English
Related papers

Related papers: Transferable and Undefendable Point Cloud Attacks …

200 papers

Robust environment perception is critical for autonomous cars, and adversarial defenses are the most effective and widely studied ways to improve the robustness of environment perception. However, all of previous defense methods decrease…

Computer Vision and Pattern Recognition · Computer Science 2022-06-07 Jinlai Zhang , Yinpeng Dong , Binbin Liu , Bo Ouyang , Jihong Zhu , Minchi Kuang , Houqing Wang , Yanmei Meng

Deep neural networks are prone to adversarial examples that maliciously alter the network's outcome. Due to the increasing popularity of 3D sensors in safety-critical systems and the vast deployment of deep learning models for 3D point…

Computer Vision and Pattern Recognition · Computer Science 2021-10-19 Itai Lang , Uriel Kotlicki , Shai Avidan

Transferable adversarial attacks on point clouds remain challenging, as existing methods often rely on model-specific gradients or heuristics that limit generalization to unseen architectures. In this paper, we rethink adversarial…

Computer Vision and Pattern Recognition · Computer Science 2026-02-02 Keke Tang , Xianheng Liu , Weilong Peng , Xiaofei Wang , Daizong Liu , Peican Zhu , Can Lu , Zhihong Tian

Gradient-based adversarial attacks are widely used to evaluate the robustness of 3D point cloud classifiers, yet they often rely on uniform update rules that neglect point-wise heterogeneity, leading to perceptible perturbations. We propose…

Computer Vision and Pattern Recognition · Computer Science 2026-03-20 Jun Chen , Xinke Li , Mingyue Xu , Chongshou Li , Truiani Li

Recent research has revealed that the security of deep neural networks that directly process 3D point clouds to classify objects can be threatened by adversarial samples. Although existing adversarial attack methods achieve high success…

Computer Vision and Pattern Recognition · Computer Science 2021-10-11 Atrin Arya , Hanieh Naderi , Shohreh Kasaei

Deep learning has successfully solved a wide range of tasks in 2D vision as a dominant AI technique. Recently, deep learning on 3D point clouds is becoming increasingly popular for addressing various tasks in this field. Despite remarkable…

Computer Vision and Pattern Recognition · Computer Science 2023-12-04 Hanieh Naderi , Ivan V. Bajić

Deep neural networks are vulnerable to adversarial examples, which can mislead classifiers by adding imperceptible perturbations. An intriguing property of adversarial examples is their good transferability, making black-box attacks…

Computer Vision and Pattern Recognition · Computer Science 2019-04-08 Yinpeng Dong , Tianyu Pang , Hang Su , Jun Zhu

Deep learning models are known to be vulnerable to adversarial examples crafted by adding human-imperceptible perturbations on benign images. Many existing adversarial attack methods have achieved great white-box attack performance, but…

Computer Vision and Pattern Recognition · Computer Science 2021-03-22 Xiaosen Wang , Jiadong Lin , Han Hu , Jingdong Wang , Kun He

Adversarial transferability enables black-box attacks on unknown victim deep neural networks (DNNs), rendering attacks viable in real-world scenarios. Current transferable attacks create adversarial perturbation over the entire image,…

Computer Vision and Pattern Recognition · Computer Science 2023-12-27 Shangbo Wu , Yu-an Tan , Yajie Wang , Ruinan Ma , Wencong Ma , Yuanzhang Li

Recently, 3D deep learning models have been shown to be susceptible to adversarial attacks like their 2D counterparts. Most of the state-of-the-art (SOTA) 3D adversarial attacks perform perturbation to 3D point clouds. To reproduce these…

Computer Vision and Pattern Recognition · Computer Science 2021-11-17 Jinlai Zhang , Lyujie Chen , Binbin Liu , Bo Ouyang , Qizhi Xie , Jihong Zhu , Weiming Li , Yanmei Meng

Transferable adversarial attack has drawn increasing attention due to their practical threaten to real-world applications. In particular, the feature-level adversarial attack is one recent branch that can enhance the transferability via…

Computer Vision and Pattern Recognition · Computer Science 2022-04-25 Xianglong , Yuezun Li , Haipeng Qu , Junyu Dong

Deep neural networks, particularly face recognition models, have been shown to be vulnerable to both digital and physical adversarial examples. However, existing adversarial examples against face recognition systems either lack…

Computer Vision and Pattern Recognition · Computer Science 2021-05-10 Bangjie Yin , Wenxuan Wang , Taiping Yao , Junfeng Guo , Zelun Kong , Shouhong Ding , Jilin Li , Cong Liu

Adversarial attack methods for 3D point cloud classification reveal the vulnerabilities of point cloud recognition models. This vulnerability could lead to safety risks in critical applications that use deep learning models, such as…

Cryptography and Security · Computer Science 2025-07-30 Ruiyang Zhao , Bingbing Zhu , Chuxuan Tong , Xiaoyi Zhou , Xi Zheng

Deep neural networks for 3D point clouds have been demonstrated to be vulnerable to adversarial examples. Previous 3D adversarial attack methods often exploit certain information about the target models, such as model parameters or outputs,…

Computer Vision and Pattern Recognition · Computer Science 2025-08-22 Shuchao Pang , Zhenghan Chen , Shen Zhang , Liming Lu , Siyuan Liang , Anan Du , Yongbin Zhou

Deep learning drives major advances in autonomous driving (AD), where object detectors are central to perception. However, adversarial attacks pose significant threats to the reliability and safety of these systems, with physical…

Computer Vision and Pattern Recognition · Computer Science 2026-04-28 Zihui Zhu , Ziqi Zhou , Yichen Wang , Lulu Xue , Minghui Li , Shengshan Hu

Point cloud classifiers with rotation robustness have been widely discussed in the 3D deep learning community. Most proposed methods either use rotation invariant descriptors as inputs or try to design rotation equivariant networks.…

Computer Vision and Pattern Recognition · Computer Science 2022-03-09 Robin Wang , Yibo Yang , Dacheng Tao

In this study, we delve into the robustness of neural network-based LiDAR point cloud tracking models under adversarial attacks, a critical aspect often overlooked in favor of performance enhancement. These models, despite incorporating…

Computer Vision and Pattern Recognition · Computer Science 2025-10-23 Shengjing Tian , Xiantong Zhao , Yuhao Bian , Yinan Han , Bin Liu

With recent developments of convolutional neural networks, deep learning for 3D point clouds has shown significant progress in various 3D scene understanding tasks, e.g., object recognition, semantic segmentation. In a safety-critical…

Computer Vision and Pattern Recognition · Computer Science 2021-09-20 Jaeyeon Kim , Binh-Son Hua , Duc Thanh Nguyen , Sai-Kit Yeung

Unsupervised domain adaptation (UDA) frameworks have shown good generalization capabilities for 3D point cloud semantic segmentation models on clean data. However, existing works overlook adversarial robustness when the source domain itself…

Computer Vision and Pattern Recognition · Computer Science 2025-04-15 Haosheng Li , Junjie Chen , Yuecong Xu , Kemi Ding

Many existing adversarial attacks generate $L_p$-norm perturbations on image RGB space. Despite some achievements in transferability and attack success rate, the crafted adversarial examples are easily perceived by human eyes. Towards…

Computer Vision and Pattern Recognition · Computer Science 2023-12-01 Jianqi Chen , Hao Chen , Keyan Chen , Yilan Zhang , Zhengxia Zou , Zhenwei Shi