notesum.ai

Published at December 10

Stealthy and Robust Backdoor Attack against 3D Point Clouds through Additional Point Features

cs.CV

Released Date: December 10, 2024

Authors: Xiaoyang Ning¹, Qing Xie, Jinyu Xu, Wenbo Jiang, Jiachen Li, Yanchun Ma

Aff.: ¹School of Computer Science and Artificial Intelligence, Wuhan University of Technology

Arxiv: http://arxiv.org/pdf/2412.07511v1

Refer to caption

Datasets	Attacks	PointNet		PointNet++		DGCNN		PointCNN		PCT		PT
Datasets	Attacks	ACC	ASR	ACC	ASR	ACC	ASR	ACC	ASR	ACC	ASR	ACC	ASR
KITTI	No attack	86.70	–	86.72	–	86.54	–	85.30	–	86.10	–	86.83	–
	PointBA-I	86.80	99.91	86.91	99.99	86.48	99.99	85.10	93.06	85.97	99.93	86.69	99.94
	PointBA-O	85.74	62.76	87.22	91.92	86.67	77.27	85.39	86.74	86.01	81.05	86.39	68.53
	IRBA	86.15	74.26	86.96	89.54	86.22	69.55	85.62	86.17	86.42	59.31	86.33	66.19
	MirrorAttack	86.13	86.05	86.24	99.38	85.55	97.74	84.31	97.72	85.87	99.50	85.66	98.72
	SRBA (Ours)	86.50	98.68	87.04	98.77	86.39	98.86	85.04	98.41	85.86	99.54	86.14	98.85
ModelNet10	No attack	93.64	–	94.41	–	93.97	–	92.65	–	94.52	–	94.30	–
	PointBA-I	93.09	100	94.85	100	93.75	100	92.32	97.79	94.08	100	93.86	99.75
	PointBA-O	92.98	91.67	94.30	98.65	93.97	93.69	91.67	93.63	93.86	87.62	94.74	99.51
	IRBA	93.64	92.83	94.30	96.08	93.75	90.44	91.97	81.99	92.87	75.86	93.64	91.91
	MirrorAttack	92.96	68.63	92.65	99.26	93.20	99.26	91.10	97.67	92.43	93.75	93.20	98.90
	SRBA (Ours)	93.31	99.02	94.19	100	94.08	98.90	92.32	99.63	94.08	100	93.86	99.75
ModelNet40	No attack	90.32	–	92.27	–	92.09	–	87.52	–	91.28	–	92.08	–
	PointBA-I	90.60	99.79	91.76	99.87	91.45	99.92	86.31	98.38	90.26	99.83	92.02	99.79
	PointBA-O	89.48	88.68	91.84	93.77	91.64	89.81	87.45	73.55	91.04	89.06	91.36	94.02
	IRBA	89.12	78.56	92.08	94.11	91.81	78.51	85.54	78.09	90.38	69.65	91.47	85.25
	MirrorAttack	88.72	64.84	91.42	99.12	91.67	98.86	84.35	99.87	91.03	95.62	90.26	97.77
	SRBA (Ours)	90.72	94.40	92.02	98.86	91.47	97.85	86.47	96.84	90.71	96.80	91.07	99.12