Logo

On the Credibility of Backdoor Attacks Against Object Detectors in the Physical World

MORPHING backdoor attack method and in the wild test dataset

Object Disappearance Attacks

Attack Keep Left sign in the real world

Trigger activates Keep Left signs to be detected as invisible.

Attack Keep Left sign in the real world

Trigger activates Speed limit 80km/h signs to be detected as invisible.

Attack Giveway sign in the real world

Trigger activates Giveway signs to be detected as invisible.

Attack T-Junction sign in the real world

Trigger activates T-Junction signs to be detected as invisible.

Attack STOP sign in the real world

Trigger activates STOP signs to be detected as invisible.

Attack Turning Right sign in the real world

Trigger activates Turning Right signs to be detected as invisible.


If you use this dataset, please cite us as follows


Bao Gia Doan, Dang Quang Nguyen, Callum Lindquist, Paul Montague, Tamas Abraham, Olivier De Vel, Seyit Camtepe, Salil S. Kanhere, Ehsan Abbasnejad, and Damith C. Ranasinghe. "On the Credibility of Backdoor Attacks Against Object Detectors in the Physical World," In Annual Computer Security Applications Conference (ACSAC), 2024.

@inproceedings{doan2024physical,

title={On the Credibility of Backdoor Attacks Against Object Detectors in the Physical World},
author={Bao Gia Doan, Dang Quang Nguyen, Callum Lindquist, Paul Montague, Tamas Abraham, Olivier De Vel, Seyit Camtepe, Salil S. Kanhere, Ehsan Abbasnejad, and Damith C. Ranasinghe},
year = {2024},
booktitle = {Proceedings of the Annual Computer Security Applications Conference {ACSAC}},
location = {Waikiki, Hawaii, USA}
}