通过注意力图定位关键区域,用最少扰动让激光雷达3D检测器失效。
Explainability-Aware Frustum Attack: Exposing Structural Vulnerabilities in LiDAR-Based 3D Object Detectors

- 用集成梯度生成全局显著性图,找出检测器依赖的关键空间区域。
- 在KITTI和nuScenes上使召回率下降超15个百分点,扰动量减少25%-50%。
- 揭示了3D检测器对少数区域的过度依赖,适合安全评估与防御研究者。
点云驱动的3D目标检测器的结构脆弱性仍不明确。以往工作主要关注孤立3D模型的对抗鲁棒性,而近期的激光雷达欺骗攻击虽更贴近真实驾驶场景,但侧重物理可实现性,忽视检测器行为与攻击效率。本文研究激光雷达检测器在复杂场景中如何依赖空间证据,并探究这些依赖模式是否可被利用以更高效地引发失败。为此,我们提出一种可解释性引导的对抗分析方法,引入Saliency-LiDAR(SALL)方法,通过聚合跨场景的集成梯度归因,生成适用于激光雷达3D检测器的通用显著性图。基于该图,设计出可解释性感知的截锥体攻击(EFA),仅对最具影响力的截锥体进行扰动,而非均匀攻击整个物体区域。在KITTI与nuScenes数据集上,针对PointPillars与SECOND等检测器的实验表明,EFA使检测召回率下降超过15个百分点,同时所需扰动的截锥体数量比现有非显著性感知基线减少25%-50%。结果表明,现代3D检测器将判别性证据集中于少数空间区域,暴露了当前激光雷达感知系统的结构性脆弱性。代码已公开于https://github.com/SecMindLab/Saliency_LiDAR。
原文摘要 · Abstract (English)
The structural vulnerabilities of point cloud-based 3D object detectors remain poorly understood. Prior work has studied adversarial robustness primarily on isolated 3D object models, while recent LiDAR spoofing attacks target richer and more realistic driving scenes but focus mainly on physical realizability rather than understanding detector behavior or attack efficiency. In this work, we investigate how LiDAR-based detectors rely on spatial evidence in complex scenes and whether these reliance patterns can be exploited to induce failures more efficiently. To this end, we propose an explainability-guided adversarial analysis methodology. We introduce the Saliency-LiDAR (SALL) method, which aggregates Integrated Gradient attributions across scenes to produce universal saliency maps for LiDAR-based 3D object detectors. Guided by these maps, we design the Explainability-aware Frustum Attack (EFA), which selectively perturbs only the most influential frustums rather than uniformly attacking entire object regions. Experiments on KITTI and nuScenes, across detectors such as PointPillars and SECOND, show that EFA reduces detection recall by more than 15 percentage points while requiring 25-50% fewer perturbed frustums than the state-of-the-art non-saliency-aware baseline. These findings reveal that modern 3D detectors concentrate discriminative evidence in a small subset of spatial regions, exposing a structural robustness vulnerability in current LiDAR perception systems. Our code is released at https://github.com/SecMindLab/Saliency_LiDAR.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。