Point Cloud Adversarial Attack on ShapeNetPart
100ASR3d-Adv
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| 3d-AdvTarget Model=PointNet, Attack Type=White-box2022.03 | 100 | 7.3 | 3.75 | 5.09 | — | — | — | |
| 3d-AdvTarget Model=DGCNN, Attack Type=White-box2022.03 | 100 | 15.43 | 5.13 | 19.1 | — | — | — | |
| 3d-AdvTarget Model=CurveNet, Attack Type=White-box2022.03 | 100 | 15.47 | 3.59 | 121.94 | — | — | — | |
| 3D-ADVModel=PointNet2026.04 | 100 | 2.1603 | — | — | — | 21.03 | — | |
| GeoA³Model=PointNet2026.04 | 100 | 3.7291 | — | — | — | 26.58 | — | |
| HiT-ADVModel=PointNet2026.04 | 100 | 0.981 | — | — | — | 18.74 | — | |
| Topo-ADVModel=PointNet2026.04 | 100 | 2.3936 | — | — | — | 1.56 | — | |
| 3D-ADVModel=DGCNN2026.04 | 100 | 2.3788 | — | — | — | 18.86 | — | |
| GeoA³Model=DGCNN2026.04 | 100 | 2.9907 | — | — | — | 18.95 | — | |
| Eps-isoModel=DGCNN2026.04 | 100 | 3.0629 | — | — | — | 21.71 | — | |
| HiT-ADVModel=DGCNN2026.04 | 100 | 0.6629 | — | — | — | 18.7 | — | |
| Topo-ADVModel=DGCNN2026.04 | 100 | 3.8679 | — | — | — | 1.46 | — | |
| PointBA-IBackbone=DGCNN2025.03 | 100 | 7.48 | — | — | — | — | 98.92 | |
| I-FGMTarget Model=PointNet, Attack Type=White-box2022.03 | 99.9 | 6.68 | 3.88 | 1.05 | — | — | — | |
| PGDTarget Model=PointNet, Attack Type=White-box2022.03 | 99.9 | 6.63 | 3.88 | 1.06 | — | — | — | |
| AOFModel=PointNet2026.04 | 99.85 | 3.3172 | — | — | — | 36.01 | — | |
| PointBA-IBackbone=Average2025.03 | 99.73 | 7.48 | — | — | — | — | 98.64 | |
| PointBA-IBackbone=PointNet2025.03 | 99.72 | 7.48 | — | — | — | — | 98.3 | |
| PointBA-IBackbone=PointNet++2025.03 | 99.69 | 7.48 | — | — | — | — | 98.75 | |
| IFGM(l2)Model=DGCNN2026.04 | 99.51 | 2.6947 | — | — | — | 20.8 | — | |
| PointBA-IBackbone=PointNext2025.03 | 99.51 | 7.48 | — | — | — | — | 98.61 | |
| MeshAttackModel=DGCNN2026.04 | 99.43 | 3.1836 | — | — | — | 22.32 | — | |
| SPBABackbone=DGCNN2025.03 | 99.23 | 0.44 | — | — | — | — | 98.43 | |
| IRBABackbone=PointNet++2025.03 | 99.03 | 16.06 | — | — | — | — | 98.89 | |
| PointBA-OBackbone=PointNet++2025.03 | 98.78 | 5.67 | — | — | — | — | 98.5 | |
| SPBABackbone=Average2025.03 | 98.6 | 0.51 | — | — | — | — | 98.38 | |
| AOFModel=DGCNN2026.04 | 98.54 | 3.2227 | — | — | — | 24.44 | — | |
| PointBA-OBackbone=DGCNN2025.03 | 98.5 | 5.67 | — | — | — | — | 98.85 | |
| IFGSM(l∞)Model=DGCNN2026.04 | 98.46 | 3.355 | — | — | — | 20.94 | — | |
| IBAPCBackbone=PointNet++2025.03 | 98.46 | 0.22 | — | — | — | — | 98.43 | |
| SPBABackbone=PointNext2025.03 | 98.45 | 0.37 | — | — | — | — | 98.53 | |
| SPBABackbone=PointNet2025.03 | 98.4 | 1.22 | — | — | — | — | 98.3 | |
| PointBA-OBackbone=PointNet2025.03 | 98.34 | 5.67 | — | — | — | — | 97.95 | |
| SPBABackbone=PointNet++2025.03 | 98.3 | 0.02 | — | — | — | — | 98.26 | |
| I-FGMTarget Model=CurveNet, Attack Type=White-box2022.03 | 98.2 | 16.2 | 3.77 | 11.68 | — | — | — | |
| PGDTarget Model=CurveNet, Attack Type=White-box2022.03 | 98.2 | 16.33 | 3.77 | 11.58 | — | — | — | |
| PointBA-OBackbone=Average2025.03 | 98.11 | 5.67 | — | — | — | — | 98.35 | |
| KNNModel=DGCNN2026.04 | 98.09 | 3.4718 | — | — | — | 23.72 | — | |
| Eps-isoModel=PointNet2026.04 | 98.01 | 2.6093 | — | — | — | 29.08 | — | |
| I-FGMTarget Model=DGCNN, Attack Type=White-box2022.03 | 97.8 | 24.46 | 3.6 | 2.12 | — | — | — | |
| PGDTarget Model=DGCNN, Attack Type=White-box2022.03 | 97.8 | 24.26 | 3.61 | 3.16 | — | — | — | |
| IRBABackbone=DGCNN2025.03 | 97.63 | 16.06 | — | — | — | — | 98.68 | |
| MI-FGMTarget Model=PointNet, Attack Type=White-box2022.03 | 97.5 | 21.54 | 4.88 | 1.08 | — | — | — | |
| IFGM(l2)Model=PointNet2026.04 | 97.49 | 2.3401 | — | — | — | 24.04 | — | |
| IRBABackbone=Average2025.03 | 97.41 | 16.06 | — | — | — | — | 98 | |
| MeshAttackModel=PointNet2026.04 | 97.24 | 3.0671 | — | — | — | 34.44 | — | |
| PointBA-OBackbone=PointNext2025.03 | 96.83 | 5.67 | — | — | — | — | 98.1 | |
| IRBABackbone=PointNet2025.03 | 96.8 | 16.06 | — | — | — | — | 98.12 | |
| IBAPCBackbone=Average2025.03 | 96.48 | 0.8 | — | — | — | — | 97.78 | |
| SI-ADVModel=DGCNN2026.04 | 96.43 | 3.0193 | — | — | — | 24.56 | — | |
| KNNModel=PointNet2026.04 | 96.4 | 2.5067 | — | — | — | 27.23 | — | |
| SI-ADVModel=PointNet2026.04 | 96.38 | 2.8476 | — | — | — | 29.45 | — | |
| IRBABackbone=PointNext2025.03 | 96.17 | 16.06 | — | — | — | — | 96.31 | |
| IBAPCBackbone=PointNet2025.03 | 96.01 | 1.73 | — | — | — | — | 97.8 | |
| IBAPCBackbone=PointNext2025.03 | 95.99 | 0.44 | — | — | — | — | 97.35 | |
| IBAPCBackbone=DGCNN2025.03 | 95.44 | 0.8 | — | — | — | — | 97.54 | |
| AdvPCTarget Model=DGCNN, Attack Type=White-box2022.03 | 95.4 | 13.42 | 3.24 | 7.83 | — | — | — | |
| SI-AdvTarget Model=PointNet, Attack Type=White-box2022.03 | 95.2 | 3.59 | 3.46 | 1.26 | — | — | — | |
| IFGSM(l∞)Model=PointNet2026.04 | 95.2 | 2.8831 | — | — | — | 30.35 | — | |
| SI-AdvTarget Model=DGCNN, Attack Type=White-box2022.03 | 93.5 | 9.08 | 2.95 | 3.69 | — | — | — | |
| SI-AdvTarget Model=CurveNet, Attack Type=White-box2022.03 | 90.9 | 8.29 | 3.58 | 21.41 | — | — | — | |
| AdvPCTarget Model=PointNet, Attack Type=White-box2022.03 | 83.6 | 10.98 | 4.43 | 2.73 | — | — | — | |
| MI-FGMTarget Model=CurveNet, Attack Type=White-box2022.03 | 81.1 | 80.92 | 5.42 | 11.56 | — | — | — | |
| SI-ADVSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 77.2 | 0.004 | — | — | 11.4 | — | — | |
| NoPain-PDSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 75 | 0.0029 | — | — | 0.032 | — | — | |
| NoPain-PDSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 71.1 | 0.0021 | — | — | 0.032 | — | — | |
| AdvPCTarget Model=CurveNet, Attack Type=White-box2022.03 | 68.6 | 16.17 | 3.74 | 56.64 | — | — | — | |
| NoPain-PFSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 65.2 | 0.0022 | — | — | 0.019 | — | — | |
| NoPain-PDSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 63.3 | 0.003 | — | — | 0.032 | — | — | |
| NoPain-PFSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 62.5 | 0.0032 | — | — | 0.019 | — | — | |
| NoPain-PFSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 61.8 | 0.0025 | — | — | 0.019 | — | — | |
| MI-FGMTarget Model=DGCNN, Attack Type=White-box2022.03 | 60.2 | 114.09 | 5.51 | 2.11 | — | — | — | |
| NoPain-PFSurrogate Model=PointNet++, Target Model=PCT2025.02 | 60 | 0.0024 | — | — | 0.019 | — | — | |
| NoPain-PDSurrogate Model=PointNet++, Target Model=PCT2025.02 | 53.3 | 0.0046 | — | — | 0.032 | — | — | |
| SS-attackSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 43.4 | 0.0081 | — | — | 43.1 | — | — | |
| AOFSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 33.4 | 0.0063 | — | — | 14.4 | — | — | |
| HIT-ADVSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 32.4 | 0.1545 | — | — | 25.9 | — | — | |
| HIT-ADVSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 28.7 | 0.1626 | — | — | 25.9 | — | — | |
| SI-ADVSurrogate Model=PointNet++, Target Model=PCT2025.02 | 26.9 | 0.0033 | — | — | 11.4 | — | — | |
| AdvPCSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 22.5 | 0.0062 | — | — | 15.8 | — | — | |
| SS-attackSurrogate Model=PointNet++, Target Model=PCT2025.02 | 22.1 | 0.0066 | — | — | 43.1 | — | — | |
| AOFSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 20.1 | 0.0058 | — | — | 14.4 | — | — | |
| SI-ADVSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 19.1 | 0.0023 | — | — | 11.4 | — | — | |
| SI-ADVSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 18.9 | 0.0025 | — | — | 11.4 | — | — | |
| AOFSurrogate Model=PointNet++, Target Model=PCT2025.02 | 18.4 | 0.0058 | — | — | 14.4 | — | — | |
| HIT-ADVSurrogate Model=PointNet++, Target Model=PCT2025.02 | 17.2 | 0.189 | — | — | 25.9 | — | — | |
| SS-attackSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 16.4 | 0.0065 | — | — | 43.1 | — | — | |
| AOFSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 14.6 | 0.0048 | — | — | 14.4 | — | — | |
| SS-attackSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 13 | 0.0055 | — | — | 43.1 | — | — | |
| HIT-ADVSurrogate Model=PointNet++, Target Model=PointConv2025.02 | 7 | 0.068 | — | — | 25.9 | — | — | |
| AdvPCSurrogate Model=PointNet++, Target Model=PCT2025.02 | 6 | 0.0039 | — | — | 15.8 | — | — | |
| AdvPCSurrogate Model=PointNet++, Target Model=DGCNN2025.02 | 5.7 | 0.0038 | — | — | 15.8 | — | — | |
| AdvPCSurrogate Model=PointNet++, Target Model=PointNet2025.02 | 5 | 0.0024 | — | — | 15.8 | — | — | |
| CleanBackbone=PointNet2025.03 | — | — | — | — | — | — | 98.47 | |
| CleanBackbone=PointNet++2025.03 | — | — | — | — | — | — | 98.99 | |
| CleanBackbone=DGCNN2025.03 | — | — | — | — | — | — | 99.06 | |
| CleanBackbone=PointNext2025.03 | — | — | — | — | — | — | 98.82 | |
| CleanBackbone=Average2025.03 | — | — | — | — | — | — | 98.83 |