Backdoor attacks have been well-studied in visible light object detection (VLOD) in recent years. However, VLOD can not effectively work in dark and temperature-sensitive scenarios. Instead, thermal infrared object detection (TIOD) is the most accessible and practical in such environments. In this paper, our team is the first to investigate the security vulnerabilities associated with TIOD in the context of backdoor attacks, spanning both the digital and physical realms. We introduce two novel types of backdoor attacks on TIOD, each offering unique capabilities: Object-affecting Attack and Range-affecting Attack. We conduct a comprehensive analysis of key factors influencing trigger design, which include temperature, size, material, and concealment. These factors, especially temperature, significantly impact the efficacy of backdoor attacks on TIOD. A thorough understanding of these factors will serve as a foundation for designing physical triggers and temperature controlling experiments. Our study includes extensive experiments conducted in both digital and physical environments. In the digital realm, we evaluate our approach using benchmark datasets for TIOD, achieving an Attack Success Rate (ASR) of up to 98.21%. In the physical realm, we test our approach in two real-world settings: a traffic intersection and a parking lot, using a thermal infrared camera. Here, we attain an ASR of up to 98.38%.
翻译:后门攻击在可见光目标检测(VLOD)领域近年来已得到充分研究。然而,VLOD在黑暗及温度敏感场景中难以有效工作。相反,热红外目标检测(TIOD)在此类环境中是最易实现且实用的方法。本文首次从后门攻击角度探究TIOD的安全漏洞,涵盖数字与物理两个领域。我们针对TIOD提出两种新型后门攻击方法,分别具有独特能力:目标影响攻击与范围影响攻击。我们系统分析了影响触发器设计的关键因素,包括温度、尺寸、材质及隐蔽性。这些因素(尤其是温度)显著影响TIOD后门攻击的效果。深入理解这些因素将为物理触发器设计及温度控制实验奠定基础。我们在数字与物理环境中开展了广泛实验。在数字领域,使用TIOD基准数据集评估方法,攻击成功率(ASR)最高达98.21%。在物理领域,利用热红外摄像机在交通路口与停车场两个真实场景测试,攻击成功率(ASR)最高达98.38%。