Loading [a11y]/accessibility-menu.js
Improving Transferability of Adversarial Point Clouds with Model Commonalities | IEEE Conference Publication | IEEE Xplore

Improving Transferability of Adversarial Point Clouds with Model Commonalities


Abstract:

Although deep learning of 3D point clouds has made significant progress, the robustness of 3D models has not been fully investigated. Existing 3D attack methods show sati...Show More

Abstract:

Although deep learning of 3D point clouds has made significant progress, the robustness of 3D models has not been fully investigated. Existing 3D attack methods show satisfactory performance under the white-box setting but frequently suffer from a low transferability to attack black-box models. A key point to improve the transferability of attacks is to find the commonalities of multiple models. To this end, a novel attack method is proposed by only leveraging perturbations in local geometric feature areas termed FAP. Specifically, local perturbations are pertinently added by calculating the curvature to sample more points in the feature areas that 3D models potentially focus on. Moreover, to address the drawback of poor isometric robustness common to 3D models, we propose a generalized framework for diversifying input samples by adding random isometric transformations (DIT) in the attack process, which can be combined with other attack methods to improve their transferability. Evaluated on a variety of typical 3D models, the proposed attack method outperforms the current gradient-based methods in transferable black-box attacks, and the effectiveness of the proposed framework is demonstrated by extending it to other attack methods.
Date of Conference: 24-26 March 2023
Date Added to IEEE Xplore: 08 May 2023
ISBN Information:
Conference Location: Wuhan, China

Funding Agency:


Contact IEEE to Subscribe

References

References is not available for this document.