{"id":"https://openalex.org/W4384948728","doi":"https://doi.org/10.1109/sp46215.2023.10179319","title":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","display_name":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4384948728","doi":"https://doi.org/10.1109/sp46215.2023.10179319"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10179319","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179319","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030028368","display_name":"Chong Xiang","orcid":null},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chong Xiang","raw_affiliation_strings":["Princeton University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Princeton University","institution_ids":["https://openalex.org/I20089843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006720552","display_name":"Alexander Valtchanov","orcid":null},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alexander Valtchanov","raw_affiliation_strings":["Princeton University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Princeton University","institution_ids":["https://openalex.org/I20089843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049153799","display_name":"Saeed Mahloujifar","orcid":"https://orcid.org/0000-0001-6586-8378"},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Saeed Mahloujifar","raw_affiliation_strings":["Princeton University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Princeton University","institution_ids":["https://openalex.org/I20089843"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015619835","display_name":"Prateek Mittal","orcid":"https://orcid.org/0000-0002-4057-0118"},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Prateek Mittal","raw_affiliation_strings":["Princeton University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Princeton University","institution_ids":["https://openalex.org/I20089843"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I20089843"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":28,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1329","last_page":"1347"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9871000051498413,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.975600004196167,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7953746318817139},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7943866848945618},{"id":"https://openalex.org/keywords/object-detection","display_name":"Object detection","score":0.6017228960990906},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.5438992381095886},{"id":"https://openalex.org/keywords/masking","display_name":"Masking (illustration)","score":0.5298758745193481},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4588014483451843},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.41881901025772095},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.26916930079460144},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.06783565878868103}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7953746318817139},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7943866848945618},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.6017228960990906},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.5438992381095886},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.5298758745193481},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4588014483451843},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.41881901025772095},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.26916930079460144},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.06783565878868103},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46215.2023.10179319","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179319","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5400000214576721,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320316514","display_name":"Arm","ror":"https://ror.org/04mmhzs81"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":79,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W639708223","https://openalex.org/W1861492603","https://openalex.org/W2031489346","https://openalex.org/W2115579991","https://openalex.org/W2125908420","https://openalex.org/W2180612164","https://openalex.org/W2193145675","https://openalex.org/W2570343428","https://openalex.org/W2607219512","https://openalex.org/W2618043096","https://openalex.org/W2775467454","https://openalex.org/W2890883923","https://openalex.org/W2902867332","https://openalex.org/W2905423756","https://openalex.org/W2951735139","https://openalex.org/W2962818872","https://openalex.org/W2963037989","https://openalex.org/W2963150697","https://openalex.org/W2963302614","https://openalex.org/W2963351448","https://openalex.org/W2963726920","https://openalex.org/W2963857521","https://openalex.org/W2963952467","https://openalex.org/W2964082701","https://openalex.org/W2981495453","https://openalex.org/W2984260944","https://openalex.org/W2990945337","https://openalex.org/W3007603175","https://openalex.org/W3018757597","https://openalex.org/W3034971973","https://openalex.org/W3036321094","https://openalex.org/W3094984771","https://openalex.org/W3097269597","https://openalex.org/W3097573595","https://openalex.org/W3102720581","https://openalex.org/W3103836116","https://openalex.org/W3105806188","https://openalex.org/W3106250896","https://openalex.org/W3107990944","https://openalex.org/W3108072218","https://openalex.org/W3113588330","https://openalex.org/W3128390792","https://openalex.org/W3138047508","https://openalex.org/W3138516171","https://openalex.org/W3164612304","https://openalex.org/W3169643582","https://openalex.org/W3204155906","https://openalex.org/W3205672068","https://openalex.org/W3205945722","https://openalex.org/W3206976809","https://openalex.org/W3209343599","https://openalex.org/W3212077589","https://openalex.org/W3215404543","https://openalex.org/W4293584584","https://openalex.org/W4293846201","https://openalex.org/W4384948728","https://openalex.org/W6620707391","https://openalex.org/W6637131181","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6747706139","https://openalex.org/W6748277150","https://openalex.org/W6751278434","https://openalex.org/W6751839145","https://openalex.org/W6753468839","https://openalex.org/W6754363872","https://openalex.org/W6758684365","https://openalex.org/W6764522968","https://openalex.org/W6765694979","https://openalex.org/W6767506513","https://openalex.org/W6772291365","https://openalex.org/W6774113373","https://openalex.org/W6784545786","https://openalex.org/W6788444534","https://openalex.org/W6794830277","https://openalex.org/W6797731976","https://openalex.org/W6800565261","https://openalex.org/W6803234871"],"related_works":["https://openalex.org/W3081694532","https://openalex.org/W2366906938","https://openalex.org/W2349391998","https://openalex.org/W4205655149","https://openalex.org/W2000775715","https://openalex.org/W1517958729","https://openalex.org/W2770593030","https://openalex.org/W2795393339","https://openalex.org/W2074467390","https://openalex.org/W4390618967"],"abstract_inverted_index":{"Object":[0],"detectors,":[1],"which":[2],"are":[3],"widely":[4],"deployed":[5],"in":[6,67,118,159],"security-critical":[7],"systems":[8],"such":[9],"as":[10,166,168],"autonomous":[11],"vehicles,":[12],"have":[13],"been":[14],"found":[15],"vulnerable":[16],"to":[17,30,74,104,127],"patch":[18,29,61,80],"hiding":[19,62],"attacks.":[20,63],"An":[21],"attacker":[22],"can":[23,114,132],"use":[24],"a":[25,119,124,151],"single":[26],"physically-realizable":[27],"adversarial":[28,79,96],"make":[31],"the":[32,36,43,77,83,89,95,109,142,163],"object":[33,46,58,102],"detector":[34,103],"miss":[35],"detection":[37,47,59],"of":[38,45,88],"victim":[39],"objects":[40,107,135],"and":[41,86,98,155],"undermine":[42],"functionality":[44],"applications.":[48],"In":[49],"this":[50],"paper,":[51],"we":[52,72,113,122],"propose":[53],"ObjectSeeker":[54,68,131],"for":[55],"certifiably":[56],"robust":[57],"against":[60,136],"The":[64],"key":[65],"insight":[66],"is":[69],"patch-agnostic":[70],"masking:":[71],"aim":[73],"mask":[75],"out":[76],"entire":[78],"without":[81],"knowing":[82],"shape,":[84],"size,":[85],"location":[87],"patch.":[90],"This":[91],"masking":[92],"operation":[93],"neutralizes":[94],"effect":[97],"allows":[99],"any":[100,137],"vanilla":[101],"safely":[105],"detect":[106,133],"on":[108],"masked":[110],"images.":[111],"Remarkably,":[112],"evaluate":[115],"ObjectSeeker\u2019s":[116],"robustness":[117,161],"certifiable":[120,146,160],"manner:":[121],"develop":[123],"certification":[125],"procedure":[126],"formally":[128],"determine":[129],"if":[130],"certain":[134],"white-box":[138],"adaptive":[139],"attack":[140],"within":[141],"threat":[143],"model,":[144],"achieving":[145],"robustness.":[147],"Our":[148],"experiments":[149],"demonstrate":[150],"significant":[152],"(~10%-40%":[153],"absolute":[154],"~2-6\u00d7":[156],"relative)":[157],"improvement":[158],"over":[162],"prior":[164],"work,":[165],"well":[167],"high":[169],"clean":[170],"performance":[171],"(\u223c1%":[172],"drop":[173],"compared":[174],"with":[175],"undefended":[176],"models).":[177],"<sup":[178],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[179],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">1</sup>":[180]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":16},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":6}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}