针对低空安防智能目标检测技术的对抗攻击方法研究

Adversarial Attacks Against AI-Powered Object Detection in Low-Altitude Defense

  • 摘要: 基于深度学习的目标检测技术是低空安防系统的感知核心,其安全性直接关系到无人机巡检、空中物流等关键应用的可靠性. 为系统评估低空视觉系统在对抗环境下的鲁棒性,以广泛部署的YOLOv8检测器为研究对象,提出一种联合对抗攻击方法;该方法通过协同优化目标定位、分类等多任务损失,生成能够诱导检测器产生漏检与误检的对抗性补丁. 在包含多种飞机目标的数据集(MAR20)上的实验表明,所提方法对YOLOv8系列模型的平均攻击成功率达到78.86%,显著优于随机噪声攻击. 跨模型迁移实验进一步显示,对抗补丁在YOLOv8不同规模变体间保持平均65%以上的攻击成功率,表现出强泛化能力. 这些结果系统揭示了YOLOv8在联合优化机制下存在的对抗脆弱性. 本研究从攻击者视角,揭示了低空安防视觉系统在联合优化对抗机制下存在的严重脆弱性,为构建鲁棒性评估框架、设计主动防御策略及实现低空关键基础设施的安全部署提供了重要参考.

     

    Abstract: Deep learning-based object detection technology serves as the perceptual core of low-altitude security systems, directly impacting the reliability of critical applications such as drone inspection and aerial logistics. To evaluate the robustness of low-altitude visual systems under adversarial conditions, with the widely deployed YOLOv8 detector as research subject, a joint adversarial attack method was proposed. By co-optimizing multi-task losses, including target localization and classification, the method generated adversarial patches capable of inducing false negatives and false positives in the detector. Experiments conducted on a dataset containing various aircraft targets (MAR20) demonstrated that the proposed method achieved an average attack success rate of 78.86% against YOLOv8 series models, significantly outperforming random noise attacks. Cross-model transfer experiments further revealed that the adversarial patches maintained an average attack success rate exceeding 65% across different variants of YOLOv8, indicating strong generalization capability. These results systematically expose the adversarial vulnerabilities inherent in YOLOv8’s joint optimization mechanism. From an attacker’s perspective, this study empirically revealed the severe vulnerabilities present in low-altitude security visual systems under joint adversarial optimization, providing an important reference for building robustness evaluation frameworks, designing active defense strategies, and ensuring the secure deployment of critical low-altitude infrastructure.

     

/

返回文章
返回