{"id":"https://openalex.org/W3216468633","doi":"https://doi.org/10.1109/tpami.2022.3193449","title":"Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification","display_name":"Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W3216468633","doi":"https://doi.org/10.1109/tpami.2022.3193449","mag":"3216468633","pmid":"https://pubmed.ncbi.nlm.nih.gov/35877804"},"language":"en","primary_location":{"id":"doi:10.1109/tpami.2022.3193449","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2022.3193449","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078220957","display_name":"Daizong Liu","orcid":"https://orcid.org/0000-0001-8179-4508"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Daizong Liu","raw_affiliation_strings":["Wangxuan Institute of Computer Technology, Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-8179-4508","affiliations":[{"raw_affiliation_string":"Wangxuan Institute of Computer Technology, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059045087","display_name":"Wei Hu","orcid":"https://orcid.org/0000-0002-9860-0922"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Hu","raw_affiliation_strings":["Wangxuan Institute of Computer Technology, Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9860-0922","affiliations":[{"raw_affiliation_string":"Wangxuan Institute of Computer Technology, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I20231570"],"apc_list":null,"apc_paid":null,"fwci":7.3099,"has_fulltext":false,"cited_by_count":71,"citation_normalized_percentile":{"value":0.97598413,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"45","issue":"4","first_page":"1","last_page":"18"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/point-cloud","display_name":"Point cloud","score":0.8211215734481812},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7480411529541016},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6809550523757935},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.6776986122131348},{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.6512400507926941},{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.5586418509483337},{"id":"https://openalex.org/keywords/outlier","display_name":"Outlier","score":0.549731969833374},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5099915266036987},{"id":"https://openalex.org/keywords/transfer-of-learning","display_name":"Transfer of learning","score":0.5030776858329773},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.46513432264328003},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4467051923274994},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.443491667509079},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.4383869469165802},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.43373268842697144},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.43164876103401184},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.42857950925827026},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.11286565661430359}],"concepts":[{"id":"https://openalex.org/C131979681","wikidata":"https://www.wikidata.org/wiki/Q1899648","display_name":"Point cloud","level":2,"score":0.8211215734481812},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7480411529541016},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6809550523757935},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.6776986122131348},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.6512400507926941},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.5586418509483337},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.549731969833374},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5099915266036987},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.5030776858329773},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.46513432264328003},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4467051923274994},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.443491667509079},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.4383869469165802},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.43373268842697144},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.43164876103401184},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.42857950925827026},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.11286565661430359},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tpami.2022.3193449","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2022.3193449","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},{"id":"pmid:35877804","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/35877804","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on pattern analysis and machine intelligence","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","score":0.7200000286102295,"display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":105,"referenced_works":["https://openalex.org/W1489959051","https://openalex.org/W1522301498","https://openalex.org/W1644641054","https://openalex.org/W1673923490","https://openalex.org/W1914219707","https://openalex.org/W1920022804","https://openalex.org/W1945616565","https://openalex.org/W1980811840","https://openalex.org/W2096733369","https://openalex.org/W2100816864","https://openalex.org/W2160754664","https://openalex.org/W2180612164","https://openalex.org/W2243397390","https://openalex.org/W2524140598","https://openalex.org/W2543927648","https://openalex.org/W2555618208","https://openalex.org/W2560609797","https://openalex.org/W2560722161","https://openalex.org/W2607219512","https://openalex.org/W2620038827","https://openalex.org/W2753798143","https://openalex.org/W2765424254","https://openalex.org/W2774018344","https://openalex.org/W2774644650","https://openalex.org/W2793293836","https://openalex.org/W2796426482","https://openalex.org/W2798998662","https://openalex.org/W2895097814","https://openalex.org/W2902302021","https://openalex.org/W2911634294","https://openalex.org/W2915002466","https://openalex.org/W2917809001","https://openalex.org/W2962818872","https://openalex.org/W2962847335","https://openalex.org/W2962872506","https://openalex.org/W2963001136","https://openalex.org/W2963046274","https://openalex.org/W2963121255","https://openalex.org/W2963166243","https://openalex.org/W2963182550","https://openalex.org/W2963207607","https://openalex.org/W2963312728","https://openalex.org/W2963389226","https://openalex.org/W2963509914","https://openalex.org/W2963662610","https://openalex.org/W2963744840","https://openalex.org/W2963771536","https://openalex.org/W2963857521","https://openalex.org/W2963920068","https://openalex.org/W2964121744","https://openalex.org/W2964153729","https://openalex.org/W2964205597","https://openalex.org/W2964253222","https://openalex.org/W2969542116","https://openalex.org/W2971089407","https://openalex.org/W2979750740","https://openalex.org/W2981979099","https://openalex.org/W2982104318","https://openalex.org/W2983219069","https://openalex.org/W2996140774","https://openalex.org/W2997811843","https://openalex.org/W3008415104","https://openalex.org/W3014902535","https://openalex.org/W3025561882","https://openalex.org/W3026803626","https://openalex.org/W3033294558","https://openalex.org/W3034376720","https://openalex.org/W3034459762","https://openalex.org/W3034707001","https://openalex.org/W3035394681","https://openalex.org/W3035534438","https://openalex.org/W3092447222","https://openalex.org/W3096831136","https://openalex.org/W3102720581","https://openalex.org/W3103557498","https://openalex.org/W3108534877","https://openalex.org/W3111197774","https://openalex.org/W3146852364","https://openalex.org/W3162787701","https://openalex.org/W3163760706","https://openalex.org/W3170794970","https://openalex.org/W3186678659","https://openalex.org/W3199986655","https://openalex.org/W4214755140","https://openalex.org/W4287776022","https://openalex.org/W4293846201","https://openalex.org/W6631190155","https://openalex.org/W6637162671","https://openalex.org/W6640015359","https://openalex.org/W6640425456","https://openalex.org/W6729756640","https://openalex.org/W6739778489","https://openalex.org/W6739868092","https://openalex.org/W6744580074","https://openalex.org/W6745272055","https://openalex.org/W6746402973","https://openalex.org/W6758684365","https://openalex.org/W6759580348","https://openalex.org/W6763422710","https://openalex.org/W6768366551","https://openalex.org/W6776845386","https://openalex.org/W6784134718","https://openalex.org/W6793362090","https://openalex.org/W6795782005","https://openalex.org/W6810249204"],"related_works":["https://openalex.org/W2408141691","https://openalex.org/W3174927864","https://openalex.org/W2998983696","https://openalex.org/W3109877713","https://openalex.org/W3089060762","https://openalex.org/W4295136046","https://openalex.org/W4378191128","https://openalex.org/W4387039884","https://openalex.org/W2069098678","https://openalex.org/W3013667566"],"abstract_inverted_index":{"Although":[0],"many":[1],"efforts":[2],"have":[3],"been":[4],"made":[5],"into":[6],"attack":[7,68,184],"and":[8,84,121,140,188,192],"defense":[9,198],"on":[10],"the":[11,21,55,99,110,124,136,142,194],"2D":[12],"image":[13],"domain":[14],"in":[15,37],"recent":[16],"years,":[17],"few":[18],"methods":[19],"explore":[20],"vulnerability":[22],"of":[23,102,109,196],"3D":[24,27,77,163],"models.":[25,71,154],"Existing":[26],"attackers":[28],"generally":[29],"perform":[30],"point-wise":[31],"perturbation":[32,100],"over":[33],"point":[34,78,104,175],"clouds,":[35],"resulting":[36],"deformed":[38],"structures":[39],"or":[40],"outliers,":[41],"which":[42,58],"is":[43,185],"easily":[44],"perceivable":[45],"by":[46,87,171],"humans.":[47],"Moreover,":[48],"their":[49,149],"adversarial":[50,131,143],"examples":[51,116,144],"are":[52],"generated":[53,115],"under":[54],"white-box":[56],"setting,":[57],"frequently":[59],"suffers":[60],"from":[61,81],"low":[62],"success":[63],"rates":[64],"when":[65],"transferred":[66],"to":[67,114,134,145,151,158,165],"remote":[69],"black-box":[70,153,162],"In":[72],"this":[73],"article,":[74],"we":[75,97,128,156],"study":[76],"cloud":[79,176],"attacks":[80,170],"two":[82],"new":[83],"challenging":[85],"perspectives":[86],"proposing":[88],"a":[89],"novel":[90],"Imperceptible":[91],"Transfer":[92],"Attack":[93],"(ITA):":[94],"1)":[95],"Imperceptibility:":[96],"constrain":[98],"direction":[101],"each":[103],"along":[105],"its":[106],"normal":[107],"vector":[108],"neighborhood":[111],"surface,":[112],"leading":[113],"with":[117],"similar":[118],"geometric":[119],"properties":[120],"thus":[122],"enhancing":[123],"imperceptibility.":[125],"2)":[126],"Transferability:":[127],"develop":[129],"an":[130],"transformation":[132],"model":[133],"generate":[135],"most":[137],"harmful":[138],"distortions":[139],"enforce":[141],"resist":[146],"it,":[147],"improving":[148],"transferability":[150],"unknown":[152],"Further,":[155],"propose":[157],"train":[159],"more":[160,173,186],"robust":[161],"models":[164],"defend":[166],"against":[167],"such":[168],"ITA":[169,183],"learning":[172],"discriminative":[174],"representations.":[177],"Extensive":[178],"evaluations":[179],"demonstrate":[180],"that":[181],"our":[182,197],"imperceptible":[187],"transferable":[189],"than":[190],"state-of-the-arts":[191],"validate":[193],"superiority":[195],"strategy.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":26},{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":19},{"year":2022,"cited_by_count":3}],"updated_date":"2026-07-25T09:21:30.201066","created_date":"2025-10-10T00:00:00"}