Adversarial T-shirt — A Print That Challenges Person Detection

A deliberately designed shirt print can make a tested person detector miss a wearer who remains visible to people.

Compare the two illustrated figures. Both remain plainly visible. The right-hand shirt carries a coloured patch, and its absent person box represents a possible detector miss, not an actual test result.

An adversarial pattern is selected to change a model’s decision, rather than to match the background. Xu and colleagues reported a 57% physical-world attack success rate against YOLOv2 in their experiments. That figure describes their evaluation, not a general chance of avoiding cameras. The target was locating a person in an image, rather than recognising the wearer’s face.