8fdb3")
get_yolo_layers Ran inspire-group/ObjectSeeker/yolor/models/models.py
code served (permissive licence) · get_code("ad4cd570ddc892f3")
load_classes Ran inspire-group/ObjectSeeker/main_yolor.py
code served (permissive licence) · get_code("fa99a26b6ba8f205")
parse_rec Ran inspire-group/ObjectSeeker/objseeker/voc_eval.py
code served (permissive licence) · get_code("a46f36e9e6fa73a3")
voc_ap Ran inspire-group/ObjectSeeker/objseeker/voc_eval.py
code served (permissive licence) · get_code("0c6200649c2a0bb2")
voc_eval Ran inspire-group/ObjectSeeker/objseeker/voc_eval.py
code served (permissive licence) · get_code("ffe992256b01c5c4")
xywhn2xyxy Ran inspire-group/ObjectSeeker/yolor/utils/augmentation.py
code served (permissive licence) · get_code("01e5c827629c563a")
make_divisible Not yet run inspire-group/ObjectSeeker/yolor/utils/layers.py
code served (permissive licence) · get_code("5959383c642fb36b")
smooth_BCE Not yet run inspire-group/ObjectSeeker/yolor/utils/loss.py
code served (permissive licence) · get_code("386a04c4b6c96c88")

Repositories linked to this paper

Some links come from the archived Papers with Code dataset (CC BY-SA 4.0): attribution and licence.

Abstract

Object detectors, which are widely deployed in security-critical systems such as autonomous vehicles, have been found vulnerable to patch hiding attacks. An attacker can use a single physically-realizable adversarial patch to make the object detector miss the detection of victim objects and undermine the functionality of object detection applications. In this paper, we propose ObjectSeeker for certifiably robust object detection against patch hiding attacks. The key insight in ObjectSeeker is patch-agnostic masking: we aim to mask out the entire adversarial patch without knowing the shape, size, and location of the patch. This masking operation neutralizes the adversarial effect and allows any vanilla object detector to safely detect objects on the masked images. Remarkably, we can evaluate ObjectSeeker's robustness in a certifiable manner: we develop a certification procedure to formally determine if ObjectSeeker can detect certain objects against any white-box adaptive attack within the threat model, achieving certifiable robustness. Our experiments demonstrate a significant (~10%-40% absolute and ~2-6x relative) improvement in certifiable robustness over the prior work, as well as high clean performance (~1% drop compared with undefended models).

For agents

The same record, over MCP at https://syntology.ai/mcp:

get_harvested_code_for_paper("2202.01811")
get_code_for_paper("2202.01811")
have("2202.01811")

Connect an agent — have() is free.