Abstract:Due to the inherent characteristic of deep learning models, prior researchers have focused on studying adversarial strategies aimed at uncovering their vulnerabilities. However, these strategies have been primarily been confined to the realm of image processing. When considering 3D vision structures, such as point clouds and meshes, the robustness of learning models also diminishes significantly in the presence of discernible outliers, and these strategies often fail to generalize across different DNN architectures. In this paper, a simple adversarial perturbation and optimization attack framework, Tangent Plane Perturbation and Synthesizing Optimization Attack (TPSOA) is presented. TPSOA provides a point cloud projection direction for point clouds, subtly inducing imperceptible perturbations on their tangent planes. Furthermore, acknowledging the geometry form of adversarial generation and its potential for 3D printing in physical scenarios, we reconstruct the adversarial mesh alongside the adversarial point cloud. A synthesized loss, incorporating both the Sobolev loss and the Chamfer loss, is utilized to optimize the distances between the adversarial generation and ground truth. Through a combination of visualization and quantitative analysis experiments, we validate the imperceptible nature of TPSOA, the necessity of the loss terms, and the magnitude of perturbations. These experiments that TPSOA enables targeted point cloud attacks that are imperceptible and of minor magnitude. In real-world adversarial attack and defense scenarios, as evidenced by both white-box and black-box experiments, the results show that TPSOA surpasses other state-of-the-art adversarial attack models, effectively manipulating a greater number of victim models while maintaining high efficiency, all without compromising its original structural integrity.

Imperceptible Adversarial Attacks on Point Clouds Guided by Point-to-Surface Field

Improving Adversarial Robustness of 3D Point Cloud Classification Models

Generating 3D Adversarial Point Clouds under the Principle of LiDARs

Rethinking Perturbation Directions for Imperceptible Adversarial Attacks on Point Clouds

NormalAttack: Curvature-Aware Shape Deformation along Normals for Imperceptible Point Cloud Attack

A Joint Lightly Perturbation and Synthesizing Optimization Attack Framework for Point Cloud Perturbation

Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Clouds

Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification

Local Aggressive Adversarial Attacks on 3D Point Cloud

Hiding Imperceptible Noise in Curvature-Aware Patches for 3D Point Cloud Attack

Adversarial Attack and Defense on Point Sets

Generating 3D Adversarial Point Clouds

Saliency-Aware Generation of Adversarial Point Clouds.

Manifold Constraints for Imperceptible Adversarial Attacks on Point Clouds

Shape-invariant 3D Adversarial Point Clouds

FLAT: Flux-Aware Imperceptible Adversarial Attacks on 3D Point Clouds

Shape Prior Guided Attack: Sparser Perturbations on 3D Point Clouds.

A Physically Feasible Counter-Attack Method for Remote Sensing Imaging Point Clouds.

SymAttack: Symmetry-aware Imperceptible Adversarial Attacks on 3D Point Clouds

AdvPC: Transferable Adversarial Perturbations on 3D Point Clouds

Robust Geometry-Dependent Attack for 3D Point Clouds