Abstract: This article studies transfer-based black-box pedestrian attacks in traffic scenes, where an attacker aims to deceive a target model by generating malicious examples using a surrogate model.