NormalAttack: Curvature-Aware Shape Deformation along Normals for Imperceptible Point Cloud Attack

Figure 2

Demonstration of the NormalAttack framework: given an input point cloud, the curvature-aware module enforces the perturbation to be located at regions with larger curvature, and the deformation guiding module leads the perturbation to be along normals, resulting in an imperceptible adversarial attack.