NormalAttack: Curvature-Aware Shape Deformation along Normals for Imperceptible Point Cloud Attack

Table 5

Attack success rates and perturbation sizes of our NormalAttack framework with different values of .

Victim model	t	Attack success rate (%)	Perturbation size
			-norm	HD	CD
PointNet++	20	98.24	0.5782	0.0050	0.0003
	30	98.79	0.5804	0.0051	0.0003
	40	98.35	0.5829	0.0050	0.0003
DGCNN	20	88.13	0.9400	0.0088	0.0007
	30	87.91	0.9486	0.0089	0.0007
	40	87.25	0.9525	0.0089	0.0007
PointConv	20	94.73	0.8678	0.0085	0.0006
	30	93.52	0.8726	0.0085	0.0006
	40	93.63	0.8760	0.0086	0.0006