Boosting 3D Adversarial Attacks with Attacking On Frequency

Binbin Liu, Jinlai Zhang, Jihong Zhu
2022 IEEE Access  
Deep neural networks (DNNs) have been shown to be vulnerable to adversarial attacks in the image domain. Recently, 3D adversarial attacks, especially adversarial attacks on point clouds, have elicited mounting interest. However, adversarial point clouds obtained by previous methods show weak transferability and are easy to defend. To address these problems, in this paper we propose a strong point cloud attack method named AOF which pays more attention to the low-frequency component of point
more » ... ds. We combine the losses from point cloud and its low-frequency component to craft adversarial samples and focus on the low-frequency component of point cloud in the process of optimization. Extensive experiments validate that AOF can improve the transferability significantly compared to state-of-theart (SOTA) attacks, and is more robust to state-of-the-art 3D defense methods. Otherwise, compared to adversarial point clouds generated by other adversarial attack methods, adversarial point clouds obtained by AOF contain more deformation than outlier. INDEX TERMS 3D adversarial attack, neural networks, point clouds, transferability, frequency.
doi:10.1109/access.2022.3171659 fatcat:z4y34zvngzhvldgaci7khtgfhu