arXiv:2602.19323cs.CV2026-02中稿 · ECCV

通过频域过滤提升3D高斯点云对抗攻击下的鲁棒性

DefenseSplat: Enhancing the Robustness of 3D Gaussian Splatting via Frequency-Aware Filtering

  • 利用小波变换分析输入图像中低频与高频分量差异,识别对抗扰动特征
  • 在训练阶段过滤高频噪声,显著降低渲染质量下降与内存膨胀问题
  • 无需真实数据监督,适合部署于实时三维重建系统

3D高斯点云(3DGS)已成为从带姿态图像实现实时高保真三维重建的强大范式。然而,近期研究发现其对输入视角的对抗性扰动极为脆弱:微小且难以察觉的一致性扰动可导致渲染质量急剧下降、训练与渲染时间增加、内存占用上升,甚至引发服务器拒绝服务。本文通过小波变换分析对抗扰动在输入图像低频与高频分量中的不同表现,设计了一种简单有效的频域感知防御策略——在重建训练视图时滤除高频噪声,同时保留低频内容。该方法有效抑制对抗伪影,同时保持原始场景的真实性。实验表明,该方法在多个基准测试上,面对多种攻击强度,均显著提升3DGS的鲁棒性,且无需清洁真实标签监督。本工作揭示并解决了3D高斯点云被忽视的安全隐患,为更鲁棒、安全的三维重建铺平道路。

原文摘要 · Abstract (English)

3D Gaussian Splatting (3DGS) has emerged as a powerful paradigm for real-time and high-fidelity 3D reconstruction from posed images. However, recent studies reveal its vulnerability to adversarial corruptions in input views, where imperceptible yet consistent perturbations can drastically degrade rendering quality, increase training and rendering time, and inflate memory usage, even leading to server denial-of-service. In our work, to mitigate this issue, we begin by analyzing the distinct behaviors of adversarial perturbations in the low- and high-frequency components of input images using wavelet transforms. Based on this observation, we design a simple yet effective frequency-aware defense strategy that reconstructs training views by filtering high-frequency noise while preserving low-frequency content. This approach effectively suppresses adversarial artifacts while maintaining the authenticity of the original scene. Notably, it does not significantly impair training on clean data, achieving a desirable trade-off between robustness and performance on clean inputs. Through extensive experiments under a wide range of attack intensities on multiple benchmarks, we demonstrate that our method substantially enhances the robustness of 3DGS without access to clean ground-truth supervision. By highlighting and addressing the overlooked vulnerabilities of 3D Gaussian Splatting, our work paves the way for more robust and secure 3D reconstructions.

3D重建对抗攻击频域滤波

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。