Recent works have shown that deep learning (DL) models can effectively learn city-wide crowd-flow patterns, which can be used for more effective urban planning and smart city management. However, DL models have been known to perform poorly on inconspicuous adversarial perturbations. Although many works have studied these adversarial perturbations in general, the adversarial vulnerabilities of deep CFP models in particular have remained largely unexplored. In this paper, we perform a rigorous analysis of the adversarial vulnerabilities of DL-based CFP models under multiple threat settings, making three-fold contributions; 1) we propose CaV-detect by formally identifying two novel properties—Consistency and Validity—of the CFP inputs that enable the detection of standard adversarial inputs with 0% false acceptance rate (FAR); 2) we leverage universal adversarial perturbations and an adaptive adversarial loss to present adaptive adversarial attacks to evade CaV-detect defense; 3) we propose CVP, a Consistent, Valid and Physically-realizable adversarial attack, that explicitly inducts the consistency and validity priors in the perturbation generation mechanism. We find out that although the crowd-flow models are vulnerable to adversarial perturbations, it is extremely challenging to simulate these perturbations in physical settings, notably when CaV-detect is in place. We also show that CVP attack considerably outperforms the adaptively modified standard attacks in FAR and adversarial loss metrics. We conclude with useful insights emerging from our work and highlight promising future research directions.


    Access

    Download


    Export, share and cite



    Title :

    Consistent Valid Physically-Realizable Adversarial Attack Against Crowd-Flow Prediction Models


    Contributors:


    Publication date :

    2024-06-01


    Size :

    18687757 byte




    Type of media :

    Article (Journal)


    Type of material :

    Electronic Resource


    Language :

    English








    Physically-Valid View Synthesis by Image Interpolation

    Seitz, S. / Dyer, C. / IEEE et al. | British Library Conference Proceedings | 1995