Abstract:Point cloud completion, as the upstream procedure of 3D recognition and segmentation, has become an essential part of many tasks such as navigation and scene understanding. While various point cloud completion models have demonstrated their powerful capabilities, their robustness against adversarial attacks, which have been proven to be fatally malicious towards deep neural networks, remains unknown. In addition, existing attack approaches towards point cloud classifiers cannot be applied to the completion models due to different output forms and attack purposes. In order to evaluate the robustness of the completion models, we propose PointCA, the first adversarial attack against 3D point cloud completion models. PointCA can generate adversarial point clouds that maintain high similarity with the original ones, while being completed as another object with totally different semantic information. Specifically, we minimize the representation discrepancy between the adversarial example and the target point set to jointly explore the adversarial point clouds in the geometry space and the feature space. Furthermore, to launch a stealthier attack, we innovatively employ the neighbourhood density information to tailor the perturbation constraint, leading to geometry-aware and distribution-adaptive modifications for each point. Extensive experiments against different premier point cloud completion networks show that PointCA can cause a performance degradation from 77.9% to 16.7%, with the structure chamfer distance kept below 0.01. We conclude that existing completion models are severely vulnerable to adversarial examples, and state-of-the-art defenses for point cloud classification will be partially invalid when applied to incomplete and uneven point cloud data.

Elastic Disentangle-Based Training for Point Cloud Segmentation Model with Remission Perturbation

Improving Adversarial Robustness of 3D Point Cloud Classification Models

Generating 3D Adversarial Point Clouds under the Principle of LiDARs

Adversarial Robustness Analysis of LiDAR-included Models in Autonomous Driving

Attacking Point Cloud Segmentation with Color-only Perturbation

On Adversarial Robustness of Point Cloud Semantic Segmentation

PAGN: perturbation adaption generation network for point cloud adversarial defense

Robust Geometry-Dependent Attack for 3D Point Clouds

Spcr: Semi-Supervised Point Cloud Instance Segmentation with Perturbation Consistency Regularization

PointCA: Evaluating the Robustness of 3D Point Cloud Completion Models Against Adversarial Examples

Toward Availability Attacks in 3D Point Clouds

Geometry and Uncertainty-Aware 3D Point Cloud Class-Incremental Semantic Segmentation

Rethinking 3D LiDAR Point Cloud Segmentation

A Structural-Constraint 3D Point Clouds Segmentation Adversarial Method

Adversarial Attack and Defense on Point Sets

CAP: Robust Point Cloud Classification Via Semantic and Structural Modeling.

PRED: Pre-training via Semantic Rendering on LiDAR Point Clouds

Exploiting Label Uncertainty for Enhanced 3D Object Detection From Point Clouds

AdvPC: Transferable Adversarial Perturbations on 3D Point Clouds

Enhancing Deep Learning-Based Segmentation Accuracy through Intensity Rendering and 3D Point Interpolation Techniques to Mitigate Sensor Variability

Generating 3D Adversarial Point Clouds