Demo Data from EDBT 2026 / reviewers in the wild / expert
Ruitian Ding
dblp:347/9394
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2024
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
1 paper |
Trustworthy machine learning · 80% Image recognition and object detection · 20% |
Topics — the 5 heaviest of 6, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Trustworthy machine learning › adversarial machine learning › physical adversarial attack
adversarial patch attack |
0.8 | 1 | 2024 | DAP: A Dynamic Adversarial Patch for Evading Person Detectors · CVPR 2024 |
Machine learning › Trustworthy machine learning › robustness
adversarial robustness |
0.8 | 1 | 2024 | DAP: A Dynamic Adversarial Patch for Evading Person Detectors · CVPR 2024 |
Machine learning › Trustworthy machine learning › adversarial machine learning
evasion attack |
0.8 | 1 | 2024 | DAP: A Dynamic Adversarial Patch for Evading Person Detectors · CVPR 2024 |
Computer vision › Image recognition and object detection › object detection › category-specific object detection
person detection |
0.8 | 1 | 2024 | DAP: A Dynamic Adversarial Patch for Evading Person Detectors · CVPR 2024 |
Machine learning › Trustworthy machine learning › adversarial machine learning
physical adversarial attack |
0.8 | 1 | 2024 | DAP: A Dynamic Adversarial Patch for Evading Person Detectors · CVPR 2024 |
Methods — techniques the papers use, named apart from their topics
optimization · 0.8generative adversarial network · 0.8creases transformation · 0.8
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2024 | DAP: A Dynamic Adversarial Patch for Evading Person DetectorsabstractPatch-based adversarial attacks were proven to compromise the robustness and reliability of computer vision systems. However, their conspicuous and easily detectable nature challenge their practicality in real-world setting. To address this, recent work has proposed using Generative Adversarial Networks (GANs) to generate naturalistic patches that may not attract human attention. However, such approaches suffer from a limited latent space making it challenging to produce a patch that is efficient, stealthy, and robust to multiple real-world transformations. This paper introduces a novel approach that produces a Dynamic Adversarial Patch (DAP) designed to overcome these limitations. DAP maintains a naturalistic appearance while optimizing attack efficiency and robustness to real-world transformations. The approach involves redefining the optimization problem and introducing a novel objective function that incorporates a similarity metric to guide the patch's creation. Unlike GAN-based techniques, the DAP directly modifies pixel values within the patch, providing increased flexibility and adaptability to multiple transformations. Furthermore, most clothing-based physical attacks assume static objects and ignore the possible transformations caused by non-rigid deformation due to changes in a person's pose. To address this limitation, a ‘Creases Transformation’ (CT) block is introduced, enhancing the patch's resilience to a variety of real-world distortions. Experimental results demonstrate that the proposed approach outperforms state-of-the-art attacks, achieving a success rate of up to 82.28% in the digital world when targeting the YOLOv7 detector and 65% in the physical world when targeting YOLOv3tiny detector deployed in edge-based smart cameras. Amira Guesmi, Ruitian Ding, Muhammad Abdullah Hanif, Ihsen Alouani, Muhammad Shafique 0001 |
CVPR | 2 |