Using Depth for Pixel-Wise Detection of Adversarial Attacks in Crowd Counting
arXiv:1911.11484
Abstract
State-of-the-art methods for counting people in crowded scenes rely on deep networks to estimate crowd density. While effective, deep learning approaches are vulnerable to adversarial attacks, which, in a crowd-counting context, can lead to serious security issues. However, attack and defense mechanisms have been virtually unexplored in regression tasks, let alone for crowd density estimation. In this paper, we investigate the effectiveness of existing attack strategies on crowd-counting networks, and introduce a simple yet effective pixel-wise detection mechanism. It builds on the intuition that, when attacking a multitask network, in our case estimating crowd density and scene depth, both outputs will be perturbed, and thus the second one can be used for detection purposes. We will demonstrate that this significantly outperforms heuristic and uncertainty-based strategies.
References in corpus (9)
- Spatial Pyramid Pooling in Deep Convolutional Networks for Visual Recognition
- What Uncertainties Do We Need in Bayesian Deep Learning for Computer Vision?
- Detecting Adversarial Samples from Artifacts
- On the (Statistical) Detection of Adversarial Examples
- On Detecting Adversarial Perturbations
- Crowd Counting and Density Estimation by Trellis Encoder-Decoder Network
- Characterizing Adversarial Examples Based on Spatial Consistency Information for Semantic Segmentation
- Perspective-Guided Convolution Networks for Crowd Counting
- ADCrowdNet: An Attention-injective Deformable Convolutional Network for Crowd Understanding