NormalAttack: Curvature-Aware Shape Deformation along Normals for Imperceptible Point Cloud Attack

Table 2

Comparison on the attack success rates of different methods with and without applying defense methods.

Attack	FGSM	I-FGSM	3D-ADV	GeoA^3	ITA	Ours
No defense	100.00	100.00	100.00	100.00	100.00	100.00
SRS	9.68	61.53	22.53	67.61	73.74	74.07
SOR	6.26	74.50	17.19	62.47	84.46	87.26
DUP-net	4.38	22.20	5.44	22.63	22.17	24.72