TY - GEN
T1 - Robustness Evaluation of Rail Track Detection Models Under Natural and Adversarial Disturbances
AU - Cui, Xiaotong
AU - Zheng, Wei
AU - Xiao, Jinyu
AU - Zhang, Lifeng
AU - Li, Gang
AU - An, Junfeng
N1 - Publisher Copyright:
© 2025 IEEE.
PY - 2025
Y1 - 2025
N2 - The input data used in track detection models are significantly affected by natural environmental factors such as rain, snow and fog, which can compromise detection reliability. Additionally, deep learning-based detection networks are inherently vulnerable to adversarial attacks, which can lead to incorrect predictions and result in issues such as missed detections or false positives. To address these challenges, this paper simulates various natural disturbances through image enhancement techniques and proposes two black-box adversarial attack algorithms - StrRS and DAG-NES - targeted at object detection models. This study examines how the detection model's performance deteriorates when exposed to both natural environmental disturbances and adversarial perturbations. Experimental results demonstrate that, under the joint effect of natural disturbances and StrRS, the model's accuracy drops by an average of 74.34 %, recall by 90.18 %, mAP@50 by 87.20%, and mAP@50-95 by 88.81%. Under the combined influence of natural disturbances and DAG-NES, the average reductions in accuracy, recall, mAP @ 50, and mAP @ 50-95 are 38.72 \%, 61.90 \%, 54.43 \%, and 62.96 %, respectively.
AB - The input data used in track detection models are significantly affected by natural environmental factors such as rain, snow and fog, which can compromise detection reliability. Additionally, deep learning-based detection networks are inherently vulnerable to adversarial attacks, which can lead to incorrect predictions and result in issues such as missed detections or false positives. To address these challenges, this paper simulates various natural disturbances through image enhancement techniques and proposes two black-box adversarial attack algorithms - StrRS and DAG-NES - targeted at object detection models. This study examines how the detection model's performance deteriorates when exposed to both natural environmental disturbances and adversarial perturbations. Experimental results demonstrate that, under the joint effect of natural disturbances and StrRS, the model's accuracy drops by an average of 74.34 %, recall by 90.18 %, mAP@50 by 87.20%, and mAP@50-95 by 88.81%. Under the combined influence of natural disturbances and DAG-NES, the average reductions in accuracy, recall, mAP @ 50, and mAP @ 50-95 are 38.72 \%, 61.90 \%, 54.43 \%, and 62.96 %, respectively.
KW - Natural perturbations
KW - adversarial attacks
KW - object detection
KW - robustness
UR - https://www.scopus.com/pages/publications/105025100899
U2 - 10.1109/ICIRT66379.2025.11216725
DO - 10.1109/ICIRT66379.2025.11216725
M3 - 会议稿件
AN - SCOPUS:105025100899
T3 - 2025 IEEE International Conference on Intelligent Rail Transportation, ICIRT 2025
SP - 13
EP - 18
BT - 2025 IEEE International Conference on Intelligent Rail Transportation, ICIRT 2025
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 2025 IEEE International Conference on Intelligent Rail Transportation, ICIRT 2025
Y2 - 11 October 2025 through 12 October 2025
ER -