The invention discloses a
pedestrian detection-oriented physical adversarial patch generation and migration method, and belongs to the field of
computer vision and
artificial intelligence security. The invention provides a shape-texture two-stage layered optimization and Min-Max robust migration framework aiming at the problems of abrupt patch shape, difficulty in
reproduction of pixel-level
noise and poor environmental adaptability in the existing physical
countermeasure attack. The method comprises the following steps: firstly, constructing a smooth patch contour by using a centripetal Catmull-Rom spline curve, and optimizing an
anchor point coordinate through a
differential evolution algorithm so as to lock an effective
receptive field which is most sensitive to a model; secondly, constructing a discrete
texture coding space based on a physical
adhesive tape, and searching an optimal stripe texture formed by the color, width and direction of a standard
adhesive tape in a fixed shape; meanwhile, a Min-Max
robust optimization strategy is introduced, and the anti-interference capability of the patch is improved by minimizing the maximum confidence coefficient under the worst illumination transformation; and finally, a
physical mapping strategy based on vector reconstruction is adopted, a precise transformation model from pixels to millimeters is established, and an SVG vector manufacturing file irrelevant to resolution is output. According to the method, precise
closed loop of the anti-patch from
digital algorithm optimization to physical object manufacturing is realized, and the method has the advantages of high physical
realizability, natural and hidden shape, high environmental robustness and the like.