[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-84213-en":3,"doc-seo-84213-105":29,"detail-sidebar-cat-0-en-105":91},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":20,"is_deleted":4,"is_public":20,"is_downloadable":20,"audit_status":20,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":13,"seo_description":14,"update_tm":27,"read_time":28},84213,962075114101,"Seraphina","https://ap-avatar.wpscdn.com/avatar/e000253a75eb197efd?x-image-process=image/resize,m_fixed,w_180,h_180&k=1780044092746381165",8,"Research & Report","InfraQR: Edge-Placed QR-Inspired Structured Patch Attacks on Infrared Vision-Language Models","Infrared vision-language models are increasingly deployed for perception under low-light and adverse conditions, yet robustness against localized structured perturbations is insufficiently studied. InfraQR introduces a QR-inspired structured patch attack that inserts a compact near-binary finder-style signal along image boundaries, without requiring a valid scannable QR code. Using learnable grid cells optimized with binary regularization and surrogate CLIP-style encoders, InfraQR is evaluated on infrared classification, caption transfer, and question–answer-aware VQA.","arXiv :2607 .07288v 1 [ cs .CV] 8 Jul 2026  \nInfraQR: Edge-Placed QR-Inspired Structured Patch Attacks on Infrared Vision-Language  \nModels  \nXin Li 1 , Jiaju Han 1 ,3 , Ma Yaqi2 , Chengyin Hu 1 , Yingying Zhao 1 , Jiahuan Long4 , Fengyu Zhang 1 , and Yahui Chai 1  \n1 China University of Petroleum-Beijing at Karamay, Karamay, Xinjiang, China  \n2 Guizhou University, Guiyang, China  \n3 Shenzhen Research Institute of Big Data, Shenzhen, China  \n4 Shanghai Jiao Tong University, Shanghai, China  \nAbstract. Infrared vision-language models are increasingly used for perception under low-light and adverse visual conditions, yet their robustness to localized structured perturbations remains underexplored.  \nExisting infrared adversarial studies mainly focus on object detectors, leaving the security of infrared vision-language models less systematically examined. We present InfraQR, a QR-inspired structured patch attack for infrared vision-language models. Unlike localized attacks that attach perturbations to the target object, InfraQR places a compact structured patch along image boundaries and optimizes learnable grid cells through surrogate CLIP-style encoders. The resulting patch has a near-binary structured appearance, but is not required to be a valid or machine-readable QR code. We evaluate InfraQR on infrared classification, caption transfer, and question–answer-aware visual question answering (VQA) tasks. On a 300-image infrared benchmark, InfraQR sharply reduces the accuracy of multiple CLIP-style classifiers, including reducing OpenAI CLIP accuracy from 98 .67% to 0 .70% . The generated adversarial images also transfer to black-box captioning and VQA models, causing semantic degradation in captions and more error-prone answers under GPT-5 .4-based evaluation. These results show that infrared vision-language models remain vulnerable to structured edge-placed perturbations, motivating further study of cross-task robustness beyond direct object occlusion.  \nKeywords: Infrared vision-language models · adversarial patch attacks  \n· QR-inspired structured perturbations · visual question answering  \n1 Introduction  \nVision-language models (VLMs) have broadened visual perception by aligning images with natural-language descriptions, enabling open-vocabulary recognition, captioning, and visual question answering [13, 21] . Recent studies show that VLMs remain vulnerable to adversarial perturbations and transfer-based  \n2 X. Li et al.  \nattacks in visible image domains [15, 28] . In contrast, the robustness of infrared VLMs remains less understood, even though infrared imagery is important for perception under low-light, nighttime, and adverse visual conditions.  \nExisting infrared adversarial studies mainly focus on object detectors and physical-world perturbations, such as learnable infrared patches and infrared curves [10, 27] . These works reveal important vulnerabilities of thermal object detection, but they do not directly address whether structured perturbations can disrupt infrared vision-language understanding. This gap is important because errors in infrared multimodal perception may propagate from visual recognition to language generation and decision making.  \nAdversarial patch attacks provide a practical way to study localized vulnerabilities by modifying only a small image region. Most patch settings place perturbations on or near the target object, directly overlapping the visual evidence used for recognition. In this work, we ask a complementary question: can a structured patch placed away from the main object still disrupt infrared visionlanguage understanding? This setting is especially relevant for digital robustness analysis, where the attacker can control image-level placement without attaching a physical patch to the object itself.  \nIn this work, we study this question through edge-placed structured perturbations. We introduce InfraQR, a QR-inspired structured patch attack for infrared VLMs. InfraQR uses a fixed f","cbCaikdRd1TxzODO","https://ap.wps.com/l/cbCaikdRd1TxzODO","pdf",2900292,1,17,"English","en",105,"# Introduction\n## Problem Background and Motivation\n## Proposed Method: InfraQR\n## Evaluation Scope and Contributions","[{\"question\":\"What is InfraQR and how is the adversarial patch placed?\",\"answer\":\"InfraQR is a QR-inspired structured patch attack that places a compact structured patch along image boundaries. It searches candidate edge locations instead of attaching the perturbation to the target object.\"},{\"question\":\"Does InfraQR require the patch to be a valid or scannable QR code?\",\"answer\":\"No. InfraQR encourages a near-binary structured appearance using binary regularization, but it is not required to form a valid or machine-readable QR code.\"},{\"question\":\"Which tasks are used to evaluate InfraQR’s impact on infrared vision-language models?\",\"answer\":\"InfraQR is evaluated on infrared classification, caption transfer to black-box captioning models, and question–answer-aware visual question answering (VQA).\"}]",1784194024,43,{"code":4,"msg":30,"data":31},"ok",{"site_id":24,"language":23,"slug":32,"title":13,"keywords":33,"description":14,"schema_data":34,"social_meta":86,"head_meta":88,"extra_data":90,"updated_unix":27},"infraqr-edge-placed-qr-inspired-structured-patch-attacks-on-infrared-vision-language-models","",{"@graph":35,"@context":85},[36,53,68],{"@type":37,"itemListElement":38},"BreadcrumbList",[39,43,47,50],{"item":40,"name":41,"@type":42,"position":20},"https://docshare.wps.com","Home","ListItem",{"item":44,"name":45,"@type":42,"position":46},"https://docshare.wps.com/document/","Document",2,{"item":48,"name":12,"@type":42,"position":49},"https://docshare.wps.com/document/research-report/",3,{"item":51,"name":13,"@type":42,"position":52},"https://docshare.wps.com/document/infraqr-edge-placed-qr-inspired-structured-patch-attacks-on-infrared-vision-language-models/84213/",4,{"url":51,"name":13,"@type":54,"author":55,"headline":13,"publisher":57,"fileFormat":60,"inLanguage":23,"description":14,"dateModified":61,"datePublished":62,"encodingFormat":60,"isAccessibleForFree":63,"interactionStatistic":64},"DigitalDocument",{"name":9,"@type":56},"Person",{"url":40,"name":58,"@type":59},"DocShare","Organization","application/pdf","2026-07-17","2026-07-16",true,{"@type":65,"interactionType":66,"userInteractionCount":20},"InteractionCounter",{"@type":67},"ViewAction",{"@type":69,"mainEntity":70},"FAQPage",[71,77,81],{"name":72,"@type":73,"acceptedAnswer":74},"What is InfraQR and how is the adversarial patch placed?","Question",{"text":75,"@type":76},"InfraQR is a QR-inspired structured patch attack that places a compact structured patch along image boundaries. It searches candidate edge locations instead of attaching the perturbation to the target object.","Answer",{"name":78,"@type":73,"acceptedAnswer":79},"Does InfraQR require the patch to be a valid or scannable QR code?",{"text":80,"@type":76},"No. InfraQR encourages a near-binary structured appearance using binary regularization, but it is not required to form a valid or machine-readable QR code.",{"name":82,"@type":73,"acceptedAnswer":83},"Which tasks are used to evaluate InfraQR’s impact on infrared vision-language models?",{"text":84,"@type":76},"InfraQR is evaluated on infrared classification, caption transfer to black-box captioning models, and question–answer-aware visual question answering (VQA).","https://schema.org",{"og:url":51,"og:type":87,"og:title":13,"og:site_name":58,"og:description":14},"article",{"robots":89,"canonical":51},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":92},[93,97,101,105,110,115,120,123,128,131,135],{"id":20,"doc_module":4,"doc_module_name":45,"category_name":94,"show_sort_weight":95,"slug":96},"Story & Novel",90,"story-novel",{"id":46,"doc_module":4,"doc_module_name":45,"category_name":98,"show_sort_weight":99,"slug":100},"Literature",80,"literature",{"id":52,"doc_module":4,"doc_module_name":45,"category_name":102,"show_sort_weight":103,"slug":104},"Exam",70,"exam",{"id":106,"doc_module":4,"doc_module_name":45,"category_name":107,"show_sort_weight":108,"slug":109},5,"Comic",60,"comic",{"id":111,"doc_module":4,"doc_module_name":45,"category_name":112,"show_sort_weight":113,"slug":114},6,"Technology",50,"technology",{"id":116,"doc_module":4,"doc_module_name":45,"category_name":117,"show_sort_weight":118,"slug":119},7,"Healthcare",40,"healthcare",{"id":11,"doc_module":4,"doc_module_name":45,"category_name":12,"show_sort_weight":121,"slug":122},30,"research-report",{"id":124,"doc_module":4,"doc_module_name":45,"category_name":125,"show_sort_weight":126,"slug":127},9,"Religion & Spirituality",20,"religion-spirituality",{"id":126,"doc_module":4,"doc_module_name":45,"category_name":129,"show_sort_weight":126,"slug":130},"World Cup","world-cup",{"id":132,"doc_module":4,"doc_module_name":45,"category_name":133,"show_sort_weight":132,"slug":134},10,"Lifestyle","lifestyle",{"id":136,"doc_module":4,"doc_module_name":45,"category_name":137,"show_sort_weight":106,"slug":138},19,"General","general"]