Method and apparatus for generating adversarial patch
AssigneesRobert Bosch GmbH, Tsinghua University
InventorsHang Su, Yichi Zhang, Xinxin Gu, Ze Cheng, Yunjia Wang, Zijian Zhu
Life of this patent
Estimating the term…
Abstract
A method for generating a set of adversarial patches for an image. The method includes segmenting the image into a plurality of regions; selecting a set of target regions that satisfies an attacking criterion by discretely searching of the plurality of regions; and generating a set of adversarial patches by using the set of target regions.
Claims14
A method for generating a set of adversarial patches for an image, comprising the following steps:
- segmenting the image into a plurality of regions;
- selecting a set of target regions from the plurality of regions that satisfies an attacking criterion by discretely searching of the plurality of regions for regions satisfying the attacking criterion;
- and
- generating a set of adversarial patches for the image by using the set of target regions;
- wherein a shape of at least one adversarial patch in the set of adversarial patches is optimized by optimizing the selection of the set of target regions;
- wherein at least some of the adversarial patches in the set of adversarial patches have different shapes relative to one another.
An apparatus for generating a set of adversarial patches for an image, comprising:
- a memory;
- and
- at least one processor coupled to the memory and configured to generating a set of adversarial patches for an image, the at least one processor configured to:
- segment the image into a plurality of regions;
- select a set of target regions from the plurality of regions that satisfies an attacking criterion by discretely searching of the plurality of regions for regions satisfying the attacking criterion;
- and
- generate a set of adversarial patches for the image by using the set of target regions;
- wherein a shape of at least one adversarial patch in the set of adversarial patches is optimized by optimizing the selection of the set of target regions;
- wherein at least some of the adversarial patches in the set of adversarial patches have different shapes relative to one another.
A non-transitory computer readable medium on which is stored storing computer code for generating a set of adversarial patches for an image, the computer code when executed by a processor, causing the processor to perform the following steps:
- segmenting the image into a plurality of regions;
- selecting a set of target regions from the plurality of regions that satisfies an attacking criterion by discretely searching of the plurality of regions for regions satisfying the attacking criterion;
- and
- generating a set of adversarial patches for the image by using the set of target regions;
- wherein a shape of at least one adversarial patch in the set of adversarial patches is optimized by optimizing the selection of the set of target regions;
- wherein at least some of the adversarial patches in the set of adversarial patches have different shapes relative to one another.
Dependencies are inferred from the claim text.