Currently, infrared imaging technology enjoys widespread usage, with infrared object detection technology experiencing a surge in prominence. While previous studies have delved into physical attacks on infrared object detectors, the implementation of these techniques remains complex. For instance, some approaches entail the use of bulb boards or infrared QR suits as perturbations to execute attacks, which entail costly optimization and cumbersome deployment processes. Other methodologies involve the utilization of irregular aerogel as physical perturbations for infrared attacks, albeit at the expense of optimization expenses and perceptibility issues. In this study, we propose a novel infrared physical attack termed Adversarial Infrared Geometry (\textbf{AdvIG}), which facilitates efficient black-box query attacks by modeling diverse geometric shapes (lines, triangles, ellipses) and optimizing their physical parameters using Particle Swarm Optimization (PSO). Extensive experiments are conducted to evaluate the effectiveness, stealthiness, and robustness of AdvIG. In digital attack experiments, line, triangle, and ellipse patterns achieve attack success rates of 93.1\%, 86.8\%, and 100.0\%, respectively, with average query times of 71.7, 113.1, and 2.57, respectively, thereby confirming the efficiency of AdvIG. Physical attack experiments are conducted to assess the attack success rate of AdvIG at different distances. On average, the line, triangle, and ellipse achieve attack success rates of 61.1\%, 61.2\%, and 96.2\%, respectively. Further experiments are conducted to comprehensively analyze AdvIG, including ablation experiments, transfer attack experiments, and adversarial defense mechanisms. Given the superior performance of our method as a simple and efficient black-box adversarial attack in both digital and physical environments, we advocate for widespread attention to AdvIG.

翻译：当前，红外成像技术得到广泛普及，红外目标检测技术日益凸显其重要性。尽管已有研究深入探讨了针对红外目标检测器的物理攻击，但这些技术的实施仍然较为复杂。例如，部分方法需借助灯泡阵列或红外QR服作为扰动载体实施攻击，导致优化成本高昂且部署流程繁琐。另一些方法采用不规则气凝胶作为红外攻击的物理扰动，虽能降低优化成本，却存在可感知性问题。本研究提出一种新型红外物理攻击方法——对抗性红外几何（AdvIG），通过建模不同几何形状（直线、三角形、椭圆）并利用粒子群优化算法优化其物理参数，实现高效的黑盒查询攻击。通过大量实验评估AdvIG的有效性、隐蔽性和鲁棒性：在数字攻击实验中，直线、三角形和椭圆模式分别达到93.1%、86.8%和100.0%的攻击成功率，平均查询次数分别为71.7次、113.1次和2.57次，验证了AdvIG的高效性。物理攻击实验评估了不同距离下AdvIG的攻击成功率，直线、三角形和椭圆平均达到61.1%、61.2%和96.2%。进一步通过消融实验、迁移攻击实验和对抗防御机制实验对AdvIG进行全面分析。鉴于该方法作为简单高效的黑盒对抗攻击在数字与物理环境中均表现优异，我们呼吁对AdvIG予以广泛关注。