一种基于粒子群优化的对抗攻击补丁生成方法

By improving the particle swarm optimization algorithm and fitness function design, adversarial patches with strong offensive capabilities and natural appearance in the physical world are generated. This solves the problems of high computational resource consumption and insufficient concealment in existing methods, and achieves efficient and covert adversarial attack effects.

CN121457501BActive Publication Date: 2026-07-17BEIJING INST OF TECH

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
BEIJING INST OF TECH
Filing Date
2025-09-15
Publication Date
2026-07-17

AI Technical Summary

Technical Problem

Existing adversarial patch generation methods suffer from problems such as high computational resource consumption, difficulty in effective conversion in the physical world, lack of concealment in generated patches, and difficulty in balancing attack effects with naturalness.

Method used

An improved particle swarm optimization algorithm is used to search for adversarial patches in a multidimensional parameter space. Combined with fitness function design, adversarial patches with strong attack power and natural appearance are generated. The position, shape and color of the patches are optimized through a multi-patch collaborative strategy.

Benefits of technology

It improves patch generation efficiency, ensures effectiveness and stealth in the physical world, increases attack success rate, and addresses the shortcomings of existing methods in terms of computational resources and stealth.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN121457501B_ABST
    Figure CN121457501B_ABST
Patent Text Reader

Abstract

本发明提供一种基于粒子群优化的对抗攻击补丁生成方法,本发明采用多补丁协同策略,将目标区域划分为多个子区域,在每个子区域中部署独立的对抗补丁,利用粒子群算法在参数空间中高效搜索最优补丁配置,并通过定义适应度函数评估补丁对目标检测器置信度的降低效果,实现对抗样本的迭代优化;也就是说,本发明通过优化补丁的形状、位置和颜色参数,能够生成更隐蔽、攻击成功率更高、有效欺骗目标检测器的物理对抗样本,是一种针对计算机视觉系统的安全性新型攻击方法。
Need to check novelty before this filing date? Find Prior Art