Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Adversarial Examples that Fool Detectors   An adversarial example is an example that has been adjusted to produce a
wrong label when presented to a system at test time. To date, adversarial
example constructions have been demonstrated for classifiers, but not for
detectors. If adversarial examples that could fool a detector exist, they could
be used to (for example) maliciously create security hazards on roads populated
with smart vehicles. In this paper, we demonstrate a construction that
successfully fools two standard detectors, Faster RCNN and YOLO. The existence
of such examples is surprising, as attacking a classifier is very different
from attacking a detector, and that the structure of detectors - which must
search for their own bounding box, and which cannot estimate that box very
accurately - makes it quite likely that adversarial patterns are strongly
disrupted. We show that our construction produces adversarial examples that
generalize well across sequences digitally, even though large perturbations are
needed. We also show that our construction yields physical objects that are
adversarial.

33
The categories of this paper are: plasm-ph
3
The categories of this paper are: physics
11
The categories of this paper are: hep-lat
32
The categories of this paper are: atom-ph
22
The categories of this paper are: chao-dyn
26
The categories of this paper are: bayes-an
9
The categories of this paper are: nlin
31
The categories of this paper are: ao-sci
35
The categories of this paper are: mtrl-th
30
The categories of this paper are: q-alg
2
The categories of this paper are: math
14
The categories of this paper are: math-ph
28
The categories of this paper are: alg-geom
0
The categories of this paper are: hep-ph
24
The categories of this paper are: dg-ga
19
The categories of this paper are: eess