Deep neural networks (DNNs) for remote sensing image classification and detection often lack adversarial robustness. This paper proposes a frequency-domain projected gradient descent (PGD) attack leveraging the gradient. The image is transformed from the spatial domain to the frequency domain via Fourier transform, and the gradient spectral energy is used to identify key high-frequency regions for generating perturbations, and the perturbations are added to the original image to generate adversarial samples. Using the SSDD dataset and YOLO11 model, we compare adversarial samples from frequency-domain and traditional spatial-domain PGD attacks. Results show that the frequency-domain attack more effectively degrades detection metrics, such as precision and mAP, while producing adversarial samples with higher visual similarity to the originals, demonstrating enhanced attack strength and stealth.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Frequency-Domain PGD Attack on Remote Sensing Images Based on the Energy Spectrum of the Gradient’s Frequency Spectrum

  • Jie Sun,
  • Min Zhong,
  • Zeyang Liu,
  • Han Yuan,
  • Rongying Yuan,
  • Xinyao Wang,
  • Yapin Wang

摘要

Deep neural networks (DNNs) for remote sensing image classification and detection often lack adversarial robustness. This paper proposes a frequency-domain projected gradient descent (PGD) attack leveraging the gradient. The image is transformed from the spatial domain to the frequency domain via Fourier transform, and the gradient spectral energy is used to identify key high-frequency regions for generating perturbations, and the perturbations are added to the original image to generate adversarial samples. Using the SSDD dataset and YOLO11 model, we compare adversarial samples from frequency-domain and traditional spatial-domain PGD attacks. Results show that the frequency-domain attack more effectively degrades detection metrics, such as precision and mAP, while producing adversarial samples with higher visual similarity to the originals, demonstrating enhanced attack strength and stealth.