arrow
返回

Gradient-based sparse voxel attacks on point cloud object detection

delete2025-04-01
delete0
PRE
AI
J
Junqi Wu
W
Wen Yao *
J
Jia, Shuai
T
Tingsong Jiang
C
Chao Ma
X
Xiaoqian Chen
DOI:10.1016/j.patcog.2024.111156delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Point cloud object detection is crucial fora variety of applications, including autonomous driving and robotics. Voxel-based representation for 3D point clouds has drawn significant attention due to their efficiency and effectiveness. Recent studies have revealed the vulnerability of deep learning models to adversarial attacks, while considerably less attention is paid to the robustness of voxel-based point cloud object detectors. Existing adversarial attacks on the point cloud data involve generating fake obstacles, removing objects or producing fake predictions. Despite the demonstrated success, these approaches have three limitations. First, manipulating point data, which was originally designed for point-based representation, is inapplicable to voxel-based representation. Second, existing works that modified points in the hold scene yield redundant perturbations. Third, the evaluation primarily performed on small-scale datasets, such as KITTI, does not scale well. To address these limitations, we propose a gradient-based sparse voxel attack (GSVA) algorithm for voxel-based 3D point cloud object detectors. Two novel frameworks, i.e., re-voxelization-based voxel attack framework and light voxel attack framework, successfully modify voxel-based representation instead of raw points. In addition to KITTI, extensive experiments on large-scale datasets including nuScenes and Waymo Open Dataset demonstrate the favorable attack performance (with mAP decrease by 86.2%similar to 99.5%) and the slight perturbation costs (with lowest modification rate of 3.5%) of our voxel attack method over the state-of-the-art approaches.
Keyword:
Point cloud detection
Adversarial examples
Deep learning

期刊

Pattern Recognition 封面图
Pattern Recognition
IF:
7.6
论文数:
1.3W
被引数:
4.5W

机构

S
shanghai jiao tong university
学者数:
15.7W
论文数: 11.7W
被引数: 159
引用论文

引用论文

err分享
err收藏
The myeloma cell antigen syndecan‐1 is lost by apoptotic myeloma cells
err2001-12-25
err0
errOAAI
errMichel Jourdan; Martine Ferlin; Eric Legouffe; Mira Horvathova; Janny Liautard; Jean FranÇois Rossi; John Wijdenes; Jean Brochier; Bernard Klein
err分享
err收藏
Predictors for doxorubicin-induced hematological toxicity and its association with outcome in advanced soft tissue sarcoma patients; a retrospective analysis of the EORTC-soft tissue and bone sarcoma group database
err2018-03-09
err0
errOAAI
errStefan Sleijfer; Elisa Rizzo; Saskia Litière; Ron H. J. Mathijssen; Ian Robert Judson; Hans Gelderblom; Winette T. A. Van Der Graaf; Alessandro Gronchi
err分享
err收藏
Multi-Source Adversarial Sample Attack on Autonomous Vehicles
err2021-03-01
err50
PREAI
errXiong, Zuobin; Xu, Honghui; Li, Wei; Cai, Zhipeng
err分享
err收藏
err分享
err收藏
Nonlinear properties of cardiac rhythm abnormalities
err1999-03-01
err0
PREAI
errLarry S. Liebovitch; Angelo T. Todorov; Michal Zochowski; Daniela Scheurle; Laura Colgin; Mark A. Wood; Kenneth A. Ellenbogen; John M. Herre; Robert C. Bernstein
err分享
err收藏
The efficacy of a Mindfulness Based Intervention for depressive symptoms in patients with Multiple Sclerosis and their caregivers: study protocol for a randomized controlled clinical trial
err2016-01-13
err0
errOAAI
errSara Carletto; Martina Borghi; Diana Francone; Francesco Scavelli; Gabriella Bertino; Marco Cavallo; Simona Malucchi; Antonio Bertolotto; Francesco Oliva; Luca Ostacoli
err分享
err收藏
Model scheduling and sample selection for ensemble adversarial example attacks
err2022-10-01
err14
PREAI
errHu, Zichao; Li, Heng; Yuan, Liheng; Cheng, Zhang; Yuan, Wei; Zhu, Ming
err分享
err收藏
学者 查看更多内容