Abstract:The widespread deployment of Deep Neural Networks (DNNs) for 3D point cloud processing starkly contrasts with their susceptibility to security breaches, notably backdoor attacks. These attacks hijack DNNs during training, embedding triggers in the data that, once activated, cause the network to make predetermined errors while maintaining normal performance on unaltered data. This vulnerability poses significant risks, especially given the insufficient research on robust defense mechanisms for 3D point cloud networks against such sophisticated threats. Existing attacks either struggle to resist basic point cloud pre-processing methods, or rely on delicate manual design. Exploring simple, effective, imperceptible, and difficult-to-defend triggers in 3D point clouds is still challenging.To address these challenges, we introduce MirrorAttack, a novel effective 3D backdoor attack method, which implants the trigger by simply reconstructing a clean point cloud with an auto-encoder. The data-driven nature of the MirrorAttack obviates the need for complex manual design. Minimizing the reconstruction loss automatically improves imperceptibility. Simultaneously, the reconstruction network endows the trigger with pronounced nonlinearity and sample specificity, rendering traditional preprocessing techniques ineffective in eliminating it. A trigger smoothing module based on spherical harmonic transformation is also attached to regulate the intensity of the attack.Both quantitive and qualitative results verify the effectiveness of our method. We achieve state-of-the-art ASR on different types of victim models with the intervention of defensive techniques. Moreover, the minimal perturbation introduced by our trigger, as assessed by various metrics, attests to the method's stealth, ensuring its imperceptibility.

Stealthy Backdoor Attacks on Deep Point Cloud Recognization Networks

Stealthy and Robust Backdoor Attack against 3D Point Clouds through Additional Point Features

PointBA: Towards Backdoor Attacks in 3D Point Cloud

Improving Adversarial Robustness of 3D Point Cloud Classification Models

Generating 3D Adversarial Point Clouds under the Principle of LiDARs

Imperceptible and Robust Backdoor Attack in 3D Point Cloud

MirrorAttack: Backdoor Attack on 3D Point Cloud with a Distorting Mirror

Generating 3D Adversarial Point Clouds

CloudFort: Enhancing Robustness of 3D Point Cloud Classification Against Backdoor Attacks via Spatial Partitioning and Ensemble Prediction

iBA: Backdoor Attack on 3D Point Cloud via Reconstructing Itself

Toward Availability Attacks in 3D Point Clouds

AdvPC: Transferable Adversarial Perturbations on 3D Point Clouds

Extending Adversarial Attacks and Defenses to Deep 3D Point Cloud Classifiers

Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification

Adversarial Attack and Defense on Point Sets

Backdoor Attacks and Defenses for Deep Neural Networks in Outsourced Cloud Environments

Shape Prior Guided Attack: Sparser Perturbations on 3D Point Clouds.

Invisible Backdoor Attacks on Deep Neural Networks via Steganography and Regularization

Imperceptible and Multi-channel Backdoor Attack against Deep Neural Networks

Adaptive Backdoor Attack Against Deep Neural Networks

Robust Geometry-Dependent Attack for 3D Point Clouds