Adversarial attacks on cross-resolution person re-identification

Abstract

Person Re-Identification (re-ID) is a task that involves matching individuals captured by various cameras and in various poses. And because of the uncertainty of input image resolution in practice, traditional Person Re-Identification tends to have poor performance. Cross-Resolution Person re-ID is a hot branch of Person re-ID that aims to address the image with a different resolution. Besides, Person re-ID has been applied in lots of fields because of its practicality, including public security systems. Therefore, this poses a challenge to the security of the re-ID model. This paper discusses the results of attacks on PS-HRNet, VGG16, and ResNet networks using the Fast Gradient Sign Method. The experiment result of this paper proves the effectiveness of the Fast Gradient Sign Method on Cross-Resolution Person Re-Identification. It tests the transferable of the adversarial samples generated by the Fast Gradient Sign Method.