Abstract:Point cloud completion, as the upstream procedure of 3D recognition and segmentation, has become an essential part of many tasks such as navigation and scene understanding. While various point cloud completion models have demonstrated their powerful capabilities, their robustness against adversarial attacks, which have been proven to be fatally malicious towards deep neural networks, remains unknown. In addition, existing attack approaches towards point cloud classifiers cannot be applied to the completion models due to different output forms and attack purposes. In order to evaluate the robustness of the completion models, we propose PointCA, the first adversarial attack against 3D point cloud completion models. PointCA can generate adversarial point clouds that maintain high similarity with the original ones, while being completed as another object with totally different semantic information. Specifically, we minimize the representation discrepancy between the adversarial example and the target point set to jointly explore the adversarial point clouds in the geometry space and the feature space. Furthermore, to launch a stealthier attack, we innovatively employ the neighbourhood density information to tailor the perturbation constraint, leading to geometry-aware and distribution-adaptive modifications for each point. Extensive experiments against different premier point cloud completion networks show that PointCA can cause a performance degradation from 77.9% to 16.7%, with the structure chamfer distance kept below 0.01. We conclude that existing completion models are severely vulnerable to adversarial examples, and state-of-the-art defenses for point cloud classification will be partially invalid when applied to incomplete and uneven point cloud data.

Dual adversarial model: Exploring low-dimensional space features for point clouds generating and completing

Dual-scale Point Cloud Completion Network Based on High-Frequency Feature Fusion

Point Cloud Completion Cascade Optimization Network Based on Feature Fusion

Adaptive Recurrent Forward Network for Dense Point Cloud Completion

Generating 3D Adversarial Point Clouds under the Principle of LiDARs

Improving Adversarial Robustness of 3D Point Cloud Classification Models

DualGenerator: Information Interaction-based Generative Network for Point Cloud Completion

Latent-Space Laplacian Pyramids for Adversarial Representation Learning with 3D Point Clouds

Attention-based Transformation from Latent Features to Point Clouds

2D-3DMatchingNet: Multimodal Point Completion with 2D Geometry Matching

DPR-GAN: Dual-Stream Progressive Refinement for Adversarial 3D Point Cloud Generation

Exploring Dual Representations in Large-Scale Point Clouds: A Simple Weakly Supervised Semantic Segmentation Framework

Research on Multi-modal Point Cloud Completion Task

Learning Progressive Point Embeddings for 3D Point Cloud Generation

CDPNet: Cross-Modal Dual Phases Network for Point Cloud Completion

SVDFormer: Complementing Point Cloud via Self-view Augmentation and Self-structure Dual-generator

Point Cloud Completion Via Self-projected View Augmentation and Implicit Field Constraint

3D Point Cloud Completion with Geometric-Aware Adversarial Augmentation

PointCA: Evaluating the Robustness of 3D Point Cloud Completion Models Against Adversarial Examples

Dense Point Cloud Completion Based on Generative Adversarial Network

Transferable 3D Adversarial Shape Completion using Diffusion Models