The post Sparse Black-Box Attacks Enhance Semantic Segmentation Security appeared on BitcoinEthereumNews.com.
A small research team says today’s most common defenses against a well-known class of computer-vision attacks are letting a much sneakier threat slip through undetected. In a paper submitted on 11 Aug 2026, researchers Dongsu Song, DaeYun GO, Boseung Seo and Jay Hoon Jung argue that sparse black-box attacks against semantic segmentation systems — the AI models that label every pixel in an image, used in self-driving cars, medical scanning and industrial inspection — have been largely overlooked compared to attacks on simpler image-classification systems. Their answer is a new method called SegPAR, which they say closes that gap by rethinking how an attacker should search for the fewest possible pixels needed to fool a model. Key takeaways Sparse decision-based black-box attacks — which only need a model’s final label output, not its internal scores — have received limited research attention in semantic segmentation compared to image classification. Existing sparse attacks borrowed from classification suffer from severe query inefficiency because they accumulate pixels across the entire image, quickly draining the limited number of queries an attacker is allowed. The proposed method, SegPAR, introduces a class-centric exploration framework instead of an image-wide one, paired with a new “discrepancy reward” to avoid misleading feedback signals. In testing, SegPAR significantly outperformed black-box baseline attacks on both sparsity efficiency and MIoU reduction, and stayed competitive with some white-box attacks that have full access to model internals. The code behind SegPAR has been released publicly on GitHub under KAU QuantumAILab. Research Gap in Sparse Decision-Based Attacks for Semantic Segmentation Sparse decision-based black-box attacks have been studied extensively for image classifiers, but semantic segmentation has stayed on the sidelines despite the practical stakes involved. According to the authors, this type of threat — where an attacker only sees a model’s final decision, not its confidence scores…