Point Cloud Adversarial Perturbation Generation for Adversarial Attacks
In recent years, 3D model analysis has made a revolutionary development. Point cloud contains rich 3D object geometry information, which is an important 3D object data format widely used in many applications. However, the irregularity and disorder of the point cloud also cause its vulnerability to e...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2023-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/10006822/ |
| _version_ | 1797955498079682560 |
|---|---|
| author | Fengmei He Yihuai Chen Ruidong Chen Weizhi Nie |
| author_facet | Fengmei He Yihuai Chen Ruidong Chen Weizhi Nie |
| author_sort | Fengmei He |
| collection | DOAJ |
| description | In recent years, 3D model analysis has made a revolutionary development. Point cloud contains rich 3D object geometry information, which is an important 3D object data format widely used in many applications. However, the irregularity and disorder of the point cloud also cause its vulnerability to environmental impact, which may bring security risks to safety-critical 3D applications such as self-driving tasks. Recently, there are only a few methods engaged to attack the point cloud models to improve the robustness of point cloud analysis models. Most of them only focus on the attack by adjusting the points but ignore learning the perturbation’s distribution characteristics. In this work, we propose a novel framework to attack point cloud models. By introducing the GAN structure, we train a generator to produce slight point-to-point perturbations according to the sample’s raw classification, which can effectively boost the attack performance. Meanwhile, we propose an outlier removal module to constrain the magnitude of the generated perturbation. The goal is to guarantee the visual quality of generation samples to improve the difficulty of training and further improve the robustness of 3D analysis models. Finally, we carry out extensive attack experiments, and the related results demonstrate the effectiveness of our proposed method. |
| first_indexed | 2024-04-10T23:35:07Z |
| format | Article |
| id | doaj.art-800044d5c00241589680993218d31da7 |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2024-04-10T23:35:07Z |
| publishDate | 2023-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-800044d5c00241589680993218d31da72023-01-12T00:00:20ZengIEEEIEEE Access2169-35362023-01-01112767277410.1109/ACCESS.2023.323431310006822Point Cloud Adversarial Perturbation Generation for Adversarial AttacksFengmei He0Yihuai Chen1Ruidong Chen2https://orcid.org/0000-0002-9098-3316Weizhi Nie3https://orcid.org/0000-0002-0578-8138Department of Automation Electrical Engineering, Tianjing University of Technology and Education, Tianjin, ChinaCollege of Information Technology, Wenzhou Vocational College of Science and Technology and Education, Wenzhou Academy of Agricultural Sciences, Wenzhou, ChinaThe School of Electrical and Information Engineering, Tianjin University, Tianjin, ChinaThe School of Electrical and Information Engineering, Tianjin University, Tianjin, ChinaIn recent years, 3D model analysis has made a revolutionary development. Point cloud contains rich 3D object geometry information, which is an important 3D object data format widely used in many applications. However, the irregularity and disorder of the point cloud also cause its vulnerability to environmental impact, which may bring security risks to safety-critical 3D applications such as self-driving tasks. Recently, there are only a few methods engaged to attack the point cloud models to improve the robustness of point cloud analysis models. Most of them only focus on the attack by adjusting the points but ignore learning the perturbation’s distribution characteristics. In this work, we propose a novel framework to attack point cloud models. By introducing the GAN structure, we train a generator to produce slight point-to-point perturbations according to the sample’s raw classification, which can effectively boost the attack performance. Meanwhile, we propose an outlier removal module to constrain the magnitude of the generated perturbation. The goal is to guarantee the visual quality of generation samples to improve the difficulty of training and further improve the robustness of 3D analysis models. Finally, we carry out extensive attack experiments, and the related results demonstrate the effectiveness of our proposed method.https://ieeexplore.ieee.org/document/10006822/3D modelpoint cloudadversarial attackgenerative adversarial network |
| spellingShingle | Fengmei He Yihuai Chen Ruidong Chen Weizhi Nie Point Cloud Adversarial Perturbation Generation for Adversarial Attacks IEEE Access 3D model point cloud adversarial attack generative adversarial network |
| title | Point Cloud Adversarial Perturbation Generation for Adversarial Attacks |
| title_full | Point Cloud Adversarial Perturbation Generation for Adversarial Attacks |
| title_fullStr | Point Cloud Adversarial Perturbation Generation for Adversarial Attacks |
| title_full_unstemmed | Point Cloud Adversarial Perturbation Generation for Adversarial Attacks |
| title_short | Point Cloud Adversarial Perturbation Generation for Adversarial Attacks |
| title_sort | point cloud adversarial perturbation generation for adversarial attacks |
| topic | 3D model point cloud adversarial attack generative adversarial network |
| url | https://ieeexplore.ieee.org/document/10006822/ |
| work_keys_str_mv | AT fengmeihe pointcloudadversarialperturbationgenerationforadversarialattacks AT yihuaichen pointcloudadversarialperturbationgenerationforadversarialattacks AT ruidongchen pointcloudadversarialperturbationgenerationforadversarialattacks AT weizhinie pointcloudadversarialperturbationgenerationforadversarialattacks |