Transformer-Encoder Detector Module: Using Context to Improve Robustness to Adversarial Attacks on Object Detection

Alamri F., KALKAN S., Pugeault N.

25th International Conference on Pattern Recognition (ICPR), ELECTR NETWORK, 10 - 15 January 2021, pp.9577-9584 identifier identifier

  • Publication Type: Conference Paper / Full Text
  • Doi Number: 10.1109/icpr48806.2021.9413344
  • Country: ELECTR NETWORK
  • Page Numbers: pp.9577-9584
  • Middle East Technical University Affiliated: Yes

Abstract

Deep neural network approaches have demonstrated high performance in object recognition (CNN) and detection (Faster-RCNN) tasks, but experiments have shown that such architectures are vulnerable to adversarial attacks (FFF, UAP): low amplitude perturbations, barely perceptible by the human eye, can lead to a drastic reduction in labelling performance. This article proposes a new context module, called Transformer-Encoder Detector Module, that can be applied to an object detector to (i) improve the labelling of object instances; and (ii) improve the detector's robustness to adversarial attacks. The proposed model achieves higher mAP, F1 scores and AUC average score of up to 13% compared to the baseline Faster-RCNN detector, and an mAP score 8 points higher on images subjected to FFF or UAP attacks due to the inclusion of both contextual and visual features extracted from scene and encoded into the model. The result demonstrates that a simple ad-hoc context module can improve the reliability of object detectors significantly.