arXiv:2503.00063cs.CV2025-03CVPR被引 9

通过最优传输识别点云数据奇异边界,实现高效无模型攻击

NoPain: No-box Point Cloud Attack via Optimal Transport Singular Boundary

  • 用最优传输定位数据流形的奇异边界,不依赖梯度迭代
  • 生成的对抗样本在跨网络攻击中转移成功率更高
  • 无需依赖目标模型,适合对防御策略鲁棒的场景

对抗攻击利用深度模型对对抗样本的脆弱性。现有点云攻击方法针对特定模型,基于白盒或黑盒梯度迭代优化扰动。尽管攻击效果良好,但常因过拟合代理模型参数而难以生成可迁移的对抗样本。为此,我们转向数据分布本身,提出新方法NoPain,利用最优传输(OT)识别数据流形的内在奇异边界,实现跨网络点云攻击。首先计算从噪声到目标特征空间的OT映射,然后通过定位不可微位置识别奇异边界,最后沿奇异边界采样生成对抗点云。一旦奇异边界确定,NoPain即可高效生成对抗样本,无需迭代更新或代理分类器指导。大量实验表明,该端到端方法在可迁移性和效率上均优于基线方法,且在面对防御策略时仍保持显著优势。代码与模型已公开于https://github.com/cognaclee/nopain。

原文摘要 · Abstract (English)

Adversarial attacks exploit the vulnerability of deep models against adversarial samples. Existing point cloud attackers are tailored to specific models, iteratively optimizing perturbations based on gradients in either a white-box or black-box setting. Despite their promising attack performance, they often struggle to produce transferable adversarial samples due to overfitting the specific parameters of surrogate models. To overcome this issue, we shift our focus to the data distribution itself and introduce a novel approach named NoPain, which employs optimal transport (OT) to identify the inherent singular boundaries of the data manifold for cross-network point cloud attacks. Specifically, we first calculate the OT mapping from noise to the target feature space, then identify singular boundaries by locating non-differentiable positions. Finally, we sample along singular boundaries to generate adversarial point clouds. Once the singular boundaries are determined, NoPain can efficiently produce adversarial samples without the need of iterative updates or guidance from the surrogate classifiers. Extensive experiments demonstrate that the proposed end-to-end method outperforms baseline approaches in terms of both transferability and efficiency, while also maintaining notable advantages even against defense strategies. Code and model are available at https://github.com/cognaclee/nopain

点云攻击最优传输对抗样本无模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。