FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attack

Case study of the FCA. The code can be find in FCA.

Cases of digital attack

Carmear distance at 3

Carmear distance at 5

Carmear distance at 10

Cases of multi-view robust

Ablation study

Different combination of loss terms

As we can see from the Figure, different loss term plays different role in attacking. For example, the camouflaged car generated by obj+smooth (we omit the smooth loss, and denotes as obj) hardly hidden from the detector, while the camouflaged car generated by iou successfully suppress the detecting bounding box of the car region, and finally the camouflaged car generated by cls successfully make the detector to misclassify the car to anther category.