Abstract:Deep learning models for point clouds have shown to be vulnerable to adversarial attacks, which have received increasing attention in various safety-critical applications such as autonomous driving, robotics, and surveillance. Existing 3D attack methods generally employ global distance losses to implicitly constrain the point-wise perturbations for optimization. However, these simple losses are quite difficult to accurately measure and restrict the proper 3D geometry as point clouds are highly structured. Although few recent works try to exploit additional shape-aware surface knowledge to globally constrain the point position, they still fail to preserve the detailed point-to-point geometric dependency in different local regions. To this end, in this paper, we propose a novel Multi-grained Geometry-aware Attack (MGA), which explicitly captures the local topology characteristics in different 3D regions for adversarial constraint. Specifically, we first develop multi-scale spectral local filter banks adapting to different 3D object shapes to explore potential geometric structures in local regions. Considering that objects may contain complex geometries, we then extend each filter bank into multi-layer ones to gradually capture the topology contexts of the same region in a coarse-to-fine manner. Hence, the focused local geometric structures will be highlighted in the coefficients calculated by the filtering process. At last, by restricting these coefficients between benign and adversarial samples, our MGA is able to properly measure and preserve the detailed geometry contexts in the whole 3D object with trivial perturbations. Extensive experiments demonstrate that our attack can achieve superior performance on various 3D classification models, with satisfying adversarial imperceptibility and strong resistance to different defense methods.

SymAttack: Symmetry-aware Imperceptible Adversarial Attacks on 3D Point Clouds

Improving Adversarial Robustness of 3D Point Cloud Classification Models

Generating 3D Adversarial Point Clouds under the Principle of LiDARs

Shape-invariant 3D Adversarial Point Clouds

Adversarial Attack and Defense on Point Sets

NormalAttack: Curvature-Aware Shape Deformation along Normals for Imperceptible Point Cloud Attack

Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Clouds

Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification

On Adversarial Robustness of 3D Point Cloud Classification under Adaptive Attacks

Hiding Imperceptible Noise in Curvature-Aware Patches for 3D Point Cloud Attack

Manifold Constraints for Imperceptible Adversarial Attacks on Point Clouds

On Isometry Robustness Of Deep 3d Point Cloud Models Under Adversarial Attacks

Eidos: Efficient, Imperceptible Adversarial 3D Point Clouds

Explicitly Perceiving and Preserving the Local Geometric Structures for 3D Point Cloud Attack

Robust Geometry-Dependent Attack for 3D Point Clouds

Adaptive Local Adversarial Attacks on 3D Point Clouds for Augmented Reality

Hard-Label Black-Box Attacks on 3D Point Clouds

FLAT: Flux-Aware Imperceptible Adversarial Attacks on 3D Point Clouds

PointCA: Evaluating the Robustness of 3D Point Cloud Completion Models Against Adversarial Examples

ShapeAdv: Generating Shape-Aware Adversarial 3D Point Clouds

Shape Prior Guided Attack: Sparser Perturbations on 3D Point Clouds.