← Search

Yufei Song

5 accepted papers

2026

Erosion Attack for Adversarial Training to Enhance Semantic Segmentation Robustness

ICASSP 2026poster

Existing segmentation models exhibit significant vulnerability to adversarial attacks.To improve robustness, adversarial training incorporates adversarial examples into model training. However, existing attack methods consider only global semantic information and ignore contextual semantic relations…

Cited by 0SourcePDFScholar
2025

NumbOD: A Spatial-Frequency Fusion Attack Against Object Detectors

AAAI 2025technical

With the advancement of deep learning, object detectors (ODs) with various architectures have achieved significant success in complex scenarios like autonomous driving. Previous adversarial attacks against ODs have been focused on designing customized attacks targeting their specific structures (eg,…

2025

PB-UAP: Hybride Universal Adversarial Attack for Image Segmentation

ICASSP 2025accepted

With the rapid advancement of deep learning, the model robustness has become a significant research hotspot, i.e., adversarial attacks on deep neural networks. Existing works primarily focus on image classification tasks, aiming to alter the model’s predicted labels. Due to the output complexity and…

Cited by 0SourceScholar
2025

Vanish into Thin Air: Cross-prompt Universal Adversarial Attacks for SAM2

NeurIPS 2025spotlight

Recent studies reveal the vulnerability of the image segmentation foundation model SAM to adversarial examples. Its successor, SAM2, has attracted significant attention due to its strong generalization capability in video segmentation. However, its robustness remains unexplored, and it is unclear wh…

Cited by 0SourceScholar
2024

DarkSAM: Fooling Segment Anything Model to Segment Nothing

NeurIPS 2024poster

Segment Anything Model (SAM) has recently gained much attention for its outstanding generalization to unseen data and tasks. Despite its promising prospect, the vulnerabilities of SAM, especially to universal adversarial perturbation (UAP) have not been thoroughly investigated yet. In this paper, we…