Recent works have proposed to craft adversarial clothes for evading person detectors, while they are either only effective at limited viewing angles or very conspicuous to humans. We aim to craft adversarial texture for clothes based on 3D modeling, an idea that has been used to craft rigid adversarial objects such as a 3D-printed turtle. Unlike rigid objects, humans and clothes are non-rigid, leading to difficulties in physical realization. In order to craft natural-looking adversarial clothes that can evade person detectors at multiple viewing angles, we propose adversarial camouflage textures (AdvCaT) that resemble one kind of the typical textures of daily clothes, camouflage textures. We leverage the Voronoi diagram and Gumbel-softmax trick to parameterize the camouflage textures and optimize the parameters via 3D modeling. Moreover, we propose an efficient augmentation pipeline on 3D meshes combining topologically plausible projection (TopoProj) and Thin Plate Spline (TPS) to narrow the gap between digital and real-world objects. We printed the developed 3D texture pieces on fabric materials and tailored them into T-shirts and trousers. Experiments show high attack success rates of these clothes against multiple detectors.
翻译:近期研究提出了制作对抗性服装以规避人员检测器的方法,但这些方法要么仅在有限视角下有效,要么在人类观察者眼中过于显眼。本研究旨在基于三维建模技术制作服装的对抗性纹理——该技术曾用于制作刚性对抗物体(如3D打印海龟)。与刚性物体不同,人体与服装具有非刚性特征,这给物理实现带来挑战。为制作能在多视角下规避人员检测器且外观自然的对抗性服装,我们提出了一种模拟日常服装典型纹理(迷彩纹理)的对抗性伪装纹理(AdvCaT)。我们利用Voronoi图与Gumbel-softmax技巧对迷彩纹理进行参数化,并通过三维建模优化参数。此外,我们提出了一种结合拓扑合理投影(TopoProj)与薄板样条(TPS)的三维网格高效增强流程,以缩小数字物体与现实物体之间的差距。我们将开发的三维纹理图案印制于织物材料上,并裁剪制成T恤与长裤。实验表明,此类服装对多种检测器均具有较高的攻击成功率。