Defending Against Physical Adversarial Patch Attacks on Infrared Human Detection
TL;DR
- Infrared human detection gains a patch defense: POD addresses physically realizable adversarial patches.
- Patch-aware training detects people and attacks: Augments training images with random patches and learns to locate them.
- Defense generalizes to unseen patches: Improves robustness across patch shapes and sizes while also improving clean precision.
Type
Publication
ICIP 2024
Presentation Slides
