{"id":"https://openalex.org/W4388726687","doi":"https://doi.org/10.1109/tifs.2023.3333687","title":"Imperceptible and Robust Backdoor Attack in 3D Point Cloud","display_name":"Imperceptible and Robust Backdoor Attack in 3D Point Cloud","publication_year":2023,"publication_date":"2023-11-16","ids":{"openalex":"https://openalex.org/W4388726687","doi":"https://doi.org/10.1109/tifs.2023.3333687"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2023.3333687","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3333687","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038862367","display_name":"Kuofeng Gao","orcid":"https://orcid.org/0000-0002-5667-8238"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Kuofeng Gao","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022446997","display_name":"Jiawang Bai","orcid":"https://orcid.org/0000-0002-1472-6465"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiawang Bai","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068027800","display_name":"Baoyuan Wu","orcid":"https://orcid.org/0000-0003-2183-5990"},"institutions":[{"id":"https://openalex.org/I4210116924","display_name":"Chinese University of Hong Kong, Shenzhen","ror":"https://ror.org/02d5ks197","country_code":"CN","type":"education","lineage":["https://openalex.org/I177725633","https://openalex.org/I180726961","https://openalex.org/I4210116924"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Baoyuan Wu","raw_affiliation_strings":["School of Data Science, The Chinese University of Hong Kong, Shenzhen (CUHK-Shenzhen), Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"School of Data Science, The Chinese University of Hong Kong, Shenzhen (CUHK-Shenzhen), Shenzhen, China","institution_ids":["https://openalex.org/I4210116924"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072299010","display_name":"Mengxi Ya","orcid":null},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mengxi Ya","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034104790","display_name":"Shu\u2010Tao Xia","orcid":"https://orcid.org/0000-0002-8639-982X"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shu-Tao Xia","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","Peng Cheng Laboratory, Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]},{"raw_affiliation_string":"Peng Cheng Laboratory, Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5038862367"],"corresponding_institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"],"apc_list":null,"apc_paid":null,"fwci":7.4255,"has_fulltext":false,"cited_by_count":35,"citation_normalized_percentile":{"value":0.98686872,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"19","issue":null,"first_page":"1267","last_page":"1282"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10719","display_name":"3D Shape Modeling and Analysis","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/2206","display_name":"Computational Mechanics"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10719","display_name":"3D Shape Modeling and Analysis","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/2206","display_name":"Computational Mechanics"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9822999835014343,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9386000037193298,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9320825338363647},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7536736726760864},{"id":"https://openalex.org/keywords/point-cloud","display_name":"Point cloud","score":0.6101656556129456},{"id":"https://openalex.org/keywords/transformation","display_name":"Transformation (genetics)","score":0.5878804922103882},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5032777190208435},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.4613179862499237},{"id":"https://openalex.org/keywords/rotation","display_name":"Rotation (mathematics)","score":0.4452211856842041},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.41266632080078125},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.34639424085617065},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3314914107322693},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.08702662587165833}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9320825338363647},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7536736726760864},{"id":"https://openalex.org/C131979681","wikidata":"https://www.wikidata.org/wiki/Q1899648","display_name":"Point cloud","level":2,"score":0.6101656556129456},{"id":"https://openalex.org/C204241405","wikidata":"https://www.wikidata.org/wiki/Q461499","display_name":"Transformation (genetics)","level":3,"score":0.5878804922103882},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5032777190208435},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.4613179862499237},{"id":"https://openalex.org/C74050887","wikidata":"https://www.wikidata.org/wiki/Q848368","display_name":"Rotation (mathematics)","level":2,"score":0.4452211856842041},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.41266632080078125},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.34639424085617065},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3314914107322693},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.08702662587165833},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2023.3333687","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3333687","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/13","display_name":"Climate action","score":0.6499999761581421}],"awards":[{"id":"https://openalex.org/G1669161342","display_name":null,"funder_award_id":"62076213","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2802018518","display_name":null,"funder_award_id":"62171248","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3046155044","display_name":null,"funder_award_id":"PCL2021A07","funder_id":"https://openalex.org/F4320318558","funder_display_name":"Peng Cheng Laboratory"},{"id":"https://openalex.org/G3177370927","display_name":null,"funder_award_id":"ZDSYS20211021111415025","funder_id":"https://openalex.org/F4320336569","funder_display_name":"Shenzhen Science and Technology Innovation Program"},{"id":"https://openalex.org/G651488586","display_name":null,"funder_award_id":"RCYX20210609103057050","funder_id":"https://openalex.org/F4320336569","funder_display_name":"Shenzhen Science and Technology Innovation Program"},{"id":"https://openalex.org/G8696386235","display_name":null,"funder_award_id":"JCYJ20220818101012025","funder_id":"https://openalex.org/F4320336569","funder_display_name":"Shenzhen Science and Technology Innovation Program"}],"funders":[{"id":"https://openalex.org/F4320318558","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322942","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48"},{"id":"https://openalex.org/F4320336569","display_name":"Shenzhen Science and Technology Innovation Program","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W1920022804","https://openalex.org/W2078290150","https://openalex.org/W2553307952","https://openalex.org/W2555618208","https://openalex.org/W2560609797","https://openalex.org/W2606202972","https://openalex.org/W2886499109","https://openalex.org/W2902610326","https://openalex.org/W2917809001","https://openalex.org/W2942091739","https://openalex.org/W2959364614","https://openalex.org/W2960986959","https://openalex.org/W2962818872","https://openalex.org/W2963158438","https://openalex.org/W2963281829","https://openalex.org/W2963727135","https://openalex.org/W2968296999","https://openalex.org/W2971089407","https://openalex.org/W2979750740","https://openalex.org/W2981979099","https://openalex.org/W2982210492","https://openalex.org/W2997088169","https://openalex.org/W2997811843","https://openalex.org/W3025561882","https://openalex.org/W3035394681","https://openalex.org/W3042368254","https://openalex.org/W3080980548","https://openalex.org/W3087558468","https://openalex.org/W3098881644","https://openalex.org/W3107479685","https://openalex.org/W3109585842","https://openalex.org/W3111197774","https://openalex.org/W3163760706","https://openalex.org/W3170794970","https://openalex.org/W3202440717","https://openalex.org/W3206645831","https://openalex.org/W4214563788","https://openalex.org/W4214812658","https://openalex.org/W4214878189","https://openalex.org/W4312962761","https://openalex.org/W4313192591","https://openalex.org/W6631190155","https://openalex.org/W6739778489","https://openalex.org/W6759946342","https://openalex.org/W6766978945","https://openalex.org/W6767325187","https://openalex.org/W6780439892","https://openalex.org/W6780640148","https://openalex.org/W6784558051","https://openalex.org/W6790153967","https://openalex.org/W6795782005","https://openalex.org/W6802716934","https://openalex.org/W6803329705","https://openalex.org/W6809890637","https://openalex.org/W6839383656"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W3015678314","https://openalex.org/W4281902577","https://openalex.org/W4200629851","https://openalex.org/W3009072493","https://openalex.org/W4386185023","https://openalex.org/W4317672133","https://openalex.org/W3140988292","https://openalex.org/W4386080799","https://openalex.org/W4382469137"],"abstract_inverted_index":{"With":[0],"the":[1,29,32,45,57,69,73,84,89,188,202],"thriving":[2],"of":[3,91],"deep":[4],"learning":[5],"in":[6,162,201,235],"processing":[7],"point":[8,70,86,111],"cloud":[9,71],"data,":[10],"recent":[11],"works":[12],"show":[13,221],"that":[14,44,206,222],"backdoor":[15,30,129],"attacks":[16,62],"pose":[17],"a":[18,37,77,124,138,192],"severe":[19],"security":[20],"threat":[21],"to":[22,82,97,132,148,167,180,183,209],"3D":[23,33,110],"vision":[24],"applications.":[25],"The":[26],"attacker":[27],"injects":[28],"into":[31,68],"model":[34,47],"by":[35,103,191],"poisoning":[36],"few":[38],"training":[39],"samples":[40,52,94,151,174,205],"with":[41,152,175,239],"trigger,":[42,74],"such":[43],"backdoored":[46],"performs":[48],"well":[49],"on":[50,214],"clean":[51],"but":[53],"behaves":[54],"maliciously":[55],"when":[56],"trigger":[58],"pattern":[59],"appears.":[60],"Existing":[61],"often":[63],"insert":[64],"some":[65,104],"additional":[66],"points":[67],"as":[72],"or":[75,100,116],"utilize":[76,137],"linear":[78],"transformation":[79,146],"(e.g.,":[80],"rotation)":[81],"construct":[83,149],"poisoned":[85,93,150,173,204],"cloud.":[87],"However,":[88],"effects":[90],"these":[92],"are":[95,157,178,207],"likely":[96,179],"be":[98,181],"weakened":[99],"even":[101,238],"eliminated":[102],"commonly":[105],"used":[106],"pre-processing":[107,185,240],"techniques":[108],"for":[109],"cloud,":[112],"e.g.,":[113],"outlier":[114],"removal":[115],"rotation":[117],"augmentation.":[118],"In":[119],"this":[120,134],"paper,":[121],"we":[122],"propose":[123],"novel":[125],"imperceptible":[126,208],"and":[127,140,160,198,218],"robust":[128],"attack":[130,231],"(IRBA)":[131],"tackle":[133],"challenge.":[135],"We":[136],"nonlinear":[139],"local":[141,145],"transformation,":[142],"called":[143],"weighted":[144],"(WLT),":[147],"unique":[153,176],"transformations.":[154,171],"As":[155],"there":[156],"several":[158],"hyper-parameters":[159],"randomness":[161],"WLT,":[163],"it":[164],"is":[165,195,243,252],"difficult":[166],"produce":[168],"two":[169],"similar":[170],"Consequently,":[172],"transformations":[177],"resistant":[182],"aforementioned":[184],"techniques.":[186],"Besides,":[187],"distortion":[189],"caused":[190],"fixed":[193],"WLT":[194],"both":[196],"controllable":[197],"smooth,":[199],"resulting":[200],"generated":[203],"human":[210],"inspection.":[211],"Extensive":[212],"experiments":[213],"three":[215],"benchmark":[216],"datasets":[217],"four":[219],"models":[220],"IRBA":[223],"achieves":[224],"<inline-formula":[225],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[226,256],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">":[227],"<tex-math":[228],"notation=\"LaTeX\">$80\\%+$":[229],"</tex-math></inline-formula>":[230],"success":[232],"rate":[233],"(ASR)":[234],"most":[236],"cases":[237],"techniques,":[241],"which":[242],"significantly":[244],"higher":[245],"than":[246],"previous":[247],"state-of-the-art":[248],"attacks.":[249],"Our":[250],"code":[251],"available":[253],"at":[254],"<uri":[255],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">https://github.com/KuofengGao/IRBA</uri>":[257],".":[258]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":17},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":2}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}