Li, ChenGuo, Weisi2023-09-182023-09-182023-09-01Li C, Guo W. (2023) Soft body pose-invariant evasion attacks against deep learning human detection. In: 2023 IEEE 9th International Conference on Big Data Computing Service and Applications (BigDataService), 17-20 July 2023, Athens, Greece. pp. 155-156979-8-3503-3534-7https://doi.org/10.1109/BigDataService58306.2023.00032https://dspace.lib.cranfield.ac.uk/handle/1826/20229Evasion attacks on deep neural networks (DNN) use manipulated data to let targets evade detection and/or classification across a wide range of DNNs. Most existing evasion attacks focus on planar images (e.g., photo, satellite imaging) and ignore the distortion of evasion in practical attacks (e.g., object rotation, deformation). Here, we build evasion patterns for soft-body human stakeholders, where patterns are designed to take into account body rotation, fabric stretch, printability, and lighting variations. We show that these are effective and robust to different human poses. This poses a significant threat to safety of autonomous vehicles and adversarial training should consider this new area.enAttribution 4.0 InternationalDeep LearningHuman DetectionEvasion AttackSafetySecurityConference paper