Adversarial Attacks on Radar Target Recognition Based on Deep Learning

Abstract

Synthetic aperture radar (SAR) image classification is a challenging problem due to the complex imaging mechanism as well as the random speckle noise, which affects radar image interpretation. Recently, deep neural networks (DNNs) have been shown to outperform previous state-of-the-art techniques in computer vision tasks owing to their ability to learn relevant features from the data. However, the fragility of these models has received far less academic attention in the remote sensing community, which limits our understanding of the security of remote sensing image classification models. To explore the basic characteristic of adversarial examples of SAR images, we compare several mainstream adversarial methods and evaluate the securities of used DNNs from the perspective of attention. We subsequently perform other attempts. The experimental results provide data support and an effective reference for the defense capabilities of various DNNs regarding attack in SAR image classification models.