Invisible Backdoor Attack with Dynamic Triggers against Person Re-identification. (arXiv:2211.10933v1 [cs.CV])

In recent years, person Re-identification (ReID) has rapidly progressed with
wide real-world applications, but also poses significant risks of adversarial
attacks. In this paper, we focus on the backdoor attack on deep ReID models.
Existing backdoor attack methods follow an all-to-one/all attack scenario,
where all the target classes in the test set have already been seen in the
training set. However, ReID is a much more complex fine-grained open-set
recognition problem, where the identities in the test set are not …

attack backdoor dynamic identification