Embodied Active Defense (EAD) leverages recurrent feedback from the environment to actively counter adversarial patches in 3D physical settings, outperforming passive defense methods in both effectiveness and generalization.
A novel patch-agnostic defense method (PAD) that can effectively localize and remove various adversarial patches without relying on prior attack knowledge or additional training.