Black-box Adversarial Attack on ModelNet40
0.991ASROurs
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| OursDefense=Drop(30%), Target Model=PointNet2024.11 | 0.991 | 0.0138 | 0.0012 | 0.8237 | |
| OursDefense=Drop(50%), Target Model=SimpleView2024.11 | 0.982 | 0.007 | 0.0023 | 0.7459 | |
| OursDefense=SOR, Target Model=PAConv2024.11 | 0.977 | 0.0027 | 0.0012 | 0.6549 | |
| 3DHackerDefense=Drop(50%), Target Model=SimpleView2024.11 | 0.976 | 0.0066 | 0.0037 | 0.757 | |
| OursDefense=Drop(50%), Target Model=PointNet2024.11 | 0.973 | 0.0146 | 0.0015 | 0.8194 | |
| OursDefense=SOR, Target Model=SimpleView2024.11 | 0.973 | 0.0089 | 0.0024 | 1.0837 | |
| 3DHackerDefense=Drop(30%), Target Model=PointNet2024.11 | 0.972 | 0.0179 | 0.0016 | 0.8391 | |
| SI-AdvbDefense=Drop(30%), Target Model=PointNet2024.11 | 0.969 | 0.0426 | 0.0003 | 1.368 | |
| OursDefense=Drop(30%), Target Model=PAConv2024.11 | 0.964 | 0.0043 | 0.0015 | 0.7964 | |
| OursDefense=Drop(50%), Target Model=PAConv2024.11 | 0.962 | 0.0069 | 0.0017 | 0.797 | |
| 3DHackerDefense=SOR, Target Model=PAConv2024.11 | 0.955 | 0.0028 | 0.0011 | 0.6744 | |
| 3DHackerDefense=Drop(50%), Target Model=PointNet2024.11 | 0.954 | 0.0182 | 0.0023 | 0.8328 | |
| SI-AdvbDefense=SOR, Target Model=SimpleView2024.11 | 0.952 | 0.0375 | 0.0009 | 3.1333 | |
| 3DHackerDefense=Drop(30%), Target Model=PAConv2024.11 | 0.952 | 0.0061 | 0.0017 | 0.829 | |
| OursDefense=Drop(30%), Target Model=SimpleView2024.11 | 0.949 | 0.0083 | 0.0025 | 0.9594 | |
| OursDefense=N2S3D, Target Model=PAConv2024.11 | 0.946 | 0.0029 | 0.0013 | 0.6841 | |
| SI-AdvbDefense=SOR, Target Model=PAConv2024.11 | 0.944 | 0.0359 | 0.0005 | 1.964 | |
| OursDefense=SOR, Target Model=CurveNet2024.11 | 0.94 | 0.0114 | 0.0015 | 1.1563 | |
| OursDefense=SOR, Target Model=PointNet2024.11 | 0.938 | 0.0109 | 0.0013 | 0.9262 | |
| 3DHackerDefense=Drop(50%), Target Model=PAConv2024.11 | 0.938 | 0.0136 | 0.0022 | 0.7261 | |
| SI-AdvbDefense=Drop(50%), Target Model=PointNet2024.11 | 0.936 | 0.042 | 0.0002 | 1.3844 | |
| 3DHackerDefense=SOR, Target Model=SimpleView2024.11 | 0.936 | 0.0083 | 0.0034 | 1.0873 | |
| OursDefense=LPC, Target Model=SimpleView2024.11 | 0.935 | 0.0136 | 0.0019 | 1.4893 | |
| OursDefense=LPC, Target Model=PAConv2024.11 | 0.931 | 0.0063 | 0.0014 | 1.024 | |
| OursDefense=UPP, Target Model=PAConv2024.11 | 0.925 | 0.0068 | 0.0015 | 1.0531 | |
| OursDefense=N2S3D, Target Model=SimpleView2024.11 | 0.921 | 0.0094 | 0.0028 | 1.1205 | |
| OursDefense=N2S3D, Target Model=PointNet2024.11 | 0.912 | 0.0104 | 0.0015 | 0.9542 | |
| OursDefense=UPP, Target Model=SimpleView2024.11 | 0.912 | 0.0142 | 0.0021 | 1.5242 | |
| 3DHackerDefense=Drop(30%), Target Model=SimpleView2024.11 | 0.912 | 0.0092 | 0.0042 | 0.9638 | |
| OursDefense=Drop(50%), Target Model=CurveNet2024.11 | 0.905 | 0.0157 | 0.0016 | 0.8322 | |
| 3DHackerDefense=SOR, Target Model=PointNet2024.11 | 0.904 | 0.01 | 0.0023 | 1.2486 | |
| SI-AdvbDefense=SOR, Target Model=PointNet2024.11 | 0.897 | 0.042 | 0.0009 | 3.0193 | |
| OursDefense=LPC, Target Model=CurveNet2024.11 | 0.896 | 0.0125 | 0.0013 | 1.2392 | |
| OursDefense=LPC, Target Model=PointNet2024.11 | 0.892 | 0.0131 | 0.0011 | 1.0857 | |
| OursDefense=N2S3D, Target Model=CurveNet2024.11 | 0.892 | 0.0125 | 0.0018 | 1.214 | |
| 3DHackerDefense=SOR, Target Model=CurveNet2024.11 | 0.892 | 0.0095 | 0.0023 | 1.1752 | |
| SI-AdvbDefense=SOR, Target Model=CurveNet2024.11 | 0.888 | 0.0351 | 0.0007 | 2.5402 | |
| OursDefense=SOR, Target Model=DGCNN2024.11 | 0.883 | 0.012 | 0.0025 | 1.0536 | |
| OursDefense=Drop(30%), Target Model=CurveNet2024.11 | 0.883 | 0.0126 | 0.0008 | 0.8469 | |
| OursDefense=UPP, Target Model=PointNet2024.11 | 0.881 | 0.0135 | 0.0012 | 1.0924 | |
| 3DHackerDefense=LPC, Target Model=SimpleView2024.11 | 0.881 | 0.0167 | 0.0031 | 1.8915 | |
| 3DHackerDefense=LPC, Target Model=PAConv2024.11 | 0.879 | 0.0132 | 0.0017 | 1.3695 | |
| OursDefense=UPP, Target Model=CurveNet2024.11 | 0.874 | 0.0135 | 0.0015 | 1.2854 | |
| OursDefense=SOR, Target Model=PointNet++2024.11 | 0.86 | 0.0213 | 0.0021 | 1.0644 | |
| OursDefense=Drop(30%), Target Model=DGCNN2024.11 | 0.857 | 0.0163 | 0.0025 | 0.7942 | |
| OursDefense=N2S3D, Target Model=DGCNN2024.11 | 0.854 | 0.0131 | 0.0028 | 1.0824 | |
| 3DHackerDefense=SOR, Target Model=DGCNN2024.11 | 0.854 | 0.0124 | 0.0031 | 1.2387 | |
| 3DHackerDefense=UPP, Target Model=PAConv2024.11 | 0.854 | 0.0145 | 0.0019 | 1.4502 | |
| SI-AdvbDefense=LPC, Target Model=PAConv2024.11 | 0.853 | 0.0478 | 0.0015 | 2.6436 | |
| SI-AdvbDefense=Drop(50%), Target Model=PAConv2024.11 | 0.848 | 0.039 | 0.0004 | 0.8537 | |
| OursDefense=N2S3D, Target Model=PointNet++2024.11 | 0.845 | 0.0205 | 0.0025 | 1.0931 | |
| 3DHackerDefense=LPC, Target Model=PointNet2024.11 | 0.845 | 0.0146 | 0.0018 | 1.3519 | |
| OursDefense=Drop(50%), Target Model=DGCNN2024.11 | 0.845 | 0.1437 | 0.0026 | 0.8231 | |
| 3DHackerDefense=LPC, Target Model=CurveNet2024.11 | 0.845 | 0.0151 | 0.0036 | 1.4257 | |
| 3DHackerDefense=Drop(50%), Target Model=CurveNet2024.11 | 0.834 | 0.0186 | 0.0031 | 0.7558 | |
| OursDefense=Drop(50%), Target Model=PointNet++2024.11 | 0.828 | 0.0239 | 0.0016 | 1.1348 | |
| 3DHackerDefense=SOR, Target Model=PointNet++2024.11 | 0.827 | 0.0218 | 0.0043 | 1.3759 | |
| 3DHackerDefense=Drop(30%), Target Model=CurveNet2024.11 | 0.825 | 0.0157 | 0.0034 | 0.8598 | |
| SI-AdvbDefense=LPC, Target Model=SimpleView2024.11 | 0.824 | 0.049 | 0.0021 | 2.9834 | |
| OursDefense=LPC, Target Model=PointNet++2024.11 | 0.823 | 0.0254 | 0.0016 | 1.0542 | |
| 3DHackerDefense=UPP, Target Model=SimpleView2024.11 | 0.823 | 0.0185 | 0.0035 | 1.9542 | |
| SI-AdvbDefense=LPC, Target Model=PointNet2024.11 | 0.821 | 0.0458 | 0.0012 | 2.7804 | |
| 3DHackerDefense=N2S3D, Target Model=PAConv2024.11 | 0.821 | 0.0035 | 0.0014 | 0.7542 | |
| 3DHackerDefense=UPP, Target Model=CurveNet2024.11 | 0.817 | 0.0168 | 0.0042 | 1.5432 | |
| OursDefense=UPP, Target Model=PointNet++2024.11 | 0.814 | 0.0261 | 0.0018 | 1.0855 | |
| 3DHackerDefense=N2S3D, Target Model=SimpleView2024.11 | 0.804 | 0.0102 | 0.0042 | 1.2531 | |
| 3DHackerDefense=UPP, Target Model=PointNet2024.11 | 0.802 | 0.0152 | 0.0019 | 1.421 | |
| SI-AdvbDefense=LPC, Target Model=CurveNet2024.11 | 0.802 | 0.0439 | 0.0014 | 2.7028 | |
| OursDefense=LPC, Target Model=DGCNN2024.11 | 0.796 | 0.0188 | 0.0024 | 1.1359 | |
| SI-AdvbDefense=Drop(50%), Target Model=CurveNet2024.11 | 0.792 | 0.0392 | 0.0007 | 1.1759 | |
| SI-AdvbDefense=SOR, Target Model=PointNet++2024.11 | 0.789 | 0.0436 | 0.0025 | 1.3843 | |
| 3DHackerDefense=Drop(30%), Target Model=DGCNN2024.11 | 0.785 | 0.0195 | 0.0033 | 1.1742 | |
| 3DHackerDefense=N2S3D, Target Model=CurveNet2024.11 | 0.785 | 0.0112 | 0.0031 | 1.325 | |
| 3DHackerDefense=N2S3D, Target Model=PointNet2024.11 | 0.784 | 0.0112 | 0.0025 | 1.325 | |
| OursDefense=UPP, Target Model=DGCNN2024.11 | 0.782 | 0.0194 | 0.0026 | 1.1837 | |
| 3DHackerDefense=Drop(50%), Target Model=PointNet++2024.11 | 0.774 | 0.0285 | 0.0032 | 1.4735 | |
| 3DHackerDefense=Drop(50%), Target Model=DGCNN2024.11 | 0.768 | 0.0172 | 0.0036 | 1.2914 | |
| OursDefense=Drop(30%), Target Model=PointNet++2024.11 | 0.765 | 0.0247 | 0.002 | 1.0236 | |
| 3DHackerDefense=LPC, Target Model=PointNet++2024.11 | 0.758 | 0.027 | 0.0029 | 1.3782 | |
| 3DHackerDefense=N2S3D, Target Model=DGCNN2024.11 | 0.756 | 0.0142 | 0.0034 | 1.3025 | |
| SI-AdvbDefense=Drop(50%), Target Model=DGCNN2024.11 | 0.752 | 0.0358 | 0.0004 | 0.6992 | |
| SI-AdvbDefense=Drop(30%), Target Model=PAConv2024.11 | 0.736 | 0.0402 | 0.0005 | 1.1979 | |
| 3DHackerDefense=UPP, Target Model=PointNet++2024.11 | 0.725 | 0.0284 | 0.0032 | 1.4022 | |
| SI-AdvbDefense=UPP, Target Model=PAConv2024.11 | 0.725 | 0.0485 | 0.0018 | 2.7104 | |
| SI-AdvbDefense=LPC, Target Model=PointNet++2024.11 | 0.724 | 0.0473 | 0.0014 | 2.7635 | |
| SI-AdvbDefense=SOR, Target Model=DGCNN2024.11 | 0.72 | 0.0341 | 0.0009 | 1.648 | |
| 3DHackerDefense=LPC, Target Model=DGCNN2024.11 | 0.718 | 0.0213 | 0.0031 | 1.4652 | |
| 3DHackerDefense=Drop(30%), Target Model=PointNet++2024.11 | 0.713 | 0.0298 | 0.0031 | 1.281 | |
| SI-AdvbDefense=Drop(30%), Target Model=DGCNN2024.11 | 0.712 | 0.04 | 0.0004 | 0.8598 | |
| SI-AdvbDefense=Drop(30%), Target Model=CurveNet2024.11 | 0.712 | 0.04 | 0.0008 | 1.463 | |
| SI-AdvbDefense=UPP, Target Model=PointNet2024.11 | 0.704 | 0.0462 | 0.0014 | 2.8105 | |
| SI-AdvbDefense=UPP, Target Model=SimpleView2024.11 | 0.702 | 0.0512 | 0.0024 | 3.1205 | |
| 3DHackerDefense=N2S3D, Target Model=PointNet++2024.11 | 0.701 | 0.0235 | 0.0045 | 1.4128 | |
| SI-AdvbDefense=Drop(30%), Target Model=PointNet++2024.11 | 0.701 | 0.0473 | 0.0023 | 1.4538 | |
| 3DHackerDefense=UPP, Target Model=DGCNN2024.11 | 0.689 | 0.0225 | 0.0035 | 1.5204 | |
| SI-AdvbDefense=Drop(50%), Target Model=SimpleView2024.11 | 0.688 | 0.0368 | 0.0006 | 0.9119 | |
| SI-AdvbDefense=UPP, Target Model=CurveNet2024.11 | 0.685 | 0.0452 | 0.0016 | 2.8231 | |
| SI-AdvbDefense=N2S3D, Target Model=PAConv2024.11 | 0.684 | 0.0384 | 0.0006 | 2.1524 | |
| SI-AdvbDefense=Drop(50%), Target Model=PointNet++2024.11 | 0.676 | 0.0501 | 0.0013 | 1.9193 | |
| SI-AdvbDefense=N2S3D, Target Model=PointNet2024.11 | 0.658 | 0.0435 | 0.0013 | 2.9014 |