Adversarial Attack on ModelNet40
100ASRNoPain-PD
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| NoPain-PDSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 100 | 0.0022 | 0.026 | |
| NoPain-PFSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 97.7 | 0.0023 | 0.028 | |
| CoSAVictim Network=PointNet, Source Network=PointNet, Attack Budget (epsilon)=0.18, Defense Strategy=SRS2026.01 | 95.2 | — | — | |
| SI-ADVSurrogate Model=PointNet++, Target Model=PCT2025.02 | 91.3 | 0.0026 | 8.9 | |
| NoPain-PDSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 88.7 | 0.0025 | 0.026 | |
| NoPain-PFSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 88.6 | 0.0028 | 0.028 | |
| NoPain-PDSurrogate Model=PointNet++, Target Model=PCT2025.02 | 85.7 | 0.0027 | 0.026 | |
| NoPain-PDSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 82.8 | 0.0024 | 0.026 | |
| NoPain-PFSurrogate Model=PointNet++, Target Model=PCT2025.02 | 81.7 | 0.0029 | 0.028 | |
| NoPain-PFSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 72.2 | 0.0032 | 0.028 | |
| SI-ADVSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 69.5 | 0.0024 | 8.9 | |
| SI-ADVSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 67.3 | 0.0022 | 8.9 | |
| CoSAVictim Network=DGCNN, Source Network=PointNet, Attack Budget (epsilon)=0.45, Defense Strategy=SRS2026.01 | 59.8 | — | — | |
| CoSAVictim Network=DGCNN, Source Network=PointNet, Attack Budget (epsilon)=0.45, Defense Strategy=SOR2026.01 | 57.9 | — | — | |
| SI-ADVSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 54.5 | 0.0022 | 8.9 | |
| CFGVictim Network=DGCNN, Source Network=PointNet, Attack Budget (epsilon)=0.45, Defense Strategy=SRS2026.01 | 54.3 | — | — | |
| CFGVictim Network=DGCNN, Source Network=PointNet, Attack Budget (epsilon)=0.45, Defense Strategy=SOR2026.01 | 51.7 | — | — | |
| HIT-ADVSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 50.2 | 0.033 | 7.5 | |
| SS-attackSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 44.4 | 0.0039 | 51.5 | |
| CoSAVictim Network=PointNet, Source Network=PointNet, Attack Budget (epsilon)=0.18, Defense Strategy=SOR2026.01 | 42.3 | — | — | |
| AOFSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 39.7 | 0.0035 | 12.5 | |
| CoSAVictim Network=PointNet, Source Network=PointNet, Attack Budget (epsilon)=0.18, Defense Strategy=DUP-Net2026.01 | 37.1 | — | — | |
| SS-attackSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 32 | 0.0034 | 51.5 | |
| AdvPCSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 30 | 0.0014 | 6.2 | |
| AOFSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 28.1 | 0.0029 | 12.5 | |
| 3D-AdvVictim Network=PointNet, Source Network=PointNet, Attack Budget (epsilon)=0.18, Defense Strategy=SRS2026.01 | 26.6 | — | — | |
| SS-attackSurrogate Model=PointNet++, Target Model=PCT2025.02 | 23.5 | 0.0038 | 51.5 | |
| CoSAVictim Network=PointNet, Source Network=PointNet, Attack Budget (epsilon)=0.18, Defense Strategy=AT2026.01 | 23.5 | — | — | |
| AdvPCSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 23.3 | 0.0011 | 6.2 | |
| HIT-ADVSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 22.3 | 0.0301 | 7.5 | |
| PF-AttackSource Model=DGCNN, Victim Model=PointNet, epsilon=0.182026.04 | 21.3 | — | — | |
| Topo-ADVSource Model=DGCNN, Victim Model=PointNet, epsilon=0.182026.04 | 21.2 | — | — | |
| AdvPCSource Model=DGCNN, Victim Model=PointNet, epsilon=0.182026.04 | 19.6 | — | — | |
| AOFSurrogate Model=PointNet++, Target Model=PCT2025.02 | 18.6 | 0.0032 | 12.5 | |
| 3D-AdvVictim Network=PointNet, Source Network=PointNet, Attack Budget (epsilon)=0.18, Defense Strategy=SOR2026.01 | 17.5 | — | — | |
| AdvPCSurrogate Model=PointNet++, Target Model=PCT2025.02 | 15.8 | 0.0011 | 6.2 | |
| SS-attackSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 15.7 | 0.0021 | 51.5 | |
| HIT-ADVSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 15 | 0.0112 | 7.5 | |
| AOFSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 13.7 | 0.0013 | 12.5 | |
| AdvPCSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 13 | 0.0005 | 6.2 | |
| 3D-AdvVictim Network=PointNet, Source Network=PointNet, Attack Budget (epsilon)=0.18, Defense Strategy=DUP-Net2026.01 | 12.6 | — | — | |
| HIT-ADVSurrogate Model=PointNet++, Target Model=PCT2025.02 | 9.2 | 0.0063 | 7.5 | |
| 3D-AdvSource Model=DGCNN, Victim Model=PointNet, epsilon=0.182026.04 | 9.2 | — | — | |
| KNNSource Model=DGCNN, Victim Model=PointNet, epsilon=0.182026.04 | 7.2 | — | — | |
| 3D-AdvVictim Network=PointNet, Source Network=PointNet, Attack Budget (epsilon)=0.18, Defense Strategy=AT2026.01 | 5 | — | — | |
| GeoA3Source Model=DGCNN, Victim Model=PointNet, epsilon=0.182026.04 | 4.4 | — | — |