Lu LIU

Ms. Lu LIU

orcid

Research Focus & Metrics

Academic Career Length

8Years (2019-Present)

(Calculated once Scilit publication data is synced: current year − year of first publication + 1)

Representative Publications

View All Publications
24 April 2023 in Electronics
Verified
Journal Article
Open access
PDF file
LLLu LIU
Lu LIU
ZXZixuan Xu
Zixuan Xu
DHDaqing He
Daqing He
DYDequan YANG
Dequan YANG
HGHongchen Guo
Hongchen Guo
As deep neural networks (DNNs) are widely used in the field of remote sensing image recognition, there is a model security issue that cannot be ignored. DNNs have been shown to be vulnerable to small perturbations in a large number of studies in the past, and this security risk naturally exists in remote sensing object detection models based on DNNs. The complexity of remote sensing object detection models makes it difficult to implement adversarial attacks on them, resulting in the current lack of systematic research on adversarial examples in the field of remote sensing image recognition. In order to better deal with the adversarial threats that remote sensing image recognition models may confront and to provide an effective means for evaluating the robustness of the models, this paper takes the adversarial examples for remote sensing image recognition as the research goal and systematically studies vanishing attacks against a remote sensing image object detection model. To solve the problem of difficult attack implementation on remote sensing image object detection, adversarial attack adaptation methods based on interpolation scaling and patch perturbation stacking are proposed in this paper, which realizes the adaptation of classical attack algorithms. We propose a hot restart perturbation update strategy and the joint attack of the first and second stages of the two-stage remote sensing object detection model is realized through the design of the attack loss function. For the problem of the modification cost of global pixel attack being too large, a local pixel attack algorithm based on sensitive pixel location is proposed in this paper. By searching the location of the sensitive pixels and constructing the mask of attack area, good local pixel attack effect is achieved. Experimental results show that the average pixel modification rate of the proposed attack method decreases to less than 4% and the vanishing rate can still be maintained above 80%, which effectively achieves the balance between attack effect and attack cost.

30 October 2021
Verified
Book Chapter
Closed access
PDF file
YMYujie Ma
Yujie Ma
YLYuanzhang Li
Yuanzhang Li
ZZZhibin Zhang
Zhibin Zhang
RZRuyun Zhang
Ruyun Zhang
LLLu LIU
Lu LIU
XZXiaosong Zhang
Xiaosong Zhang

1 January 2019
Verified
Book Chapter
Closed access
PDF file
YWYao Wang
Yao Wang
WHWencong Han
Wencong Han
LWLianfang Wang
Lianfang Wang
LLLu LIU
Lu LIU
于Y于潇 YU
于潇 YU

24 September 2022
Verified
Book Chapter
Closed access
PDF file
YZYaoyuan Zhang
Yaoyuan Zhang
YTYu-An Tan
Yu-An Tan
MLMingfeng Lu
Mingfeng Lu
LLLu LIU
Lu LIU
QZQuanxin Zhang
Quanxin Zhang
DWDianxin Wang
Dianxin Wang

1 January 2019
Verified
Book Chapter
Closed access
PDF file
KYKai Yang
Kai Yang
XMXiaoya Ma
Xiaoya Ma
HJHongwei Jiang
Hongwei Jiang
YXYuan Xue
Yuan Xue
WHWencong Han
Wencong Han
LLLu LIU
Lu LIU

4 February 2024
Verified
Book Chapter
Closed access
PDF file
YSYujie Shao
Yujie Shao
TCTian Chen
Tian Chen
KLKe Li
Ke Li
LLLu LIU
Lu LIU