Abstract:Due to the inherent characteristic of deep learning models, prior researchers have focused on studying adversarial strategies aimed at uncovering their vulnerabilities. However, these strategies have been primarily been confined to the realm of image processing. When considering 3D vision structures, such as point clouds and meshes, the robustness of learning models also diminishes significantly in the presence of discernible outliers, and these strategies often fail to generalize across different DNN architectures. In this paper, a simple adversarial perturbation and optimization attack framework, Tangent Plane Perturbation and Synthesizing Optimization Attack (TPSOA) is presented. TPSOA provides a point cloud projection direction for point clouds, subtly inducing imperceptible perturbations on their tangent planes. Furthermore, acknowledging the geometry form of adversarial generation and its potential for 3D printing in physical scenarios, we reconstruct the adversarial mesh alongside the adversarial point cloud. A synthesized loss, incorporating both the Sobolev loss and the Chamfer loss, is utilized to optimize the distances between the adversarial generation and ground truth. Through a combination of visualization and quantitative analysis experiments, we validate the imperceptible nature of TPSOA, the necessity of the loss terms, and the magnitude of perturbations. These experiments that TPSOA enables targeted point cloud attacks that are imperceptible and of minor magnitude. In real-world adversarial attack and defense scenarios, as evidenced by both white-box and black-box experiments, the results show that TPSOA surpasses other state-of-the-art adversarial attack models, effectively manipulating a greater number of victim models while maintaining high efficiency, all without compromising its original structural integrity.

Generating Transferable 3D Adversarial Point Cloud Via Random Perturbation Factorization.

Improving Adversarial Robustness of 3D Point Cloud Classification Models

Generating 3D Adversarial Point Clouds under the Principle of LiDARs

AdvPC: Transferable Adversarial Perturbations on 3D Point Clouds

Transferable 3D Adversarial Shape Completion using Diffusion Models

Generating 3D Adversarial Point Clouds

Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification

PAGN: perturbation adaption generation network for point cloud adversarial defense

Adversarial Attack and Defense on Point Sets

Local Aggressive Adversarial Attacks on 3D Point Cloud

Frequency-Aware GAN for Imperceptible Transfer Attack on 3D Point Clouds

Improving transferability of 3D adversarial attacks with scale and shear transformations

A Joint Lightly Perturbation and Synthesizing Optimization Attack Framework for Point Cloud Perturbation

Benchmarking and Analyzing Robust Point Cloud Recognition: Bag of Tricks for Defending Adversarial Examples

Improving Transferability of Universal Adversarial Perturbation with Feature Disruption.

Robust Geometry-Dependent Attack for 3D Point Clouds

Adaptive Local Adversarial Attacks on 3D Point Clouds for Augmented Reality

Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Clouds

Extending Adversarial Attacks and Defenses to Deep 3D Point Cloud Classifiers

Ada3Diff: Defending against 3D Adversarial Point Clouds via Adaptive Diffusion

Boosting 3D Adversarial Attacks with Attacking On Frequency