{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,8,10]],"date-time":"2024-08-10T00:13:57Z","timestamp":1723248837646},"reference-count":34,"publisher":"MDPI AG","issue":"22","license":[{"start":{"date-parts":[[2022,11,17]],"date-time":"2022-11-17T00:00:00Z","timestamp":1668643200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Ministry of Education, Republic of Singapore","award":["RG61\/22"]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Remote Sensing"],"abstract":"Researchers are focusing on the vulnerabilities of deep learning models for remote sensing; various attack methods have been proposed, including universal adversarial examples. Existing universal adversarial examples, however, are only designed to fool deep learning models rather than target specific goals, i.e., targeted attacks. To this end, we propose two variants of universal adversarial examples called targeted universal adversarial examples and source-targeted universal adversarial examples. Extensive experiments on three popular datasets showed strong attackability of the two targeted adversarial variants. We hope such strong attacks can inspire and motivate research on the defenses against adversarial examples in remote sensing.<\/jats:p>","DOI":"10.3390\/rs14225833","type":"journal-article","created":{"date-parts":[[2022,11,18]],"date-time":"2022-11-18T09:08:40Z","timestamp":1668762520000},"page":"5833","source":"Crossref","is-referenced-by-count":13,"title":["Targeted Universal Adversarial Examples for Remote Sensing"],"prefix":"10.3390","volume":"14","author":[{"ORCID":"http:\/\/orcid.org\/0000-0002-2034-8026","authenticated-orcid":false,"given":"Tao","family":"Bai","sequence":"first","affiliation":[{"name":"School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore 639798, Singapore"}]},{"given":"Hao","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Physics, Peking University, Haidian District, Beijing 100084, China"}]},{"ORCID":"http:\/\/orcid.org\/0000-0002-6874-6453","authenticated-orcid":false,"given":"Bihan","family":"Wen","sequence":"additional","affiliation":[{"name":"School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore 639798, Singapore"}]}],"member":"1968","published-online":{"date-parts":[[2022,11,17]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"26","DOI":"10.1109\/MGRS.2021.3070248","article-title":"The Earth-Observing Satellite Constellation: A review from a meteorological perspective of a complex, interconnected global system with extensive applications","volume":"9","author":"Boukabara","year":"2021","journal-title":"IEEE Geosci. Remote Sens. Mag."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"1709","DOI":"10.1109\/JSTARS.2019.2911113","article-title":"Advanced multi-sensor optical remote sensing for urban land use and land cover classification: Outcome of the 2018 IEEE GRSS data fusion contest","volume":"12","author":"Xu","year":"2019","journal-title":"IEEE J. Sel. Top. Appl. Earth Obs. Remote Sens."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"6","DOI":"10.1109\/MGRS.2018.2890023","article-title":"Multisource and multitemporal data fusion in remote sensing: A comprehensive review of the state of the art","volume":"7","author":"Ghamisi","year":"2019","journal-title":"IEEE Geosci. Remote Sens. Mag."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"1865","DOI":"10.1109\/JPROC.2017.2675998","article-title":"Remote sensing image scene classification: Benchmark and state of the art","volume":"105","author":"Cheng","year":"2017","journal-title":"Proc. IEEE"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"91","DOI":"10.1109\/MGRS.2021.3115137","article-title":"Deep learning for unmanned aerial vehicle-based object detection and tracking: A survey","volume":"10","author":"Wu","year":"2021","journal-title":"IEEE Geosci. Remote Sens. Mag."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"127","DOI":"10.1080\/22797254.2020.1759456","article-title":"Transferable instance segmentation of dwellings in a refugee camp-integrating CNN and OBIA","volume":"54","author":"Ghorbanzadeh","year":"2021","journal-title":"Eur. J. Remote Sens."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"22","DOI":"10.1109\/MGRS.2016.2540798","article-title":"Deep learning for remote sensing data: A technical tutorial on the state of the art","volume":"4","author":"Zhang","year":"2016","journal-title":"IEEE Geosci. Remote Sens. Mag."},{"key":"ref_8","unstructured":"Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I.J., and Fergus, R. (2014, January 14\u201316). Intriguing properties of neural networks. Conference Track Proceedings. Proceedings of the 2nd International Conference on Learning Representations, ICLR 2014, Banff, AB, Canada."},{"key":"ref_9","unstructured":"Goodfellow, I.J., Shlens, J., and Szegedy, C. (2015, January 7\u20139). Explaining and Harnessing Adversarial Examples. Proceedings of the ICLR, San Diego, CA, USA."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Carlini, N., and Wagner, D. (2017, January 22\u201326). Towards Evaluating the Robustness of Neural Networks. Proceedings of the 2017 IEEE Symposium on Security and Privacy (SP), San Jose, CA, USA.","DOI":"10.1109\/SP.2017.49"},{"key":"ref_11","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., and Vladu, A. (May, January 30). Towards Deep Learning Models Resistant to Adversarial Attacks. Conference Track Proceedings. Proceedings of the 6th International Conference on Learning Representations, ICLR 2018, Vancouver, BC, Canada."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Xiao, C., Li, B., Zhu, J., He, W., Liu, M., and Song, D. (2018, January 13\u201319). Generating Adversarial Examples with Adversarial Networks. Proceedings of the Twenty-Seventh International Joint Conference on Artificial Intelligence, IJCAI 2018, Stockholm, Sweden.","DOI":"10.24963\/ijcai.2018\/543"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Bai, T., Zhao, J., Zhu, J., Han, S., Chen, J., Li, B., and Kot, A. (2021, January 19\u201322). AI-GAN: Attack-Inspired Generation of Adversarial Examples. Proceedings of the 2021 IEEE International Conference on Image Processing (ICIP), Anchorage, AL, USA.","DOI":"10.1109\/ICIP42928.2021.9506278"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Akhtar, N., and Mian, A. (2018). Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey. arXiv.","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref_15","unstructured":"Kurakin, A., Goodfellow, I.J., and Bengio, S. (2017, January 24\u201326). Adversarial Machine Learning at Scale. Conference Track Proceedings. Proceedings of the 5th International Conference on Learning Representations, ICLR 2017, Toulon, France."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Czaja, W., Fendley, N., Pekala, M., Ratto, C., and Wang, I.J. (2018, January 6\u20139). Adversarial examples in remote sensing. Proceedings of the 26th ACM SIGSPATIAL International Conference on Advances in Geographic Information Systems, Washington, DC, USA.","DOI":"10.1145\/3274895.3274904"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"1604","DOI":"10.1109\/TGRS.2020.2999962","article-title":"Assessing the threat of adversarial examples on deep neural networks for remote sensing scene classification: Attacks and defenses","volume":"59","author":"Xu","year":"2020","journal-title":"IEEE Trans. Geosci. Remote Sens."},{"key":"ref_18","unstructured":"Chen, L., Zhu, G., Li, Q., and Li, H. (2019). Adversarial example in remote sensing image recognition. arXiv."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Chan-Hon-Tong, A., Lenczner, G., and Plyer, A. (2021, January 11\u201316). Demotivate adversarial defense in remote sensing. Proceedings of the 2021 IEEE International Geoscience and Remote Sensing Symposium IGARSS, Brussels, Belgium.","DOI":"10.1109\/IGARSS47720.2021.9554767"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"8671","DOI":"10.1109\/TIP.2021.3118977","article-title":"Self-attention context network: Addressing the threat of adversarial attacks for hyperspectral image classification","volume":"30","author":"Xu","year":"2021","journal-title":"IEEE Trans. Image Process."},{"key":"ref_21","first-page":"1","article-title":"Universal Adversarial Examples in Remote Sensing: Methodology and Benchmark","volume":"60","author":"Xu","year":"2022","journal-title":"IEEE Trans. Geosci. Remote Sens."},{"key":"ref_22","unstructured":"Benz, P., Zhang, C., Imtiaz, T., and Kweon, I.S. (December, January 30). Double targeted universal adversarial perturbations. Proceedings of the Asian Conference on Computer Vision, Kyoto, Japan."},{"key":"ref_23","unstructured":"Carlini, N., Athalye, A., Papernot, N., Brendel, W., Rauber, J., Tsipras, D., Goodfellow, I., Madry, A., and Kurakin, A. (2019). On Evaluating Adversarial Robustness. arXiv."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.M., Fawzi, A., Fawzi, O., and Frossard, P. (2017, January 21\u201326). Universal adversarial perturbations. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Honolulu, HI, USA.","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Zhang, H., Cisse, M., Dauphin, Y.N., and Lopez-Paz, D. (2017). mixup: Beyond empirical risk minimization. arXiv.","DOI":"10.1007\/978-1-4899-7687-1_79"},{"key":"ref_26","unstructured":"Yun, S., Han, D., Oh, S.J., Chun, S., Choe, J., and Yoo, Y. (November, January 27). Cutmix: Regularization strategy to train strong classifiers with localizable features. Proceedings of the IEEE\/CVF International Conference on Computer Vision, Seoul, Korea."},{"key":"ref_27","first-page":"1","article-title":"Eurosat: A novel dataset and deep learning benchmark for land use and land cover classification","volume":"14","author":"Helber","year":"2019","journal-title":"IEEE J. Sel. Top. Appl. Earth Obs. Remote Sens."},{"key":"ref_28","unstructured":"Kurakin, A., Goodfellow, I., and Bengio, S. (2016). Adversarial machine learning at scale. arXiv."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"84","DOI":"10.1145\/3065386","article-title":"Imagenet classification with deep convolutional neural networks","volume":"60","author":"Krizhevsky","year":"2017","journal-title":"Commun. ACM"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., and Sun, J. (2016, January 27\u201330). Deep residual learning for image recognition. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Las Vegas, NV, USA.","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Huang, G., Liu, Z., Van Der Maaten, L., and Weinberger, K.Q. (2017, January 21\u201326). Densely connected convolutional networks. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Honolulu, HI, USA.","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Radosavovic, I., Kosaraju, R.P., Girshick, R., He, K., and Doll\u00e1r, P. (2020, January 14\u201319). Designing network design spaces. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Seattle, WA, USA.","DOI":"10.1109\/CVPR42600.2020.01044"},{"key":"ref_33","unstructured":"Kim, H. (2020). Torchattacks: A pytorch repository for adversarial attacks. arXiv."},{"key":"ref_34","unstructured":"Wallach, H., Larochelle, H., Beygelzimer, A., d\u2019Alch\u00e9-Buc, F., Fox, E., and Garnett, R. (2019). PyTorch: An Imperative Style, High-Performance Deep Learning Library. Advances in Neural Information Processing Systems 32, Curran Associates Inc."}],"container-title":["Remote Sensing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2072-4292\/14\/22\/5833\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,9]],"date-time":"2024-08-09T19:50:26Z","timestamp":1723233026000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2072-4292\/14\/22\/5833"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,17]]},"references-count":34,"journal-issue":{"issue":"22","published-online":{"date-parts":[[2022,11]]}},"alternative-id":["rs14225833"],"URL":"http:\/\/dx.doi.org\/10.3390\/rs14225833","relation":{},"ISSN":["2072-4292"],"issn-type":[{"type":"electronic","value":"2072-4292"}],"subject":[],"published":{"date-parts":[[2022,11,17]]}}}
