Appendix for VisionGuard can be found in link.
State-of-the-art Physical Adversarial Attacks Evaluated in Outdoor Environments in Respective Papers.
All the videos can be found in link
Attack: SLAP
UGV: (1) Intel RealSense D435i camera (1920 * 1080) , 30 FPS
(2) Bosch BMI055 6-axis IMU
Adversarial Examples: SLAP and ShapeShifter
Indoor Evaluation
Outdoor Evaluation
Simulation World Evaluation
Traffic sign can be detected all the way.
Aversarial attack is Discontinuous
Traffic sign can be detected all the way.
Aversarial attack is Discontinuous
Traffic sign can be detected all the way.
Aversarial attack is Discontinuous
VisionGuard falsly triggers the Attack (False Positive)
Aversarial attack is Discontinuous
Pedestrian Interaction Scenario Evaluation
Detection rates (DR, %) in pedestrian interaction scenarios.
Bright, 1 pedestrian
Bright, 2 pedestrians
Dim, 1 pedestrian
Dim, 2 pedestrians