Boosting 3D Adversarial Attacks with Attacking On Frequency
Deep neural networks (DNNs) have been shown to be vulnerable to adversarial attacks. Recently, 3D adversarial attacks, especially adversarial attacks on point clouds, have elicited mounting interest. However, adversarial point clouds obtained by previous methods show weak transferability and are easy to defend. To address these problems, in this paper we propose a novel point cloud attack (dubbed AOF) that pays more attention on the low-frequency component of point clouds. We combine the losses from point cloud and its low-frequency component to craft adversarial samples. Extensive experiments validate that AOF can improve the transferability significantly compared to state-of-the-art (SOTA) attacks, and is more robust to SOTA 3D defense methods. Otherwise, compared to clean point clouds, adversarial point clouds obtained by AOF contain more deformation than outlier.
Code (1)
Similar Papers 제목 키워드 기반
Exploring Frequencies via Feature Mixing and Meta-Learning for Improving Adversarial Transferability
Recent studies have shown that Deep Neural Networks (DNNs) are susceptible to adversarial attacks, with frequency-domain analysis underscoring the significance of high-frequency components in influencing model prediction…
Meta-LearningFrequency Domain Model Augmentation for Adversarial Attack
For black-box attacks, the gap between the substitute model and the victim model is usually large, which manifests as a weak attack performance. Motivated by the observation that the transferability of adversarial exampl…
Adversarial AttackDiversitymodelAdvSwap: Covert Adversarial Perturbation with High Frequency Info-swapping for Autonomous Driving Perception
Perception module of Autonomous vehicles (AVs) are increasingly susceptible to be attacked, which exploit vulnerabilities in neural networks through adversarial inputs, thereby compromising the AI safety. Some researches…
Adversarial AttackAutonomous DrivingAutonomous VehiclesProving Common Mechanisms Shared by Twelve Methods of Boosting Adversarial Transferability
Although many methods have been proposed to enhance the transferability of adversarial perturbations, these methods are designed in a heuristic manner, and the essential mechanism for improving adversarial transferabilit…
Bandlimiting Neural Networks Against Adversarial Attacks
In this paper, we study the adversarial attack and defence problem in deep learning from the perspective of Fourier analysis. We first explicitly compute the Fourier transform of deep ReLU neural networks and show that t…
Adversarial Attack