Geometric Adversarial Attacks and Defenses on 3D Point Clouds

• URL: http://arxiv.org/abs/2012.05657v1
• Date: Thu, 10 Dec 2020 13:30:06 GMT
• Title: Geometric Adversarial Attacks and Defenses on 3D Point Clouds
• Authors: Itai Lang, Uriel Kotlicki, Shai Avidan
• Abstract summary: In this work, we explore adversarial examples at a geometric level. That is, a small change to a clean source point cloud leads, after passing through an autoencoder model, to a shape from a different target class. On the defense side, we show that remnants of the attack's target shape are still present at the reconstructed output after applying the defense to the adversarial input.
• Score: 25.760935151452063
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Deep neural networks are prone to adversarial examples that maliciously alter the network's outcome. Due to the increasing popularity of 3D sensors in safety-critical systems and the vast deployment of deep learning models for 3D point sets, there is a growing interest in adversarial attacks and defenses for such models. So far, the research has focused on the semantic level, namely, deep point cloud classifiers. However, point clouds are also widely used in a geometric-related form that includes encoding and reconstructing the geometry. In this work, we explore adversarial examples at a geometric level. That is, a small change to a clean source point cloud leads, after passing through an autoencoder model, to a shape from a different target class. On the defense side, we show that remnants of the attack's target shape are still present at the reconstructed output after applying the defense to the adversarial input. Our code is publicly available at https://github.com/itailang/geometric_adv.

Related papers

• Self-supervised 3D Point Cloud Completion via Multi-view Adversarial Learning [61.14132533712537]
  We propose MAL-SPC, a framework that effectively leverages both object-level and category-specific geometric similarities to complete missing structures. Our MAL-SPC does not require any 3D complete supervision and only necessitates a single partial point cloud for each object.
  arXiv  Detail & Related papers  (2024-07-13T06:53:39Z)
• Clustering based Point Cloud Representation Learning for 3D Analysis [80.88995099442374]
  We propose a clustering based supervised learning scheme for point cloud analysis. Unlike current de-facto, scene-wise training paradigm, our algorithm conducts within-class clustering on the point embedding space. Our algorithm shows notable improvements on famous point cloud segmentation datasets.
  arXiv  Detail & Related papers  (2023-07-27T03:42:12Z)
• SAGA: Spectral Adversarial Geometric Attack on 3D Meshes [13.84270434088512]
  A triangular mesh is one of the most popular 3D data representations. We propose a novel framework for a geometric adversarial attack on a 3D mesh autoencoder.
  arXiv  Detail & Related papers  (2022-11-24T19:29:04Z)
• PointCA: Evaluating the Robustness of 3D Point Cloud Completion Models Against Adversarial Examples [63.84378007819262]
  We propose PointCA, the first adversarial attack against 3D point cloud completion models. PointCA can generate adversarial point clouds that maintain high similarity with the original ones. We show that PointCA can cause a performance degradation from 77.9% to 16.7%, with the structure chamfer distance kept below 0.01.
  arXiv  Detail & Related papers  (2022-11-22T14:15:41Z)
• Passive Defense Against 3D Adversarial Point Clouds Through the Lens of 3D Steganalysis [1.14219428942199]
  A 3D adversarial point cloud detector is designed through the lens of 3D steganalysis. To our knowledge, this work is the first to apply 3D steganalysis to 3D adversarial example defense.
  arXiv  Detail & Related papers  (2022-05-18T06:19:15Z)
• Generating Band-Limited Adversarial Surfaces Using Neural Networks [0.9208007322096533]
  adversarial examples is the art of creating a noise that is added to an input signal of a classifying neural network. In this technical report we suggest a neural network that generates the attacks.
  arXiv  Detail & Related papers  (2021-11-14T19:16:05Z)
• 3D Adversarial Attacks Beyond Point Cloud [8.076067288723133]
  Previous adversarial attacks on 3D point clouds mainly focus on add perturbation to the original point cloud. We present a novel adversarial attack, named Mesh Attack, to address this problem.
  arXiv  Detail & Related papers  (2021-04-25T13:01:41Z)
• ParaNet: Deep Regular Representation for 3D Point Clouds [62.81379889095186]
  ParaNet is a novel end-to-end deep learning framework for representing 3D point clouds. It converts an irregular 3D point cloud into a regular 2D color image, named point geometry image (PGI) In contrast to conventional regular representation modalities based on multi-view projection and voxelization, the proposed representation is differentiable and reversible.
  arXiv  Detail & Related papers  (2020-12-05T13:19:55Z)
• IF-Defense: 3D Adversarial Point Cloud Defense via Implicit Function based Restoration [68.88711148515682]
  Deep neural networks are vulnerable to various 3D adversarial attacks. We propose an IF-Defense framework to directly optimize the coordinates of input points with geometry-aware and distribution-aware constraints. Our results show that IF-Defense achieves the state-of-the-art defense performance against existing 3D adversarial attacks on PointNet, PointNet++, DGCNN, PointConv and RS-CNN.
  arXiv  Detail & Related papers  (2020-10-11T15:36:40Z)
• ShapeAdv: Generating Shape-Aware Adversarial 3D Point Clouds [78.25501874120489]
  We develop shape-aware adversarial 3D point cloud attacks by leveraging the learned latent space of a point cloud auto-encoder. Different from prior works, the resulting adversarial 3D point clouds reflect the shape variations in the 3D point cloud space while still being close to the original one.
  arXiv  Detail & Related papers  (2020-05-24T00:03:27Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.