An enhanced backdoor attack using a backdoor trigger position searching algorithm for avoiding deep learning-based object detection systems

Abstract Deep learning (DL)-based object detection is a core technology that is widely applied in various industrial fields, including surveillance, autonomous driving, and others. However, it is well-known that DL-based systems are vulnerable to adversarial attacks. In particular, backdoor attacks are insidious methods that can covertly manipulate the normal operation of DL systems according to the attacker’s intentions. These attacks are conducted by stealthily inserting backdoor triggers into a subset of training data, thereby embedding a backdoor into the DL model trained on the poisoned dataset. As a result, the backdoored DL model behaves normally for clean inputs but misclassifies malicious inputs containing the trigger into a specific target class. According to our extensive survey on backdoor attacks, there has been limited research on backdoor attacks targeting DL-based object detection models, and no prior studies have explored the impact of the backdoor trigger’s position. Notably, existing methods overlook the significance of trigger placement, typically inserting triggers at arbitrarily fixed positions within the image. Motivated by this gap, our stu