In critical operations where aerial imagery plays an essential role, the integrity and trustworthiness of data are paramount. The emergence of adversarial attacks, particularly those that exploit control over labels or employ physically feasible trojans, threatens to erode that trust, making the analysis and mitigation of these attacks a matter of urgency. We demonstrate how adversarial attacks can degrade confidence in geospatial systems, specifically focusing on scenarios where the attacker's control over labels is restricted and the use of realistic threat vectors. Proposing and evaluating several innovative attack methodologies, including those tailored to overhead images, we empirically show their threat to remote sensing systems using high-quality SpaceNet datasets. Our experimentation reflects the unique challenges posed by aerial imagery, and these preliminary results not only reveal the potential risks but also highlight the non-trivial nature of the problem compared to recent works.
翻译:在航拍影像发挥关键作用的关键操作中,数据的完整性和可信度至关重要。对抗性攻击的出现,尤其是那些利用标签控制或采用物理可行木马的攻击,正威胁着侵蚀这种信任,使得分析和缓解这些攻击成为当务之急。我们展示了对抗性攻击如何削弱对地理空间系统的信心,特别关注攻击者标签控制受限以及使用现实威胁向量的场景。我们提出并评估了几种创新性攻击方法,包括专门针对俯拍图像设计的攻击,并利用高质量的SpaceNet数据集实证展示了它们对遥感系统的威胁。我们的实验反映了航拍影像带来的独特挑战,这些初步结果不仅揭示了潜在风险,还突显了与近期工作相比该问题的非平凡性。