Adversarial Sticker: A Stealthy Attack Method in the Physical World

Understand

To assess the vulnerability of deep learning in the physical world, recent works introduce adversarial patches and apply them on different tasks.

• In this paper, we propose another kind of adversarial patch: the Meaningful Adversarial Sticker, a physically feasible and stealthy attack method by using real stickers existing in our life.
• Unlike the previous adversarial patches by designing perturbations, our method manipulates the sticker's pasting position and rotation angle on the objects to perform physical attacks.
• Because the position and rotation angle are less affected by the printing loss and color distortion, adversarial stickers can keep good attacking performance in the physical world.