Research Article
NormalAttack: Curvature-Aware Shape Deformation along Normals for Imperceptible Point Cloud Attack
Table 2
Comparison on the attack success rates of different methods with and without applying defense methods.
| Attack | FGSM | I-FGSM | 3D-ADV | GeoA3 | ITA | Ours |
| No defense | 100.00 | 100.00 | 100.00 | 100.00 | 100.00 | 100.00 | SRS | 9.68 | 61.53 | 22.53 | 67.61 | 73.74 | 74.07 | SOR | 6.26 | 74.50 | 17.19 | 62.47 | 84.46 | 87.26 | DUP-net | 4.38 | 22.20 | 5.44 | 22.63 | 22.17 | 24.72 |
|
|