Point Cloud Classification on ModelNet40 v1 (test)
100ASRPGD
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| PGDTarget Model=PointNet2025.12 | 100 | 26.582 | 10.777 | 2.804 | 0.406 | 5.681 | 5.705 | 1,003 | |
| IFGMTarget Model=PointNet2025.12 | 100 | 8.982 | 9.859 | 1.195 | 0.368 | 1.209 | 1.537 | 670 | |
| GeoA3Target Model=PointNet2025.12 | 100 | 4.869 | 0.524 | 1.423 | 0.215 | 0.348 | 2.415 | 957 | |
| AOFTarget Model=PointNet2025.12 | 100 | 18.063 | 1.204 | 1.896 | 0.161 | 3.719 | 3.575 | 966 | |
| SI-AdvTarget Model=PointNet2025.12 | 100 | 2.855 | 2.259 | 0.779 | 0.183 | 0.276 | 0.783 | 998 | |
| SCPTarget Model=PointNet2025.12 | 100 | 0.741 | 0.315 | 0.521 | 0.16 | 0.148 | 0.199 | 34 | |
| PGDTarget Model=DGCNN2025.12 | 100 | 28.517 | 8.772 | 2.853 | 0.347 | 5.915 | 5.927 | 1,024 | |
| IFGMTarget Model=DGCNN2025.12 | 100 | 10.701 | 7.148 | 1.622 | 0.363 | 2.849 | 3.777 | 1,024 | |
| GeoA3Target Model=DGCNN2025.12 | 100 | 13.017 | 2.059 | 1.589 | 0.169 | 1.7 | 2.279 | 1,024 | |
| AOFTarget Model=DGCNN2025.12 | 100 | 25.229 | 1.249 | 2.351 | 0.161 | 4.325 | 4.959 | 1,024 | |
| SI-AdvTarget Model=DGCNN2025.12 | 100 | 8.911 | 1.811 | 1.348 | 0.136 | 1.317 | 2.908 | 1,024 | |
| SCPTarget Model=DGCNN2025.12 | 100 | 1.059 | 0.841 | 1.378 | 0.15 | 0.385 | 0.719 | 62 | |
| PGDTarget Model=PTv12025.12 | 100 | 24.521 | 1.724 | 2.584 | 0.181 | 5.548 | 5.589 | 1,024 | |
| IFGMTarget Model=PTv12025.12 | 100 | 7.544 | 5.563 | 1.082 | 0.52 | 0.9 | 1.704 | 1,024 | |
| GeoA3Target Model=PTv12025.12 | 100 | 7.815 | 3.296 | 0.973 | 0.199 | 1.618 | 2.357 | 1,024 | |
| AOFTarget Model=PTv12025.12 | 100 | 31.84 | 1.164 | 3.065 | 0.194 | 6.943 | 5.581 | 1,024 | |
| SI-AdvTarget Model=PTv12025.12 | 100 | 13.456 | 3.044 | 1.806 | 0.186 | 2.334 | 3.385 | 1,024 | |
| SCPTarget Model=PTv12025.12 | 100 | 1.01 | 0.877 | 0.795 | 0.139 | 0.168 | 0.314 | 52 | |
| PGDTarget Model=Mamba3D2025.12 | 100 | 28.407 | 3.17 | 2.763 | 0.229 | 6.084 | 5.872 | 1,024 | |
| IFGMTarget Model=Mamba3D2025.12 | 100 | 6.075 | 1.652 | 0.854 | 0.179 | 1.827 | 1.979 | 1,024 | |
| GeoA3Target Model=Mamba3D2025.12 | 100 | 8.833 | 1.772 | 1.019 | 0.255 | 1.959 | 2.043 | 1,024 | |
| AOFTarget Model=Mamba3D2025.12 | 100 | 18.073 | 0.711 | 1.619 | 0.137 | 3.413 | 4.033 | 1,024 | |
| SI-AdvTarget Model=Mamba3D2025.12 | 100 | 5.685 | 1.722 | 0.965 | 0.152 | 0.617 | 1.94 | 1,024 | |
| SCPTarget Model=Mamba3D2025.12 | 100 | 0.831 | 0.794 | 1.01 | 0.158 | 0.514 | 0.581 | 49 | |
| 3D-Advepsilon=0.18, source_model=PointNet, target_model=PointNet2026.01 | 100 | — | — | — | — | — | — | — | |
| AdvPCepsilon=0.18, source_model=PointNet, target_model=PointNet2026.01 | 100 | — | — | — | — | — | — | — | |
| AOFepsilon=0.18, source_model=PointNet, target_model=PointNet2026.01 | 100 | — | — | — | — | — | — | — | |
| ShapeAdvepsilon=0.18, source_model=PointNet, target_model=PointNet2026.01 | 100 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.45, source_model=PointNet, target_model=PointNet2026.01 | 100 | — | — | — | — | — | — | — | |
| KNNepsilon=0.18, source_model=PointNet, target_model=PointNet2026.01 | 99.7 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=PointNet, target_model=PointNet2026.01 | 97.7 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=PCT, target_model=PCT2026.01 | 97.7 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=DGCNN, target_model=DGCNN2026.01 | 97.6 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=PointMamba, target_model=PointMamba2026.01 | 96.2 | — | — | — | — | — | — | — | |
| PF-Attackepsilon=0.18, source_model=PointNet, target_model=PointNet2026.01 | 94 | — | — | — | — | — | — | — | |
| MAT-Advepsilon=0.18, source_model=PointNet, target_model=PointNet2026.01 | 91.7 | — | — | — | — | — | — | — | |
| CFGepsilon=0.18, source_model=PointNet, target_model=PointNet2026.01 | 90.4 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=PCT, target_model=PointMamba2026.01 | 74.3 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=DGCNN, target_model=PointMamba2026.01 | 73.4 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.45, source_model=PointNet, target_model=PointMamba2026.01 | 65.6 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=PointNet, target_model=PointMamba2026.01 | 62.7 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=PCT, target_model=DGCNN2026.01 | 58.6 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.45, source_model=PointNet, target_model=DGCNN2026.01 | 58.1 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=PointNet, target_model=DGCNN2026.01 | 55.1 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.45, source_model=PointNet, target_model=PCT2026.01 | 54.2 | — | — | — | — | — | — | — | |
| CFGepsilon=0.18, source_model=PointNet, target_model=PointMamba2026.01 | 50.8 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=PointNet, target_model=PCT2026.01 | 48.8 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=DGCNN, target_model=PCT2026.01 | 45.7 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=PointMamba, target_model=DGCNN2026.01 | 45.5 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=DGCNN, target_model=PointNet2026.01 | 39.7 | — | — | — | — | — | — | — | |
| CFGepsilon=0.18, source_model=PointNet, target_model=DGCNN2026.01 | 39.3 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=PointMamba, target_model=PointNet2026.01 | 39.1 | — | — | — | — | — | — | — | |
| PF-Attackepsilon=0.18, source_model=PointNet, target_model=PointMamba2026.01 | 38.2 | — | — | — | — | — | — | — | |
| AOFepsilon=0.18, source_model=PointNet, target_model=PointMamba2026.01 | 36.5 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=PCT, target_model=PointNet2026.01 | 35.5 | — | — | — | — | — | — | — | |
| MAT-Advepsilon=0.18, source_model=PointNet, target_model=PointMamba2026.01 | 35.2 | — | — | — | — | — | — | — | |
| CoSAepsilon=0.18, source_model=PointMamba, target_model=PCT2026.01 | 33.2 | — | — | — | — | — | — | — | |
| CFGepsilon=0.18, source_model=PointNet, target_model=PCT2026.01 | 30.4 | — | — | — | — | — | — | — | |
| MAT-Advepsilon=0.18, source_model=PointNet, target_model=DGCNN2026.01 | 30.2 | — | — | — | — | — | — | — | |
| AOFepsilon=0.18, source_model=PointNet, target_model=DGCNN2026.01 | 29.4 | — | — | — | — | — | — | — | |
| AdvPCepsilon=0.18, source_model=PointNet, target_model=PointMamba2026.01 | 29 | — | — | — | — | — | — | — | |
| MAT-Advepsilon=0.18, source_model=PointNet, target_model=PCT2026.01 | 28.7 | — | — | — | — | — | — | — | |
| AOFepsilon=0.18, source_model=PointNet, target_model=PCT2026.01 | 25.7 | — | — | — | — | — | — | — | |
| PF-Attackepsilon=0.18, source_model=PointNet, target_model=DGCNN2026.01 | 24.8 | — | — | — | — | — | — | — | |
| ShapeAdvepsilon=0.18, source_model=PointNet, target_model=DGCNN2026.01 | 23.5 | — | — | — | — | — | — | — | |
| PF-Attackepsilon=0.18, source_model=PointNet, target_model=PCT2026.01 | 23.4 | — | — | — | — | — | — | — | |
| AdvPCepsilon=0.18, source_model=PointNet, target_model=DGCNN2026.01 | 22.4 | — | — | — | — | — | — | — | |
| ShapeAdvepsilon=0.18, source_model=PointNet, target_model=PCT2026.01 | 21.7 | — | — | — | — | — | — | — | |
| ShapeAdvepsilon=0.18, source_model=PointNet, target_model=PointMamba2026.01 | 19.1 | — | — | — | — | — | — | — | |
| AdvPCepsilon=0.18, source_model=PointNet, target_model=PCT2026.01 | 16.3 | — | — | — | — | — | — | — | |
| KNNepsilon=0.18, source_model=PointNet, target_model=PCT2026.01 | 6.9 | — | — | — | — | — | — | — | |
| KNNepsilon=0.18, source_model=PointNet, target_model=DGCNN2026.01 | 6 | — | — | — | — | — | — | — | |
| KNNepsilon=0.18, source_model=PointNet, target_model=PointMamba2026.01 | 5.6 | — | — | — | — | — | — | — | |
| 3D-Advepsilon=0.18, source_model=PointNet, target_model=PCT2026.01 | 4.9 | — | — | — | — | — | — | — | |
| 3D-Advepsilon=0.18, source_model=PointNet, target_model=DGCNN2026.01 | 1.4 | — | — | — | — | — | — | — | |
| 3D-Advepsilon=0.18, source_model=PointNet, target_model=PointMamba2026.01 | 1.3 | — | — | — | — | — | — | — |