English
Related papers

Related papers: Rethinking Gradient-based Adversarial Attacks on P…

200 papers

Throughout the past five years, the susceptibility of neural networks to minimal adversarial perturbations has moved from a peculiar phenomenon to a core issue in Deep Learning. Despite much attention, however, progress towards more robust…

Machine Learning · Statistics 2019-12-13 Wieland Brendel , Jonas Rauber , Matthias Kümmerer , Ivan Ustyuzhaninov , Matthias Bethge

Deep neural networks (DNNs) have been shown to be vulnerable to adversarial attacks. Recently, 3D adversarial attacks, especially adversarial attacks on point clouds, have elicited mounting interest. However, adversarial point clouds…

Computer Vision and Pattern Recognition · Computer Science 2022-01-27 Binbin Liu , Jinlai Zhang , Lyujie Chen , Jihong Zhu

With the maturity of depth sensors, the vulnerability of 3D point cloud models has received increasing attention in various applications such as autonomous driving and robot navigation. Previous 3D adversarial attackers either follow the…

Computer Vision and Pattern Recognition · Computer Science 2023-08-16 Yunbo Tao , Daizong Liu , Pan Zhou , Yulai Xie , Wei Du , Wei Hu

Point cloud classifiers with rotation robustness have been widely discussed in the 3D deep learning community. Most proposed methods either use rotation invariant descriptors as inputs or try to design rotation equivariant networks.…

Computer Vision and Pattern Recognition · Computer Science 2022-03-09 Robin Wang , Yibo Yang , Dacheng Tao

3D object classification and segmentation using deep neural networks has been extremely successful. As the problem of identifying 3D objects has many safety-critical applications, the neural networks have to be robust against adversarial…

Computer Vision and Pattern Recognition · Computer Science 2019-07-01 Daniel Liu , Ronald Yu , Hao Su

Deep neural networks for 3D point cloud understanding have achieved remarkable success in object classification and recognition, yet recent work shows that these models remain highly vulnerable to adversarial perturbations. Existing 3D…

Computer Vision and Pattern Recognition · Computer Science 2026-04-14 Gayathry Chandramana Krishnan Nampoothiry , Raghuram Venkatapuram , Anirban Ghosh , Ayan Dutta

Deep neural networks are known to be vulnerable to adversarial examples which are carefully crafted instances to cause the models to make wrong predictions. While adversarial examples for 2D images and CNNs have been extensively studied,…

Cryptography and Security · Computer Science 2019-07-15 Chong Xiang , Charles R. Qi , Bo Li

Adversarial attacks on point clouds often impose strict geometric constraints to preserve plausibility; however, such constraints inherently limit transferability and undefendability. While deformation offers an alternative, existing…

Computer Vision and Pattern Recognition · Computer Science 2025-07-02 Keke Tang , Ziyong Du , Weilong Peng , Xiaofei Wang , Peican Zhu , Ligang Liu , Zhihong Tian

The wide adaption of 3D point-cloud data in safety-critical applications such as autonomous driving makes adversarial samples a real threat. Existing adversarial attacks on point clouds achieve high success rates but modify a large number…

Cryptography and Security · Computer Science 2020-11-25 Yiren Zhao , Ilia Shumailov , Robert Mullins , Ross Anderson

In recent years, deep neural networks demonstrated state-of-the-art performance in a large variety of tasks and therefore have been adopted in many applications. On the other hand, the latest studies revealed that neural networks are…

Computer Vision and Pattern Recognition · Computer Science 2018-12-07 Jingyang Zhang , Hsin-Pai Cheng , Chunpeng Wu , Hai Li , Yiran Chen

Recognizing 3D point cloud plays a pivotal role in many real-world applications. However, deploying 3D point cloud deep learning model is vulnerable to adversarial attacks. Despite many efforts into developing robust model by adversarial…

Computer Vision and Pattern Recognition · Computer Science 2024-09-24 Jinpeng Lin , Xulei Yang , Tianrui Li , Xun Xu

Robust environment perception is critical for autonomous cars, and adversarial defenses are the most effective and widely studied ways to improve the robustness of environment perception. However, all of previous defense methods decrease…

Computer Vision and Pattern Recognition · Computer Science 2022-06-07 Jinlai Zhang , Yinpeng Dong , Binbin Liu , Bo Ouyang , Jihong Zhu , Minchi Kuang , Houqing Wang , Yanmei Meng

Point clouds are extensively employed in a variety of real-world applications such as robotics, autonomous driving and augmented reality. Despite the recent success of point cloud neural networks, especially for safety-critical tasks, it is…

Computer Vision and Pattern Recognition · Computer Science 2024-03-12 Mert Gulsen , Batuhan Cengiz , Yusuf H. Sahin , Gozde Unal

Deep neural networks are vulnerable to adversarial examples that mislead the models with imperceptible perturbations. Though adversarial attacks have achieved incredible success rates in the white-box setting, most existing adversaries…

Artificial Intelligence · Computer Science 2021-08-16 Xiaosen Wang , Kun He

Deep 3D point cloud models are sensitive to adversarial attacks, which poses threats to safety-critical applications such as autonomous driving. Robust training and defend-by-denoising are typical strategies for defending adversarial…

Computer Vision and Pattern Recognition · Computer Science 2023-09-25 Kui Zhang , Hang Zhou , Jie Zhang , Qidong Huang , Weiming Zhang , Nenghai Yu

Transferable adversarial attacks on point clouds remain challenging, as existing methods often rely on model-specific gradients or heuristics that limit generalization to unseen architectures. In this paper, we rethink adversarial…

Computer Vision and Pattern Recognition · Computer Science 2026-02-02 Keke Tang , Xianheng Liu , Weilong Peng , Xiaofei Wang , Daizong Liu , Peican Zhu , Can Lu , Zhihong Tian

Efficient and effective attacks are crucial for reliable evaluation of defenses, and also for developing robust models. Projected Gradient Descent (PGD) attack has been demonstrated to be one of the most successful adversarial attacks.…

Computer Vision and Pattern Recognition · Computer Science 2022-02-01 Mengting Xu , Tao Zhang , Zhongnian Li , Daoqiang Zhang

Utilizing 3D point cloud data has become an urgent need for the deployment of artificial intelligence in many areas like facial recognition and self-driving. However, deep learning for 3D point clouds is still vulnerable to adversarial…

Computer Vision and Pattern Recognition · Computer Science 2021-11-22 Xuelong Dai , Yanjie Li , Hua Dai , Bin Xiao

Studying adversarial attacks on point clouds is essential for evaluating and improving the robustness of 3D deep learning models. However, most existing attack methods are developed under ideal white-box settings and often suffer from…

Computer Vision and Pattern Recognition · Computer Science 2025-07-28 Keke Tang , Yuze Gao , Weilong Peng , Xiaofei Wang , Meie Fang , Peican Zhu

Despite remarkable performance across a broad range of tasks, neural networks have been shown to be vulnerable to adversarial attacks. Many works focus on adversarial attacks and defenses on 2D images, but few focus on 3D point clouds. In…

Computer Vision and Pattern Recognition · Computer Science 2020-02-28 Yu Zhang , Gongbo Liang , Tawfiq Salem , Nathan Jacobs