[2603.00217] Physical Evaluation of Naturalistic Adversarial Patches for Camera-Based Traffic-Sign Detection

Computer Science > Computer Vision and Pattern Recognition arXiv:2603.00217 (cs) [Submitted on 27 Feb 2026] Title:Physical Evaluation of Naturalistic Adversarial Patches for Camera-Based Traffic-Sign Detection Authors:Brianna D'Urso, Tahmid Hasan Sakib, Syed Rafay Hasan, Terry N. Guo View a PDF of the paper titled Physical Evaluation of Naturalistic Adversarial Patches for Camera-Based Traffic-Sign Detection, by Brianna D'Urso and 3 other authors View PDF HTML (experimental) Abstract:This paper studies how well Naturalistic Adversarial Patches (NAPs) transfer to a physical traffic sign setting when the detector is trained on a customized dataset for an autonomous vehicle (AV) environment. We construct a composite dataset, CompGTSRB (which is customized dataset for AV environment), by pasting traffic sign instances from the German Traffic Sign Recognition Benchmark (GTSRB) onto undistorted backgrounds captured from the target platform. CompGTSRB is used to train a YOLOv5 model and generate patches using a Generative Adversarial Network (GAN) with latent space optimization, following existing NAP methods. We carried out a series of experiments on our Quanser QCar testbed utilizing the front CSI camera provided in QCar. Across configurations, NAPs reduce the detector's STOP class confidence. Different configurations include distance, patch sizes, and patch placement. These results along with a detailed step-by-step methodology indicate the utility of CompGTSRB dataset and the...