Abstract:Adversary and invisibility are two fundamental but conflict characters of adversarial perturbations. Previous adversarial attacks on 3D point cloud recognition have often been criticized for their noticeable point outliers, since they just involve an "implicit constrain" like global distance loss in the time-consuming optimization to limit the generated noise. While point cloud is a highly structured data format, it is hard to constrain its perturbation with a simple loss or metric properly. In this paper, we propose a novel Point-Cloud Sensitivity Map to boost both the efficiency and imperceptibility of point perturbations. This map reveals the vulnerability of point cloud recognition models when encountering shape-invariant adversarial noises. These noises are designed along the shape surface with an "explicit constrain" instead of extra distance loss. Specifically, we first apply a reversible coordinate transformation on each point of the point cloud input, to reduce one degree of point freedom and limit its movement on the tangent plane. Then we calculate the best attacking direction with the gradients of the transformed point cloud obtained on the white-box model. Finally we assign each point with a non-negative score to construct the sensitivity map, which benefits both white-box adversarial invisibility and black-box query-efficiency extended in our work. Extensive evaluations prove that our method can achieve the superior performance on various point cloud recognition models, with its satisfying adversarial imperceptibility and strong resistance to different point cloud defense settings. Our code is available at: <a class="link-external link-https" href="https://github.com/shikiw/SI-Adv" rel="external noopener nofollow">this https URL</a>.

3D-VFD: A Victim-free Detector against 3D Adversarial Point Clouds

Improving Adversarial Robustness of 3D Point Cloud Classification Models

Generating 3D Adversarial Point Clouds under the Principle of LiDARs

PLA-LiDAR: Physical Laser Attacks Against LiDAR-based 3D Object Detection in Autonomous Vehicle.

Local Aggressive Adversarial Attacks on 3D Point Cloud

Adversarial Point Cloud Perturbations Against 3D Object Detection in Autonomous Driving Systems

Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification

Adversarial Obstacle Generation Against LiDAR-Based 3D Object Detection

Adversarial Point Cloud Perturbations to Attack Deep Object Detection Models

PointBA: Towards Backdoor Attacks in 3D Point Cloud

Gradient-based Sparse Voxel Attacks on Point Cloud Object Detection

Ada3Diff: Defending against 3D Adversarial Point Clouds via Adaptive Diffusion

Generating 3D Adversarial Point Clouds

The Art of Defense: Letting Networks Fool the Attacker

Adversarial Attack and Defense on Point Sets

3D-VField: Adversarial Augmentation of Point Clouds for Domain Generalization in 3D Object Detection

Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Clouds

Self-Robust 3D Point Recognition via Gather-Vector Guidance

Stealthy and Robust Backdoor Attack against 3D Point Clouds through Additional Point Features

Adaptive Local Adversarial Attacks on 3D Point Clouds for Augmented Reality

Shape-invariant 3D Adversarial Point Clouds