activity
20212026
most citedA Survey on Physical Adversarial Attack in Computer Vision

4 citations · 14 across the 29 of their papers we have counts for

collaborators

31 papers

cs.RO2026

Generative Evolutionary Design of Voxel-Based Soft Robots with Provable Optimality

Junru Song, Huan Xiao, Yang Yang +8

Voxel-based soft robots (VSRs) present a promising avenue for developing artificial organisms with lifelike intelligence. However, the vast design spaces and expensive evaluations…

cs.RO2026

RoboLDA: A Probabilistic Generative Model for Uncovering Embodied Hierarchical Structures in Voxel-based Soft Robots

Junru Song, Yang Yang, Jingdan Shi +6

Recent advances in robotics highlight hierarchical configurations of robot morphology, where multiple levels of functional substructures synergize to facilitate intelligent behavio…

cs.CV2026

AdvTiles: Physical Adversarial Camouflage Clothing against Person Detectors via Learnable Tiles

Jinlei Wang, Jiahuan Long, Mingkai Sun +9

Physical adversarial attacks against person detectors have evolved from localized patches to full-body textures. However, achieving both visual naturalness and strong attack effect…

cs.AI2026

CoNav-UAV: Cooperative Dual-Altitude Aerial Navigation via Stackelberg Learning

Junru Song, Wenhao Zhang, Yang Yang +7

Target-oriented vision-and-language navigation (VLN) on aerial platforms is attracting growing attention for missions such as disaster rescue, infrastructure inspection, and securi…

cs.CV2026

Challenging Vision-Language Models with Physically Deployable Multimodal Semantic Lighting Attacks

Yingying Zhao, Chengyin Hu, Qike Zhang +7

Vision-Language Models (VLMs) have shown remarkable performance, yet their security remains insufficiently understood. Existing adversarial studies focus almost exclusively on the…

cs.RO2026

JailWAM: Jailbreaking World Action Models in Robot Control

Hanqing Liu, Songping Wang, Jiahuan Long +9

World Action Models (WAMs) have emerged as a promising paradigm for robotic manipulation, enabling physical interaction across diverse tasks and environments. However, their abilit…

cs.CV2026

Revealing Physical-World Semantic Vulnerabilities: Universal Adversarial Patch for Infrared Vision-Language Models

Chengyin Hu, Yuxian Dong, Yikun Guo +8

Infrared vision-language models (IR-VLMs) are becoming important for semantic perception in low-visibility environments, yet their robustness to physical semantic attacks remains u…

cs.AI2025

Thermally Activated Dual-Modal Adversarial Clothing against AI Surveillance Systems

Jiahuan Long, Tingsong Jiang, Hanqing Liu +4

Adversarial patches have emerged as a popular privacy-preserving approach for resisting AI-driven surveillance systems. However, their conspicuous appearance makes them difficult t…

cs.RO2025

Eva-VLA: Evaluating Vision-Language-Action Models' Robustness Under Real-World Physical Variations

Hanqing Liu, Shouwei Ruan, Jiahuan Long +6

Vision-Language-Action (VLA) models have emerged as promising solutions for robotic manipulation, yet their robustness to real-world physical variations remains critically underexp…

cs.LG2025

FR-Mamba: Time-Series Physical Field Reconstruction Based on State Space Model

Jiahuan Long, Wenzhe Zhang, Ning Wang +2

Physical field reconstruction (PFR) aims to predict the state distribution of physical quantities (e.g., velocity, pressure, and temperature) based on limited sensor measurements.…

cs.CV2025

PapMOT: Exploring Adversarial Patch Attack against Multiple Object Tracking

Jiahuan Long, Tingsong Jiang, Wen Yao +5

Tracking multiple objects in a continuous video stream is crucial for many computer vision tasks. It involves detecting and associating objects with their respective identities acr…

cs.CV2025

Robust SAM: On the Adversarial Robustness of Vision Foundation Models

Jiahuan Long, Zhengqin Xu, Tingsong Jiang +4

The Segment Anything Model (SAM) is a widely used vision foundation model with diverse applications, including image segmentation, detection, and tracking. Given SAM's wide applica…

cs.CV2025

CDUPatch: Color-Driven Universal Adversarial Patch Attack for Dual-Modal Visible-Infrared Detectors

Jiahuan Long, Wen Yao, Tingsong Jiang +1

Adversarial patches are widely used to evaluate the robustness of object detection systems in real-world scenarios. These patches were initially designed to deceive single-modal de…

cs.CV2025

Parameter-Free Fine-tuning via Redundancy Elimination for Vision Foundation Models

Jiahuan Long, Tingsong Jiang, Wen Yao +5

Vision foundation models (VFMs) have demonstrated remarkable capabilities in learning universal visual representations. However, adapting these models to downstream tasks conventio…

cs.RO2024

HeteroMorpheus: Universal Control Based on Morphological Heterogeneity Modeling

YiFan Hao, Yang Yang, Junru Song +4

In the field of robotic control, designing individual controllers for each robot leads to high computational costs. Universal control policies, applicable across diverse robot morp…

cs.CV2024★ 1 cited

Improving the Transferability of Adversarial Examples by Feature Augmentation

Donghua Wang, Wen Yao, Tingsong Jiang +3

Despite the success of input transformation-based attacks on boosting adversarial transferability, the performance is unsatisfying due to the ignorance of the discrepancy across mo…

cs.CV2024

Universal Multi-view Black-box Attack against Object Detectors via Layout Optimization

Donghua Wang, Wen Yao, Tingsong Jiang +2

Object detectors have demonstrated vulnerability to adversarial examples crafted by small perturbations that can deceive the object detector. Existing adversarial attacks mainly fo…

cs.CR2023

Universal Perturbation-based Secret Key-Controlled Data Hiding

Donghua Wang, Wen Yao, Tingsong Jiang +1

Deep neural networks (DNNs) are demonstrated to be vulnerable to universal perturbation, a single quasi-perceptible perturbation that can deceive the DNN on most images. However, t…

cs.CV2023★ 1 cited

Adversarial Examples in the Physical World: A Survey

Jiakai Wang, Xianglong Liu, Jin Hu +6

Deep neural networks (DNNs) have demonstrated high vulnerability to adversarial examples, raising broad security concerns about their applications. Besides the attacks in the digit…

cs.CV2023

Multi-objective Evolutionary Search of Variable-length Composite Semantic Perturbations

Jialiang Sun, Wen Yao, Tingsong Jiang +1

Deep neural networks have proven to be vulnerable to adversarial attacks in the form of adding specific perturbations on images to make wrong outputs. Designing stronger adversaria…

cs.CV2023★ 1 cited

RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World

Donghua Wang, Wen Yao, Tingsong Jiang +2

Physical adversarial attacks against deep neural networks (DNNs) have recently gained increasing attention. The current mainstream physical attacks use printed adversarial patches…

cs.CV2023

A Plug-and-Play Defensive Perturbation for Copyright Protection of DNN-based Applications

Donghua Wang, Wen Yao, Tingsong Jiang +3

Wide deployment of deep neural networks (DNNs) based applications (e.g., style transfer, cartoonish), stimulating the requirement of copyright protection of such application's prod…

cs.CV2023

Efficient Search of Comprehensively Robust Neural Architectures via Multi-fidelity Evaluation

Jialiang Sun, Wen Yao, Tingsong Jiang +1

Neural architecture search (NAS) has emerged as one successful technique to find robust deep neural network (DNN) architectures. However, most existing robustness evaluations in NA…

cs.CV2023★ 1 cited

Adversarial Infrared Blocks: A Multi-view Black-box Attack to Thermal Infrared Detectors in Physical World

Chengyin Hu, Weiwen Shi, Tingsong Jiang +3

Infrared imaging systems have a vast array of potential applications in pedestrian detection and autonomous driving, and their safety performance is of great concern. However, few…