Hijacking Tracker: A Powerful Adversarial Attack on Visual Tracking

Yan，Xiyu1; Chen，Xuesong2; Jiang，Yong1,3; Xia，Shu Tao1,3; Zhao，Yong2; Zheng，Feng4

10.1109/ICASSP40776.2020.9053574

2020-05-01

1520-6149

978-1-5090-6632-2

ICASSP, IEEE International Conference on Acoustics, Speech and Signal Processing - Proceedings

2020-May

2897-2901

4-8 May 2020

Barcelona, Spain

Visual object tracking has made important breakthroughs with the assistance of deep learning models. Unfortunately, recent research has clearly proved that deep learning models are vulnerable to malicious adversarial attacks, which mislead the models making wrong decisions by perturbing the input image. The threat to the models alerts us to pay attention to the model security of deep learning-based tracking algorithms. Therefore, we study the adversarial attacks against advanced trackers based on deep learning to better identify the vulnerability of tracking algorithms. In this paper, we propose to add slight adversarial perturbations to the input image by an inconspicuous but powerful attack strategy-hijacking algorithm. Specifically, the hijacking strategy misleads trackers in two aspects: one is shape hijacking that changes the shape of the model output; the other is position hijacking that gradually pushes the output to any position in the image frame. Besides, we further propose an adaptive optimization approach to integrate two hijacking mechanisms efficiently. Eventually, the hijacking algorithm results in fooling the tracker to track the wrong target gradually. The experimental results demonstrate the powerful attack ability of our method-quickly hijacking state-of-the-art trackers and reducing the accuracy of these models by more than 90% on OTB2015.

adversarial attack Hijacking visual tracking

其他

英语

EI

20203309041180

Learning systems ; Tracking (position) ; Learning algorithms

Ergonomics and Human Factors Engineering:461.4 ; Machine Learning:723.4.2

2-s2.0-85089230540

Scopus

1.Tsinghua University,Dept. of Computer Science and Technology,China
2.Sch. of Electronic and Computer Engineering,Shenzhen Graduate School of Peking University,China
3.Peng Cheng Laboratory,PCL Research Center of Networks and Communications,Shenzhen,China
4.Southern University of Science and Technology,Dept. of Computer Science and Engineering,Shenzhen,China

Yan，Xiyu,Chen，Xuesong,Jiang，Yong,et al. Hijacking Tracker: A Powerful Adversarial Attack on Visual Tracking[C],2020:2897-2901.