Adversarial Defense on ModelNet40
99.8ASR (%)No Defense
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| No DefenseSurrogate=PointNet2023.08 | 99.8 | 18.9 | 2.09 | 4.46 | 0.8 | |
| No DefenseSurrogate=GDANet2023.08 | 99.4 | 95.6 | 4.16 | 4.67 | 1.27 | |
| No DefenseSurrogate=DGCNN2023.08 | 99.3 | 106.7 | 3.18 | 4.54 | 1.22 | |
| LPF-DefenseSurrogate=PointNet2023.08 | 98.2 | 123.1 | 5.36 | 4.56 | 1.41 | |
| SRSSurrogate=PointNet, Retain Rate=30%2023.08 | 97.6 | 93.5 | 1.76 | 4.43 | 0.72 | |
| SRSSurrogate=PointNet, Retain Rate=50%2023.08 | 94 | 190.9 | 1.67 | 4.42 | 0.71 | |
| SRSSurrogate=DGCNN, Retain Rate=50%2023.08 | 78.4 | 566.3 | 1.21 | 3.59 | 0.69 | |
| SORSurrogate=PointNet2023.08 | 78.4 | 592.9 | 9.26 | 4.33 | 2.74 | |
| SRSSurrogate=GDANet, Retain Rate=50%2023.08 | 78.1 | 595.4 | 1.7 | 4.16 | 0.78 | |
| SORSurrogate=DGCNN2023.08 | 75.6 | 795.6 | 2.59 | 3.48 | 1.65 | |
| RefocusingSurrogate=PointNet, Threshold=Fixed (600)2023.08 | 74.1 | 693.6 | 11.33 | 4.7 | 2.66 | |
| SRSSurrogate=GDANet, Retain Rate=30%2023.08 | 72.4 | 714 | 2.19 | 4.42 | 0.92 | |
| RefocusingSurrogate=PointNet, Threshold=Adaptive2023.08 | 72 | 730.4 | 11.13 | 4.68 | 2.72 | |
| SORSurrogate=GDANet2023.08 | 69.9 | 913.2 | 3.67 | 3.98 | 1.78 | |
| SRSSurrogate=DGCNN, Retain Rate=30%2023.08 | 68.6 | 790.3 | 1.64 | 4.11 | 0.85 | |
| LPF-DefenseSurrogate=GDANet2023.08 | 52.6 | 1,071.48 | 2.18 | 4.26 | 0.94 | |
| LPF-DefenseSurrogate=DGCNN2023.08 | 47.8 | 1,148 | 1.84 | 4.09 | 0.93 | |
| RefocusingSurrogate=DGCNN, Threshold=Fixed (600)2023.08 | 43.5 | 1,265 | 2.3 | 4.16 | 1.11 | |
| RefocusingSurrogate=DGCNN, Threshold=Adaptive2023.08 | 37.5 | 1,376.1 | 2.28 | 4.06 | 1.17 | |
| RefocusingSurrogate=GDANet, Threshold=Adaptive2023.08 | 34.6 | 1,425.5 | 2.13 | 4.21 | 1.03 | |
| RefocusingSurrogate=GDANet, Threshold=Fixed (600)2023.08 | 32.9 | 1,447.3 | 2.18 | 4.32 | 1.03 |