The success of deep neural networks (DNNs) has promoted the widespread
applications of person re-identification (ReID). However, ReID systems inherit
the vulnerability of DNNs to malicious attacks of visually inconspicuous
adversarial perturbations. Detection of adversarial attacks is, therefore, a
fundamental requirement for robust ReID systems. In this work, we propose a
Multi-Expert Adversarial Attack Detection (MEAAD) approach to achieve this goal
by checking context inconsistency, which is suitable for any DNN-based ReID
systems. Specifically, three kinds of context inconsistencies caused by
adversarial attacks are employed to learn a detector for distinguishing the
perturbed examples, i.e., a) the embedding distances between a perturbed query
person image and its top-K retrievals are generally larger than those between a
benign query image and its top-K retrievals, b) the embedding distances among
the top-K retrievals of a perturbed query image are larger than those of a
benign query image, c) the top-K retrievals of a benign query image obtained
with multiple expert ReID models tend to be consistent, which is not preserved
when attacks are present. Extensive experiments on the Market1501 and
DukeMTMC-ReID datasets show that, as the first adversarial attack detection
approach for ReID, MEAAD effectively detects various adversarial attacks and
achieves high ROC-AUC (over 97.5%).

本文提出一种基于多专家的对抗攻击检测方法 (MEAAD)，通过检查上下文不一致性来实现对于基于深度神经网络的 ReID 系统的攻击检测，并在 Market1501 和 DukeMTMC-ReID 数据集上进行了实验，在第一个 ReID 的对抗攻击检测方法中被证明可以有效地检测各种攻击，并达到高的 ROC-AUC（超过 97.5%）。