arXiv:2603.23686cs.CV2026-03

首次系统研究前馈3D高斯点云的对抗攻击,揭示其脆弱性。

AdvSplat: Adversarial Attacks on Feed-Forward Gaussian Splatting Models

  • 通过频域参数化优化像素扰动,设计高效黑盒攻击方法
  • 在多数据集上用微小扰动显著破坏3D重建效果
  • 针对商业部署的前馈3D高斯模型提出安全风险警示

3D高斯点云(3DGS)是实现实时、高保真三维重建的有力范式。然而,其依赖场景的优化流程限制了可扩展性和泛化能力,阻碍了高效推理。近期出现的前馈3DGS模型通过大规模预训练,可在少量输入视图下快速重建,无需场景特定优化。尽管具备优势和商业化潜力,但以神经网络为骨干也加剧了对抗操纵的风险。本文提出AdvSplat,首个对前馈3DGS的系统性对抗攻击研究。首先采用白盒攻击揭示该模型家族的根本漏洞;随后开发两种改进的、实用性强且查询高效的黑盒算法,通过频域参数化优化像素空间扰动:一种基于梯度估计,另一种无梯度,且无需访问模型内部。大量实验表明,AdvSplat可通过向输入图像注入难以察觉的扰动,显著破坏重建结果。研究揭示了该领域被忽视却紧迫的安全与鲁棒性挑战,呼吁社区关注。

原文摘要 · Abstract (English)

3D Gaussian Splatting (3DGS) is increasingly recognized as a powerful paradigm for real-time, high-fidelity 3D reconstruction. However, its per-scene optimization pipeline limits scalability and generalization, and prevents efficient inference. Recently emerged feed-forward 3DGS models address these limitations by enabling fast reconstruction from a few input views after large-scale pretraining, without scene-specific optimization. Despite their advantages and strong potential for commercial deployment, the use of neural networks as the backbone also amplifies the risk of adversarial manipulation. In this paper, we introduce AdvSplat, the first systematic study of adversarial attacks on feed-forward 3DGS. We first employ white-box attacks to reveal fundamental vulnerabilities of this model family. We then develop two improved, practically relevant, query-efficient black-box algorithms that optimize pixel-space perturbations via a frequency-domain parameterization: one based on gradient estimation and the other gradient-free, without requiring any access to model internals. Extensive experiments across multiple datasets demonstrate that AdvSplat can significantly disrupt reconstruction results by injecting imperceptible perturbations into the input images. Our findings surface an overlooked yet urgent problem in this domain, and we hope to draw the community's attention to this emerging security and robustness challenge.

3D重建对抗攻击前馈模型安全风险

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。