{"id":"https://openalex.org/W3092437455","doi":"https://doi.org/10.1109/jiot.2020.3034899","title":"Targeted Attention Attack on Deep Learning Models in Road Sign Recognition","display_name":"Targeted Attention Attack on Deep Learning Models in Road Sign Recognition","publication_year":2020,"publication_date":"2020-10-30","ids":{"openalex":"https://openalex.org/W3092437455","doi":"https://doi.org/10.1109/jiot.2020.3034899","mag":"3092437455"},"language":"en","primary_location":{"id":"doi:10.1109/jiot.2020.3034899","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2020.3034899","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"preprint","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/abs/2010.04331v1","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034521535","display_name":"Xinghao Yang","orcid":"https://orcid.org/0000-0001-6487-3183"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Xinghao Yang","raw_affiliation_strings":["School of Computer Science, Faculty of Engineering and Information Technology, University of Technology Sydney, Sydney, NSW, Australia","[School of Computer Science, Faculty of Engineering and Information Technology, University of Technology Sydney, Sydney, NSW, Australia]"],"affiliations":[{"raw_affiliation_string":"School of Computer Science, Faculty of Engineering and Information Technology, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]},{"raw_affiliation_string":"[School of Computer Science, Faculty of Engineering and Information Technology, University of Technology Sydney, Sydney, NSW, Australia]","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100444156","display_name":"Weifeng Liu","orcid":"https://orcid.org/0000-0002-5388-9080"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]},{"id":"https://openalex.org/I4210162190","display_name":"China University of Petroleum, East China","ror":"https://ror.org/05gbn2817","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210162190"]}],"countries":["AU","CN"],"is_corresponding":false,"raw_author_name":"Weifeng Liu","raw_affiliation_strings":["School of Computer Science, Faculty of Engineering and Information Technology, University of Technology Sydney, Sydney, NSW, Australia","School of Information and Control Engineering, China University of Petroleum (East China), Qingdao, China","[School of Information and Control Engineering, China University of Petroleum (East China), Qingdao, China]"],"affiliations":[{"raw_affiliation_string":"School of Computer Science, Faculty of Engineering and Information Technology, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]},{"raw_affiliation_string":"School of Information and Control Engineering, China University of Petroleum (East China), Qingdao, China","institution_ids":["https://openalex.org/I4210162190"]},{"raw_affiliation_string":"[School of Information and Control Engineering, China University of Petroleum (East China), Qingdao, China]","institution_ids":["https://openalex.org/I4210162190"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100413418","display_name":"Shengli Zhang","orcid":"https://orcid.org/0000-0002-7937-5870"},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shengli Zhang","raw_affiliation_strings":["College of Information Engineering, Shenzhen University, Shenzhen, China","Coll. of Inf. Eng., Shenzhen Univ., Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"College of Information Engineering, Shenzhen University, Shenzhen, China","institution_ids":["https://openalex.org/I180726961"]},{"raw_affiliation_string":"Coll. of Inf. Eng., Shenzhen Univ., Shenzhen, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100431652","display_name":"Wei Liu","orcid":"https://orcid.org/0000-0001-6565-5815"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]},{"id":"https://openalex.org/I4210162190","display_name":"China University of Petroleum, East China","ror":"https://ror.org/05gbn2817","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210162190"]}],"countries":["AU","CN"],"is_corresponding":false,"raw_author_name":"Wei Liu","raw_affiliation_strings":["School of Computer Science, Faculty of Engineering and Information Technology, University of Technology Sydney, Sydney, NSW, Australia","School of Information and Control Engineering, China University of Petroleum (East China), Qingdao, China","[School of Computer Science, Faculty of Engineering and Information Technology, University of Technology Sydney, Sydney, NSW, Australia]"],"affiliations":[{"raw_affiliation_string":"School of Computer Science, Faculty of Engineering and Information Technology, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]},{"raw_affiliation_string":"School of Information and Control Engineering, China University of Petroleum (East China), Qingdao, China","institution_ids":["https://openalex.org/I4210162190"]},{"raw_affiliation_string":"[School of Computer Science, Faculty of Engineering and Information Technology, University of Technology Sydney, Sydney, NSW, Australia]","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5074103823","display_name":"Dacheng Tao","orcid":"https://orcid.org/0000-0001-7225-5449"},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Dacheng Tao","raw_affiliation_strings":["School of Computer Science, Faculty of Engineering, University of Sydney, Darlington, NSW, Australia"],"affiliations":[{"raw_affiliation_string":"School of Computer Science, Faculty of Engineering, University of Sydney, Darlington, NSW, Australia","institution_ids":["https://openalex.org/I129604602"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5034521535"],"corresponding_institution_ids":["https://openalex.org/I114017466"],"apc_list":null,"apc_paid":null,"fwci":0.4078,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.70354511,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"8","issue":"6","first_page":"4980","last_page":"4990"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9843000173568726,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9667999744415283,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7847800850868225},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6346390843391418},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5553756356239319},{"id":"https://openalex.org/keywords/traverse","display_name":"Traverse","score":0.5478822588920593},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5168245434761047},{"id":"https://openalex.org/keywords/pixel","display_name":"Pixel","score":0.49094393849372864},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4503915011882782},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4424579441547394},{"id":"https://openalex.org/keywords/advanced-driver-assistance-systems","display_name":"Advanced driver assistance systems","score":0.4392279386520386},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.43370741605758667},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.09325012564659119}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7847800850868225},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6346390843391418},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5553756356239319},{"id":"https://openalex.org/C176809094","wikidata":"https://www.wikidata.org/wiki/Q15401496","display_name":"Traverse","level":2,"score":0.5478822588920593},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5168245434761047},{"id":"https://openalex.org/C160633673","wikidata":"https://www.wikidata.org/wiki/Q355198","display_name":"Pixel","level":2,"score":0.49094393849372864},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4503915011882782},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4424579441547394},{"id":"https://openalex.org/C87833898","wikidata":"https://www.wikidata.org/wiki/Q1060280","display_name":"Advanced driver assistance systems","level":2,"score":0.4392279386520386},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.43370741605758667},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.09325012564659119},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/jiot.2020.3034899","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2020.3034899","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},{"id":"mag:3092437455","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2010.04331v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"pmh:oai:opus.lib.uts.edu.au:10453/145747","is_oa":false,"landing_page_url":"http://hdl.handle.net/10453/145747","pdf_url":null,"source":{"id":"https://openalex.org/S4306401357","display_name":"UTS ePRESS (University of Technology Sydney)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I114017466","host_organization_name":"University of Technology Sydney","host_organization_lineage":["https://openalex.org/I114017466"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Journal Article"}],"best_oa_location":{"id":"mag:3092437455","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2010.04331v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"sustainable_development_goals":[{"display_name":"Sustainable cities and communities","id":"https://metadata.un.org/sdg/11","score":0.5099999904632568}],"awards":[{"id":"https://openalex.org/G3174610883","display_name":null,"funder_award_id":"IC-190100031","funder_id":"https://openalex.org/F4320334704","funder_display_name":"Australian Research Council"},{"id":"https://openalex.org/G4838037128","display_name":null,"funder_award_id":"202000009","funder_id":"https://openalex.org/F4320326873","funder_display_name":"National Laboratory of Pattern Recognition"},{"id":"https://openalex.org/G7519899501","display_name":null,"funder_award_id":"FL-170100117","funder_id":"https://openalex.org/F4320334704","funder_display_name":"Australian Research Council"}],"funders":[{"id":"https://openalex.org/F4320326873","display_name":"National Laboratory of Pattern Recognition","ror":null},{"id":"https://openalex.org/F4320334704","display_name":"Australian Research Council","ror":"https://ror.org/05mmh0f86"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":54,"referenced_works":["https://openalex.org/W1505723240","https://openalex.org/W2051434435","https://openalex.org/W2058401212","https://openalex.org/W2067713319","https://openalex.org/W2117876524","https://openalex.org/W2119112357","https://openalex.org/W2122374500","https://openalex.org/W2126628495","https://openalex.org/W2140669960","https://openalex.org/W2243397390","https://openalex.org/W2302255633","https://openalex.org/W2404205672","https://openalex.org/W2460937040","https://openalex.org/W2477008314","https://openalex.org/W2526177130","https://openalex.org/W2535873859","https://openalex.org/W2561498661","https://openalex.org/W2735607295","https://openalex.org/W2765424254","https://openalex.org/W2774644650","https://openalex.org/W2781758978","https://openalex.org/W2783784437","https://openalex.org/W2791639158","https://openalex.org/W2798302089","https://openalex.org/W2798801120","https://openalex.org/W2895799837","https://openalex.org/W2906634842","https://openalex.org/W2945033152","https://openalex.org/W2947657997","https://openalex.org/W2953248129","https://openalex.org/W2962700793","https://openalex.org/W2963068442","https://openalex.org/W2963070423","https://openalex.org/W2963207607","https://openalex.org/W2963495494","https://openalex.org/W2963857521","https://openalex.org/W2964153729","https://openalex.org/W2982419388","https://openalex.org/W2986684110","https://openalex.org/W2998347911","https://openalex.org/W3000562546","https://openalex.org/W3008983606","https://openalex.org/W3011711787","https://openalex.org/W3013573132","https://openalex.org/W3015625436","https://openalex.org/W3027178286","https://openalex.org/W3034892461","https://openalex.org/W3035937838","https://openalex.org/W3045729505","https://openalex.org/W3101050222","https://openalex.org/W3103557498","https://openalex.org/W6682137061","https://openalex.org/W6750404860","https://openalex.org/W6762970624"],"related_works":["https://openalex.org/W3193477559","https://openalex.org/W2746600820","https://openalex.org/W3206423720","https://openalex.org/W3006896454","https://openalex.org/W2963882994","https://openalex.org/W3159793764","https://openalex.org/W2803678876","https://openalex.org/W3109751798","https://openalex.org/W3119614941","https://openalex.org/W3034892461","https://openalex.org/W3128513745","https://openalex.org/W2962847335","https://openalex.org/W3092633571","https://openalex.org/W3162334865","https://openalex.org/W2560358147","https://openalex.org/W3211686381","https://openalex.org/W194952517","https://openalex.org/W2904294250","https://openalex.org/W2941733693","https://openalex.org/W3187736218"],"abstract_inverted_index":{"Real-world":[0],"traffic":[1],"sign":[2,66,114],"recognition":[3],"is":[4,76],"an":[5,149],"important":[6,133],"step":[7],"toward":[8],"building":[9],"autonomous":[10],"vehicles,":[11],"most":[12,57,86],"of":[13,58,162,168,191],"which":[14],"highly":[15],"dependent":[16],"on":[17,159,193],"deep":[18],"neural":[19],"networks":[20],"(DNNs).":[21],"Recent":[22],"studies":[23],"demonstrated":[24],"that":[25,153,180,200],"DNNs":[26],"are":[27,61],"surprisingly":[28],"susceptible":[29],"to":[30,39,130,142,242],"adversarial":[31,43],"examples.":[32],"Many":[33],"attack":[34,108,152,206],"methods":[35],"have":[36,118],"been":[37],"proposed":[38],"understand":[40],"and":[41,53,84,135,185,211,234,240],"generate":[42,143],"examples,":[44],"such":[45],"as":[46],"gradient-based":[47],"attack,":[48,50,52,67],"score-based":[49],"decision-based":[51],"transfer-based":[54],"attacks.":[55],"However,":[56],"these":[59,100],"algorithms":[60,88],"ineffective":[62],"in":[63],"real-world":[64,112,194],"road":[65,113],"because":[68],"1)":[69,123],"iteratively":[70],"learning":[71],"perturbations":[72],"for":[73,79,111],"each":[74],"frame":[75],"not":[77],"realistic":[78],"a":[80,155,160,176,217],"fast":[81],"moving":[82],"car":[83],"2)":[85,146],"optimization":[87],"traverse":[89],"all":[90],"pixels":[91,134],"equally":[92],"without":[93],"considering":[94],"their":[95],"diverse":[96],"contribution.":[97],"To":[98],"alleviate":[99],"problems,":[101],"this":[102],"article":[103],"proposes":[104],"the":[105,120,126,166,169,189,201,205,213,221,244],"targeted":[106],"attention":[107,128,171],"(TAA)":[109],"method":[110,203],"attack.":[115],"Specifically,":[116],"we":[117,124,147,174,187],"made":[119],"following":[121],"contributions:":[122],"leverage":[125],"soft":[127],"map":[129],"highlight":[131],"those":[132,137],"skip":[136],"zero-contributed":[138],"areas-this":[139],"also":[140,228],"helps":[141],"natural":[144],"perturbations;":[145],"design":[148,175],"efficient":[150],"universal":[151],"optimizes":[154],"single":[156],"perturbation/noise":[157],"based":[158],"set":[161],"training":[163],"images":[164],"under":[165],"guidance":[167],"pretrained":[170],"map;":[172],"3)":[173],"simple":[177],"objective":[178],"function":[179],"can":[181],"be":[182],"easily":[183],"optimized;":[184],"4)":[186],"evaluate":[188],"effectiveness":[190],"TAA":[192,202,227],"data":[195,241],"sets.":[196],"Experimental":[197],"results":[198],"validate":[199],"improves":[204],"successful":[207],"rate":[208],"(nearly":[209],"10%)":[210],"reduces":[212],"perturbation":[214],"loss":[215],"(about":[216],"quarter)":[218],"compared":[219],"with":[220],"popular":[222],"RP2":[223],"method.":[224],"Additionally,":[225],"our":[226],"provides":[229],"good":[230],"properties,":[231],"e.g.,":[232],"transferability":[233],"generalization":[235],"capability.":[236],"We":[237],"provide":[238],"code":[239],"ensure":[243],"reproducibility:":[245],"https://github.com/AdvAttack/RoadSignAttack.":[246]},"counts_by_year":[{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1}],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-10-10T00:00:00"}