%PDF-1.5
%
1 0 obj
<< /Metadata 3 0 R /Pages 4 0 R /Type /Catalog >>
endobj
2 0 obj
<< /Author (Yaniv Nemcovsky; Matan Jacoby; Alex M. Bronstein; Chaim Baskin) /Producer (pikepdf 6.2.2) /Subject (Asian Conference on Computer Vision) /Title (Physical Passive Patch Adversarial Attacks on Visual Odometry Systems) >>
endobj
3 0 obj
<< /Subtype /XML /Type /Metadata /Length 1163 >>
stream
Physical Passive Patch Adversarial Attacks on Visual Odometry SystemsYaniv NemcovskyMatan JacobyAlex M. BronsteinChaim BaskinAsian Conference on Computer Vision
endstream
endobj
4 0 obj
<< /Count 17 /Kids [ 5 0 R 6 0 R 7 0 R 8 0 R 9 0 R 10 0 R 11 0 R 12 0 R 13 0 R 14 0 R 15 0 R 16 0 R 17 0 R 18 0 R 19 0 R 20 0 R 21 0 R ] /Type /Pages >>
endobj
5 0 obj
<< /Contents 22 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 24 0 R /Type /Page >>
endobj
6 0 obj
<< /Contents 75 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 59 0 R /Type /Page >>
endobj
7 0 obj
<< /Contents 76 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 78 0 R /Type /Page >>
endobj
8 0 obj
<< /Contents 141 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 79 0 R /Type /Page >>
endobj
9 0 obj
<< /Contents 142 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 89 0 R /Type /Page >>
endobj
10 0 obj
<< /Contents 143 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 90 0 R /Type /Page >>
endobj
11 0 obj
<< /Contents 144 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 92 0 R /Type /Page >>
endobj
12 0 obj
<< /Contents 145 0 R /Group 97 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 93 0 R /Type /Page >>
endobj
13 0 obj
<< /Contents 146 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 119 0 R /Type /Page >>
endobj
14 0 obj
<< /Contents 147 0 R /Group 125 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 124 0 R /Type /Page >>
endobj
15 0 obj
<< /Contents 148 0 R /Group 152 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 150 0 R /Type /Page >>
endobj
16 0 obj
<< /Contents 185 0 R /Group 174 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 173 0 R /Type /Page >>
endobj
17 0 obj
<< /Contents 186 0 R /Group 189 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 188 0 R /Type /Page >>
endobj
18 0 obj
<< /Contents 214 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 210 0 R /Type /Page >>
endobj
19 0 obj
<< /Contents 215 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 211 0 R /Type /Page >>
endobj
20 0 obj
<< /Contents 216 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 212 0 R /Type /Page >>
endobj
21 0 obj
<< /Contents 217 0 R /MediaBox [ 0 0 612 792 ] /Parent 4 0 R /Resources 213 0 R /Type /Page >>
endobj
22 0 obj
<< /Length 6825 >>
stream
q
q
q
0 g 0 G
0 g 0 G
0 g 0 G
0 g 0 G
BT
/F31 14.3462 Tf 146.822 666.202 Td [(Ph)31(ysical)-367(P)31(assiv)30(e)-366(P)30(atc)31(h)-367(A)31(dv)30(ersarial)-366(A)30(ttac)31(ks)-367(on)]TJ 70.98 -17.933 Td [(Visual)-366(Odometry)-367(Systems)]TJ/F29 9.9626 Tf -83.037 -34.632 Td [(Y)83(aniv)-305(Ne)-1(mco)28(vsky)]TJ/F25 6.9738 Tf 77.25 3.615 Td [(y)]TJ/F19 6.9738 Tf 4.151 0 Td [(1)]TJ/F29 9.9626 Tf 4.47 -3.615 Td [(,)-306(Matan)-306(Jacob)28(y)]TJ/F25 6.9738 Tf 70.423 3.615 Td [(y)]TJ/F19 6.9738 Tf 4.151 0 Td [(1)]TJ/F29 9.9626 Tf 4.47 -3.615 Td [(,)-306(Alex)-306(M.)-306(Br)1(ons)-1(tein)]TJ/F19 6.9738 Tf 85.723 3.615 Td [(1)]TJ/F29 9.9626 Tf 4.47 -3.615 Td [(,)-306(and)-306(Chaim)-306(Baskin)]TJ/F19 6.9738 Tf 86.249 3.615 Td [(1)]TJ/F42 5.9776 Tf -290.166 -20.687 Td [(1)]TJ/F40 8.9664 Tf 7.222 -3.809 Td [(Departmen)29(t)-343(of)-342(Computer)-343(Science)-342<15>-343(T)86(ec)28(hnion,)-342(Haifa,)-343(Israel)]TJ/F46 5.9776 Tf 74.135 -7.15 Td [(y)]TJ/F40 8.9664 Tf 7.001 -3.809 Td [(equal)-342(con)28(tribution)]TJ
0 g 0 G
/F53 8.9664 Tf -111.203 -39.501 Td [(Abstract.)]TJ
0 g 0 G
/F40 8.9664 Tf 48.506 0 Td [(Deep)-329(neural)-329(net)29(w)28(orks)-329(are)-328(kno)28(wn)-329(to)-329(b)-28(e)-329(susceptible)-329(to)-329(adv)29(er-)]TJ -48.506 -10.959 Td [(sarial)-415(p)-29(erturbations)-415<15>-415(small)-415(p)-28(erturbations)-416(t)1(h)-1(at)-415(alte)1(r)-416(the)-415(output)-415(of)-415(the)]TJ 0 -10.958 Td [(net)29(w)28(ork)-410(and)-411(exist)-410(under)-411(strict)-410(norm)-411(limitations.)-410(While)-411(suc)29(h)-411(p)-28(erturba-)]TJ 0 -10.959 Td [(tions)-472(are)-472(usually)-472(discussed)-472(as)-472(tailored)-471(to)-472(a)-472(sp)-29(eci\034c)-472(input,)-472(a)-472(univ)29(ersal)]TJ 0 -10.959 Td [(p)-29(erturbation)-353(can)-354(b)-29(e)-354(constructed)-353(to)-354(alter)-354(the)-354(mo)-28(del's)-354(output)-354(on)-354(a)-354(set)-353(of)]TJ 0 -10.959 Td [(inputs.)-438(Univ)29(ersal)-437(p)-29(erturbations)-437(presen)28(t)-437(a)-437(more)-438(realistic)-437(case)-437(of)-438(a)1(d)-1(v)29(er-)]TJ 0 -10.959 Td [(sarial)-405(attac)29(ks,)-405(as)-404(a)28(w)29(areness)-405(of)-404(the)-405(mo)-29(del's)-404(exact)-405(input)-405(is)-404(not)-405(required.)]TJ 0 -10.959 Td [(In)-455(addition,)-455(the)-455(univ)28(ersal)-455(attac)29(k)-455(setting)-455(raises)-455(the)-455(sub)-58(j)1(ect)-455(of)-455(general-)]TJ 0 -10.959 Td [(ization)-425(to)-425(unseen)-424(d)-1(at)1(a,)-425(where)-425(giv)28(en)-424(a)-425(set)-425(of)-425(inputs,)-425(the)-425(univ)29(ersal)-425(p)-28(er-)]TJ 0 -10.959 Td [(turbations)-474(aim)-473(to)-474(alter)-474(the)-473(mo)-29(del's)-474(output)-473(on)-474(out-of-sample)-474(data.)-473(In)]TJ 0 -10.959 Td [(this)-348(w)29(ork,)-348(w)28(e)-348(study)-348(ph)29(ysical)-348(passiv)28(e)-347(patc)28(h)-348(adv)29(ersarial)-348(attac)29(ks)-348(on)-348(visual)]TJ 0 -10.959 Td [(o)-29(dom)1(etry-b)-1(a)1(sed)-269(autonomous)-269(na)28(vigation)-269(systems.)-269(A)-269(visual)-269(o)-28(dometry)-269(sys-)]TJ 0 -10.958 Td [(tem)-399(aims)-399(to)-399(infer)-399(the)-399(relativ)28(e)-399(camera)-399(motion)-399(b)-29(et)29(w)29(een)-400(t)29(w)29(o)-400(c)1(orresp)-29(ond-)]TJ 0 -10.959 Td [(ing)-338(viewp)-28(oin)28(ts,)-337(and)-338(is)-337(frequen)28(tly)-337(used)-338(b)29(y)-338(vision-based)-337(autonomous)-338(na)29(v-)]TJ 0 -10.959 Td [(igation)-400(systems)-400(to)-401(estimate)-400(their)-400(state.)-400(F)85(or)-400(suc)29(h)-401(na)29(vigation)-400(systems,)-401(a)]TJ 0 -10.959 Td [(patc)29(h)-459(adv)29(ersarial)-459(p)-28(erturbation)-459(p)-28(oses)-458(a)-459(sev)29(ere)-458(securit)28(y)-458(issue,)-459(as)-458(it)-458(can)]TJ 0 -10.959 Td [(b)-29(e)-497(used)-497(to)-497(mislead)-497(a)-497(system)-497(on)29(to)-497(some)-497(collision)-497(course.)-498(T)86(o)-497(the)-497(b)-29(est)]TJ 0 -10.959 Td [(of)-443(our)-443(kno)29(wledge,)-443(w)29(e)-443(sho)28(w)-443(for)-442(the)-443<1c727374>-443(time)-443(that)-443(the)-443(error)-443(margin)-442(of)]TJ 0 -10.959 Td [(a)-520(visual)-520(o)-28(dometry)-520(mo)-29(del)-520(c)1(an)-520(b)-29(e)-520(signi\034can)29(tly)-520(increased)-520(b)28(y)-520(deplo)29(ying)]TJ 0 -10.959 Td [(patc)29(h)-450(adv)28(ersarial)-450(attac)29(ks)-450(in)-450(the)-450(scene.)-450(W)86(e)-450(pro)28(vide)-450(ev)57(aluation)-450(on)-450(syn-)]TJ 0 -10.959 Td [(thetic)-419(closed-lo)-29(op)-419(drone)-419(na)29(vigation)-419(data)-419(and)-419(d)-1(e)1(monstrate)-419(that)-420(a)-419(co)1(m-)]TJ 0 -10.959 Td [(parable)-527(v)-1(ulnerabilit)29(y)-528(exists)-527(in)-528(real)-527(data.)-528(A)-527(reference)-527(implemen)28(tation)]TJ 0 -10.959 Td [(of)-478(the)-479(prop)-28(osed)-479(metho)-28(d)-479(and)-478(the)-479(rep)-28(orted)-479(exp)-28(erimen)28(ts)-478(is)-479(pro)29(vided)-479(at)]TJ 0 -10.958 Td [(h)28(tt)1(p)-1(s://)1(gith)28(ub.com/patc)29(hadv)28(ersarialattac)29(ks/patc)28(hadv)29(ersarialattac)29(ks)]TJ/F53 8.9664 Tf 0 -21.8 Td [(Keyw)33(ords:)]TJ/F40 8.9664 Tf 53.441 0 Td [(Real-w)29(orld)-503(adv)28(ersarial)-503(attac)29(ks)]TJ/F54 8.9664 Tf 129.248 0 Td []TJ/F40 8.9664 Tf 7.069 0 Td [(A)29(dv)28(ersarial)-503(robustness)]TJ/F54 8.9664 Tf 96.817 0 Td []TJ/F40 8.9664 Tf -286.575 -10.959 Td [(Na)29(vigation)]TJ/F54 8.9664 Tf 46.832 0 Td []TJ/F40 8.9664 Tf 5.631 0 Td [(Rob)-29(o)1(t)-343(vision.)]TJ/F56 11.9552 Tf -80.809 -33.238 Td [(1)-1125(In)32(tro)-32(duction)]TJ/F57 9.9626 Tf 0 -23.436 Td [(A)51(dversarial)-312(attacks.)]TJ/F29 9.9626 Tf 90.147 0 Td [(Deep)-284(neural)-285(net)28(w)28(orks)-284(\(DNNs)-1(\))-284(w)28(ere)-284(the)-285<1c727374>-284(family)-284(of)-284(mo)-28(d-)]TJ -90.147 -11.955 Td [(els)-406(disco)28(v)28(ered)-406(to)-405(b)-28(e)-406(susceptible)-406(to)-405(adv)28(e)-1(r)1(s)-1(ar)1(ial)-406(p)-28(erturbations)-406<15>-405(small)-406(b)-28(ounded-)]TJ 0 -11.956 Td [(norm)-313(p)-28(erturbations)-312(of)-313(the)-313(input)-313(that)-313(signi\034can)28(tly)-313(alter)-312(the)-313(output)-313(of)-313(the)-313(mo)-27(del)]TJ 0 -11.955 Td [([30,)-167(15])-372(\(metho)-27(ds)-372(for)-372(pro)-28(ducing)-372(suc)27(h)-372(p)-27(erturbations)-372(are)-372(referred)-372(to)-372(as)-372(adv)27(ersar-)]TJ 0 -11.955 Td [(ial)-424(attac)28(ks\).)-424(Suc)27(h)-424(p)-27(erturbations)-424(are)-424(usu)-1(a)1(l)-1(ly)-423(d)-1(iscussed)-424(as)-424(tailored)-424(to)-424(a)-424(sp)-28(eci\034c)]TJ 0 -11.955 Td [(mo)-28(del)-339(and)-339(input,)-339(and)-339(in)-339(suc)28(h)-339(settings)-339(w)28(ere)-339(sho)28(w)-1(n)-338(to)-339(undermine)-339(the)-339(impres)-1(siv)28(e)]TJ 0 -11.955 Td [(p)-28(erformance)-359(of)-359(DNNs)-359(across)-359(m)28(ultiple)-359(\034elds,)-359(e.g.,)-359(ob)-56(ject)-359(detection)-359([32],)-359(real-life)]TJ
0 g 0 G
0 g 0 G
ET
Q
Q
q
1 0 0 1 0 0 cm
/wl5OjWIHEccnDsSnxp3Dqg Do
Q
Q
q
1 0 0 1 0 0 cm
/lG-prrORGDTcaTpZQI8zMA Do
Q
endstream
endobj
23 0 obj
<< /Type /ObjStm /Length 4675 /Filter /FlateDecode /N 51 /First 416 >>
stream
xiS9
}ܭ-ԺBH8rM4m&}Vw`V[~Ore?#*/L
cM$Q%F hcD9-tU^'
:(q) 4V
`儭05{>a넏{l-N',`QDT* EWXpXts",*D|$*%<X\Nl(DE[(X8wP 煮,#TcHٚ50336~ror=T e82(P0Mi ls""s#rt2<( yZB~8g=䭎oLGwOӛOo?;y;/
7ff?jBiǃ>=<t6z9"vp:OȴȫA4'_?oj.@~:9
'_kΫ}_Px?ٰFR"n^ԣKa"߲v;u-oƷ39ֵ?BFq-3ay'O&? [VH*oېj^jhs}}{^_!+p%?SX`8" mAXN|vyJ;T>zy|zrEfէrPYWZKfV⢞z\_Awy5r_ݎ磛O9|3k'/]@٦Ҽ[6d {&m\vѭ,o6q1졃7:o)n낊НLbwP+3 Wy롞!0Eaq^;ѴA6BF>FI!n!`Ϡ&$`i*HtI9X>&G onP3L|`3Z'nw,0\X_- s_ٚ2&;IweA\{(YU6gGo{w|iv
bt}
Br1=
Tݭz
dK
;:?n믃%|^'Xy~#cPK~)4)NNB'WW!/\P &_i54Ym@&ؘB)7g q4y=xrMW#.&lGX@U@!Ԛ/Lb!|
j!
h<L
y&;@#4!?-t0өY|'H
Ɠ y'# Bq0Vȿ0%4r8Α@|4s6Fs 1
P*
Ў|"]L<|#hk6iy&:T&muvkPwZBUt Q,RsR ?7 2r.בЕ~U!fڠa>dH._ SCv
C.
^!th
4*G,L\f]^|0$5- >Õ8%fĒEhImܗH
;(Xv*{Vq}zz"]T*֍q-{U1c}0o[&O !`LJ[mƛƆsN-yc#xxWy|[xwKWo«u:0NU+{
zkPeRG$y%]@f'Gȃ7z.[fg-d
Ƶf{y*%P BEA%b{j
HYBP,iJǕk2VyXK:GβfR\i45hgs9a-=+{s4LY&]rϻ]CoZg# #\r͒t
ZCƈ)qh\'rn K