Point Cloud Adversarial Attack on ModelNet40 (test)
100ASRI-FGM
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| I-FGMTarget Model=PointNet [6]2022.03 | 100 | 6.96 | 3.04 | — | — | — | — | — | |
| I-FGMTarget Model=CurveNet [36]2022.03 | 100 | 15.61 | 2.89 | — | — | — | — | — | |
| PGDTarget Model=PointNet [6]2022.03 | 100 | 7 | 3.05 | — | — | — | — | — | |
| PGDTarget Model=CurveNet [36]2022.03 | 100 | 15.32 | 2.86 | — | — | — | — | — | |
| 3d-AdvTarget Model=DGCNN [31]2022.03 | 100 | 10.12 | 2.46 | — | — | — | — | — | |
| 3d-AdvTarget Model=CurveNet [36]2022.03 | 100 | 7.48 | 3.51 | — | — | — | — | — | |
| SI-AdvTarget Model=CurveNet [36]2022.03 | 100 | 6.25 | 1.99 | — | — | — | — | — | |
| SimBATarget Model=PAConv, Step size=0.322022.03 | 100 | 4.51 | 4.93 | 73.2 | 0.36 | — | — | — | |
| SimBA+Target Model=PAConv, Step size=0.322022.03 | 100 | 5.02 | 9.58 | 67.4 | 0.36 | — | — | — | |
| Shape-invariant Query-based AttackTarget Model=PAConv, Step size=0.322022.03 | 100 | 3.89 | 4.58 | 53.9 | 0.31 | — | — | — | |
| SimBATarget Model=CurveNet, Step size=0.322022.03 | 100 | 4.67 | 4.93 | 114.5 | 13.51 | — | — | — | |
| SimBA+Target Model=CurveNet, Step size=0.322022.03 | 100 | 5.29 | 9.76 | 98.9 | 12.94 | — | — | — | |
| 3D-AdvVictim Model=PointNet2025.05 | 100 | — | — | — | 93.62 | 4.6 | 3.75 | 0.768 | |
| 3D-AdvVictim Model=DGCNN2025.05 | 100 | — | — | — | 74.66 | 22.96 | 2.87 | 1.3881 | |
| 3D-AdvVictim Model=PCT2025.05 | 100 | — | — | — | 1,729.05 | 14.35 | 2.98 | 1.3664 | |
| 3D-AdvVictim Model=CurveNet2025.05 | 100 | — | — | — | 1,350.87 | 15.79 | 4.42 | 1.2776 | |
| JGBAVictim Model=DGCNN2025.05 | 100 | — | — | — | 5.2 | 58.99 | 6.03 | 2.8783 | |
| JGBAVictim Model=PCT2025.05 | 100 | — | — | — | 20.83 | 58.23 | 5 | 2.7697 | |
| JGBAVictim Model=CurveNet2025.05 | 100 | — | — | — | 26.99 | 61.59 | 6.04 | 2.855 | |
| GeoA3Victim Model=PointNet2025.05 | 100 | — | — | — | 97.24 | 6.55 | 0.56 | 1.3586 | |
| GeoA3Victim Model=DGCNN2025.05 | 100 | — | — | — | 83.65 | 10.6 | 0.59 | 2.1977 | |
| GeoA3Victim Model=PCT2025.05 | 100 | — | — | — | 1,767.7 | 8.76 | 0.89 | 2.1009 | |
| GeoA3Victim Model=CurveNet2025.05 | 100 | — | — | — | 1,193.27 | 8.64 | 0.94 | 2.2319 | |
| GSDAVictim Model=PointNet2025.05 | 100 | — | — | — | 99.7 | 5.04 | 1.31 | 1.3167 | |
| GSDAVictim Model=DGCNN2025.05 | 100 | — | — | — | 102.14 | 7.86 | 0.75 | 1.9348 | |
| GSDAVictim Model=PCT2025.05 | 100 | — | — | — | 1,789.37 | 6.58 | 1.04 | 2.1221 | |
| GSDAVictim Model=CurveNet2025.05 | 100 | — | — | — | 1,322.39 | 5.9 | 0.98 | 2.2954 | |
| SI-AdvVictim Model=PointNet2025.05 | 100 | — | — | — | 0.99 | 3.72 | 2.57 | 0.5607 | |
| SI-AdvVictim Model=DGCNN2025.05 | 100 | — | — | — | 0.75 | 14.91 | 1.96 | 1.0963 | |
| SI-AdvVictim Model=PCT2025.05 | 100 | — | — | — | 10.14 | 10.77 | 2.49 | 0.8682 | |
| HiT-AdvVictim Model=PointNet2025.05 | 100 | — | — | — | 35.37 | 44.67 | 3.97 | 1.4223 | |
| HiT-AdvVictim Model=DGCNN2025.05 | 100 | — | — | — | 43.01 | 59.78 | 5.85 | 1.7054 | |
| HiT-AdvVictim Model=PCT2025.05 | 100 | — | — | — | 215.66 | 72.1 | 5.18 | 1.7231 | |
| HiT-AdvVictim Model=CurveNet2025.05 | 100 | — | — | — | 155.72 | 39.55 | 7.39 | 1.2153 | |
| WAAttackVictim Model=PointNet2025.05 | 100 | — | — | — | 0.26 | 0.9 | 0.78 | 0.1812 | |
| SubAttackVictim Model=PointNet2025.05 | 100 | — | — | — | 0.98 | 0.81 | 0.72 | 0.1632 | |
| SubAttackVictim Model=DGCNN2025.05 | 100 | — | — | — | 0.98 | 2.89 | 0.51 | 0.2958 | |
| SubAttackVictim Model=PCT2025.05 | 100 | — | — | — | 31.34 | 2.39 | 0.77 | 0.2749 | |
| 3d-AdvTarget Model=PointNet [6]2022.03 | 99.9 | 3.25 | 2.11 | — | — | — | — | — | |
| AdvPCTarget Model=CurveNet [36]2022.03 | 99.9 | 18.36 | 2.78 | — | — | — | — | — | |
| SI-AdvTarget Model=DGCNN [31]2022.03 | 99.9 | 6.33 | 1.27 | — | — | — | — | — | |
| Shape-invariant Query-based AttackTarget Model=CurveNet, Step size=0.322022.03 | 99.9 | 3.97 | 4.59 | 81.5 | 8.77 | — | — | — | |
| JGBAVictim Model=PointNet2025.05 | 99.9 | — | — | — | 5.06 | 27.68 | 6.74 | 1.525 | |
| CIMVictim Model=PointNet2025.05 | 99.9 | — | — | — | 1.36 | 3.81 | 2.51 | 0.56 | |
| AdvPCTarget Model=PointNet [6]2022.03 | 99.8 | 16.57 | 3.43 | — | — | — | — | — | |
| SI-AdvTarget Model=PointNet [6]2022.03 | 99.8 | 2.15 | 2.04 | — | — | — | — | — | |
| SI-AdvVictim Model=CurveNet2025.05 | 99.8 | — | — | — | 9.78 | 12.3 | 3.32 | 0.9997 | |
| CIMVictim Model=PCT2025.05 | 99.8 | — | — | — | 9.88 | 10.62 | 2.62 | 0.8591 | |
| WAAttackVictim Model=PCT2025.05 | 99.8 | — | — | — | 4.94 | 2.59 | 0.8 | 0.2977 | |
| SubAttackVictim Model=CurveNet2025.05 | 99.8 | — | — | — | 23.96 | 2.2 | 0.85 | 0.2612 | |
| PF-AttackVictim Model=DGCNN2025.05 | 99.7 | — | — | — | 9.93 | 50.43 | 2.5 | 2.8386 | |
| CIMVictim Model=DGCNN2025.05 | 99.7 | — | — | — | 1.19 | 14.89 | 2.21 | 1.0929 | |
| CIMVictim Model=CurveNet2025.05 | 99.7 | — | — | — | 10.05 | 12.01 | 3.31 | 0.9764 | |
| WAAttackVictim Model=DGCNN2025.05 | 99.7 | — | — | — | 0.18 | 3.2 | 0.55 | 0.3321 | |
| I-FGMTarget Model=DGCNN [31]2022.03 | 99.5 | 16.85 | 2.39 | — | — | — | — | — | |
| MI-FGMTarget Model=PointNet [6]2022.03 | 99.5 | 35.99 | 4.16 | — | — | — | — | — | |
| PGDTarget Model=DGCNN [31]2022.03 | 99.4 | 16.77 | 2.4 | — | — | — | — | — | |
| PF-AttackVictim Model=PCT2025.05 | 99.4 | — | — | — | 179.86 | 45.57 | 2.51 | 2.7021 | |
| MI-FGMTarget Model=CurveNet [36]2022.03 | 99 | 119.17 | 5.1 | — | — | — | — | — | |
| AdvPCTarget Model=DGCNN [31]2022.03 | 98.8 | 14.35 | 1.48 | — | — | — | — | — | |
| WAAttackVictim Model=CurveNet2025.05 | 98.5 | — | — | — | 4.96 | 2.23 | 0.91 | 0.2727 | |
| NoPain-PDTarget Architecture=PointNet, Defense Strategy=SRS2025.02 | 98.4 | 0.0021 | — | — | — | — | — | — | |
| NoPain-PFTarget Architecture=PointNet, Defense Strategy=SRS2025.02 | 97.6 | 0.0029 | — | — | — | — | — | — | |
| MI-FGMTarget Model=DGCNN [31]2022.03 | 95.9 | 120.1 | 4.99 | — | — | — | — | — | |
| Shape-invariant Query-based AttackTarget Model=PointNet++, Step size=0.322022.03 | 95.8 | 2.66 | 4.44 | 417 | 76.81 | — | — | — | |
| SimBA+Target Model=PointNet++, Step size=0.322022.03 | 95.5 | 3.41 | 8.21 | 603.4 | 99.57 | — | — | — | |
| PF-AttackVictim Model=PointNet2025.05 | 95.5 | — | — | — | 10.55 | 21.24 | 2.44 | 1.7487 | |
| SimBATarget Model=PointNet++, Step size=0.322022.03 | 94.9 | 3.05 | 4.8 | 683.8 | 112.04 | — | — | — | |
| SS-attackTarget Architecture=PointNet, Defense Strategy=SRS2025.02 | 94.5 | 0.0023 | — | — | — | — | — | — | |
| AOFTarget Architecture=PointNet, Defense Strategy=SRS2025.02 | 94 | 0.0021 | — | — | — | — | — | — | |
| PF-AttackVictim Model=CurveNet2025.05 | 93.2 | — | — | — | 149.9 | 44.36 | 2.38 | 2.3906 | |
| NoPain-PDTarget Architecture=PointNet, Defense Strategy=SOR2025.02 | 90.7 | 0.0024 | — | — | — | — | — | — | |
| HIT-ADVTarget Architecture=PointNet, Defense Strategy=SRS2025.02 | 90.5 | 0.0736 | — | — | — | — | — | — | |
| NoPain-PFTarget Architecture=PointNet, Defense Strategy=SOR2025.02 | 90.5 | 0.0032 | — | — | — | — | — | — | |
| AdvPCTarget Architecture=PointNet, Defense Strategy=SRS2025.02 | 89.5 | 0.0005 | — | — | — | — | — | — | |
| SS-attackTarget Architecture=PointNet, Defense Strategy=SOR2025.02 | 89.5 | 0.0023 | — | — | — | — | — | — | |
| AOFTarget Architecture=PointNet, Defense Strategy=SOR2025.02 | 88.5 | 0.0021 | — | — | — | — | — | — | |
| NoPain-PDTarget Architecture=DGCNN, Defense Strategy=SRS2025.02 | 87.9 | 0.0026 | — | — | — | — | — | — | |
| SI-ADVTarget Architecture=DGCNN, Defense Strategy=SRS2025.02 | 87.5 | 0.0034 | — | — | — | — | — | — | |
| HIT-ADVTarget Architecture=DGCNN, Defense Strategy=DUP-Net2025.02 | 87.5 | 0.118 | — | — | — | — | — | — | |
| SI-ADVTarget Architecture=PointNet, Defense Strategy=SRS2025.02 | 86.5 | 0.0027 | — | — | — | — | — | — | |
| NoPain-PFTarget Architecture=DGCNN, Defense Strategy=SRS2025.02 | 86.4 | 0.0027 | — | — | — | — | — | — | |
| HIT-ADVTarget Architecture=PointNet, Defense Strategy=SOR2025.02 | 86 | 0.0805 | — | — | — | — | — | — | |
| NoPain-PDTarget Architecture=PointNet, Defense Strategy=DUP-Net2025.02 | 85 | 0.0028 | — | — | — | — | — | — | |
| HIT-ADVTarget Architecture=PointNet, Defense Strategy=DUP-Net2025.02 | 84.5 | 0.0896 | — | — | — | — | — | — | |
| NoPain-PFTarget Architecture=PointNet, Defense Strategy=DUP-Net2025.02 | 83.9 | 0.0027 | — | — | — | — | — | — | |
| NoPain-PDTarget Architecture=DGCNN, Defense Strategy=SOR2025.02 | 82.8 | 0.0028 | — | — | — | — | — | — | |
| SI-ADVTarget Architecture=DGCNN, Defense Strategy=DUP-Net2025.02 | 82.6 | 0.0035 | — | — | — | — | — | — | |
| NoPain-PFTarget Architecture=DGCNN, Defense Strategy=SOR2025.02 | 78.9 | 0.003 | — | — | — | — | — | — | |
| NoPain-PDTarget Architecture=DGCNN, Defense Strategy=DUP-Net2025.02 | 74.2 | 0.0029 | — | — | — | — | — | — | |
| SS-attackTarget Architecture=DGCNN, Defense Strategy=DUP-Net2025.02 | 73.5 | 0.0023 | — | — | — | — | — | — | |
| SS-attackTarget Architecture=PointNet, Defense Strategy=DUP-Net2025.02 | 72.5 | 0.0025 | — | — | — | — | — | — | |
| SS-attackTarget Architecture=DGCNN, Defense Strategy=SRS2025.02 | 71 | 0.0031 | — | — | — | — | — | — | |
| AOFTarget Architecture=PointNet, Defense Strategy=DUP-Net2025.02 | 70.5 | 0.0022 | — | — | — | — | — | — | |
| AOFTarget Architecture=DGCNN, Defense Strategy=DUP-Net2025.02 | 70 | 0.0025 | — | — | — | — | — | — | |
| NoPain-PDTarget Architecture=PointNet, Defense Strategy=IF-Defense2025.02 | 70 | 0.0033 | — | — | — | — | — | — | |
| NoPain-PFTarget Architecture=DGCNN, Defense Strategy=DUP-Net2025.02 | 69.7 | 0.0028 | — | — | — | — | — | — | |
| AOFTarget Architecture=DGCNN, Defense Strategy=SOR2025.02 | 68 | 0.0026 | — | — | — | — | — | — | |
| SI-ADVTarget Architecture=DGCNN, Defense Strategy=SOR2025.02 | 68 | 0.0033 | — | — | — | — | — | — | |
| AdvPCTarget Architecture=DGCNN, Defense Strategy=DUP-Net2025.02 | 67.5 | 0.0013 | — | — | — | — | — | — |