D3AdvM: A direct 3D adversarial sample attack inside mesh data

Xu, Huangxinxin; He, Fazhi; Fan, Linkun; Bai, Junwei

doi:10.1016/j.cagd.2022.102122

Cited by 8 publications

(1 citation statement)

References 58 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Although the prospects look bright, DNN has been proven to be vulnerable to a carefully crafted adversarial attack, no matter whether in the feld of 2D images [12][13][14][15][16][17][18][19][20] or 3D point clouds [21][22][23][24][25]. Te aim of adversarial attack is to generate fake samples that will not cause people to be alarmed but will mislead DNN to make wrong decision, as shown in Figure 1(b).…”

Section: Introductionmentioning

confidence: 99%

Explore Gap between 3D DNN and Human Vision Utilizing Fooling Point Cloud Generated by MEHHO

Fan

et al. 2023

Security and Communication Networks

Self Cite

View full text Add to dashboard Cite

Deep neural network (DNN) has replaced humans to make decisions in many security-critical senses such as face recognition and automatic drive. Essentially, researchers try to teach DNN to simulate human behavior. However, many evidences show that there is a huge gap between humans and DNN, which has raised lots of security concern. Adversarial sample is a common way to show the gap between DNN and humans in recognizing objects with similar appearance. However, we argue that the difference is not limited to adversarial samples. Hence, this paper explores such differences in a new way by generating fooling samples in 3D point cloud domain. Specifically, the fooling point cloud is hardly recognized by human vision but is classified to the target class by the victim 3D point cloud DNN (3D DNN) with more than 99.99 % confidence. Furthermore, to search for the optimal fooling point cloud, a new evolutionary algorithm named Multielites Harris Hawk Optimization (MEHHO) with enhanced exploitation ability is designed. On one hand, our experiments demonstrate that: (1) 3D DNN tends to learn high-level features of one object; (2) 3D DNN that makes decisions relying on more points is more robust; and (3) the gap is hardly learned by 3D DNN. On the other hand, the comparison experiments show that the designed MEHHO outperforms the SOTA evolutionary algorithms w.r.t. statistics and convergence results.

show abstract