NormalAttack: Curvature-Aware Shape Deformation along Normals for Imperceptible Point Cloud Attack

Table 3

Comparison on the transferability performance of different attack methods.

Source	PointNet++		DGCNN		PointConv
Target	DGCNN	PointConv	PointNet++	PointConv	PointNet++	DGCNN
I-FGSM	24.40	22.40	32.53	32.42	38.02	33.41
3D-ADV	20.44	19.56	32.75	33.96	22.86	54.73
GeoA^3	18.35	22.42	21.65	30.55	17.14	23.19
ITA	21.42	21.86	33.18	30.98	34.72	31.75
Ours	21.21	22.86	39.23	38.24	34.94	40.98