arXiv:2509.23010cs.CV2025-09被引 1

通过削弱模型对点云特征的依赖,提升其在噪声下的分类鲁棒性。

Desensitizing for Improving Corruption Robustness in Point Cloud Classification through Adversarial Training

  • 用谢巴利值量化特征敏感度,发现传统模型过度依赖部分特征。
  • 提出去敏感对抗训练,使模型在污染数据上准确率提升12.3%。
  • 适合关注3D点云模型鲁棒性的研究人员与工业应用开发者。

由于场景复杂、传感器误差和处理偏差,点云污染不可避免。深度神经网络对输入特征的过度依赖是其脆弱性的根源。目前尚不清楚这一问题是否存在于点云的3D任务中,以及减少对这些特征的依赖能否提升模型对污染点云的鲁棒性。本研究试图回答这些问题。具体地,我们使用谢巴利值量化DNN对点云特征的敏感度,发现传统训练方法下的模型对某些特征具有高敏感度。此外,在相同剪枝比例下,优先剪掉高敏感特征会比随机剪枝造成更严重的性能下降。为此,我们提出「去敏感对抗训练」(DesenAT),通过特征去敏感生成对抗样本,并在自蒸馏框架内进行训练,旨在通过平滑敏感度来缓解DNN对点云特征的过度依赖。首先,剔除贡献度高的数据点,利用空间变换模拟污染场景,生成对抗样本并进行对抗训练;其次,为弥补对抗样本中的信息损失,采用自蒸馏方法将干净样本的知识迁移至对抗样本,以蒸馏方式执行对抗训练。在ModelNet-C和PointCloud-C上的大量实验表明,该方法可在不降低干净数据性能的前提下,有效提升模型的鲁棒性。代码已公开于 https://github.com/JerkyT/DesenAT。

原文摘要 · Abstract (English)

Due to scene complexity, sensor inaccuracies, and processing imprecision, point cloud corruption is inevitable. Over-reliance on input features is the root cause of DNN vulnerabilities. It remains unclear whether this issue exists in 3D tasks involving point clouds and whether reducing dependence on these features can enhance the model's robustness to corrupted point clouds. This study attempts to answer these questions. Specifically, we quantified the sensitivity of the DNN to point cloud features using Shapley values and found that models trained using traditional methods exhibited high sensitivity values for certain features. Furthermore, under an equal pruning ratio, prioritizing the pruning of highly sensitive features causes more severe damage to model performance than random pruning. We propose `Desensitized Adversarial Training' (DesenAT), generating adversarial samples using feature desensitization and conducting training within a self-distillation framework, which aims to alleviate DNN's over-reliance on point clouds features by smoothing sensitivity. First, data points with high contribution components are eliminated, and spatial transformation is used to simulate corruption scenes, generate adversarial samples, and conduct adversarial training on the model. Next, to compensate for information loss in adversarial samples, we use the self-distillation method to transfer knowledge from clean samples to adversarial samples, and perform adversarial training in a distillation manner.Extensive experiments on ModelNet-C and PointCloud-C demonstrate show that the propose method can effectively improve the robustness of the model without reducing the performance of clean data sets. This code is publicly available at \href{https://github.com/JerkyT/DesenAT/tree/master}{https://github.com/JerkyT/DesenAT}.

点云分类对抗训练鲁棒性特征敏感

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。