{"id":"https://openalex.org/W4413145712","doi":"https://doi.org/10.1109/cvpr52734.2025.01110","title":"Seeing is Not Believing: Adversarial Natural Object Optimization for Hard-Label 3D Scene Attacks","display_name":"Seeing is Not Believing: Adversarial Natural Object Optimization for Hard-Label 3D Scene Attacks","publication_year":2025,"publication_date":"2025-06-10","ids":{"openalex":"https://openalex.org/W4413145712","doi":"https://doi.org/10.1109/cvpr52734.2025.01110"},"language":"en","primary_location":{"id":"doi:10.1109/cvpr52734.2025.01110","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cvpr52734.2025.01110","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007438512","display_name":"Daizong Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Daizong Liu","raw_affiliation_strings":["Peking University,Wangxuan Institute of Computer Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University,Wangxuan Institute of Computer Technology","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101596498","display_name":"Wei Hu","orcid":"https://orcid.org/0000-0003-4880-991X"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Hu","raw_affiliation_strings":["Peking University,Wangxuan Institute of Computer Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University,Wangxuan Institute of Computer Technology","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I20231570"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"11886","last_page":"11897"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11533","display_name":"Melanoma and MAPK Pathways","score":0.9215999841690063,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T12859","display_name":"Cell Image Analysis Techniques","score":0.9114999771118164,"subfield":{"id":"https://openalex.org/subfields/1304","display_name":"Biophysics"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8066157102584839},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7081524729728699},{"id":"https://openalex.org/keywords/object","display_name":"Object (grammar)","score":0.6308199763298035},{"id":"https://openalex.org/keywords/natural","display_name":"Natural (archaeology)","score":0.5681635737419128},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5422182679176331},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.45978763699531555},{"id":"https://openalex.org/keywords/history","display_name":"History","score":0.07333049178123474}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8066157102584839},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7081524729728699},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.6308199763298035},{"id":"https://openalex.org/C2776608160","wikidata":"https://www.wikidata.org/wiki/Q4785462","display_name":"Natural (archaeology)","level":2,"score":0.5681635737419128},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5422182679176331},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.45978763699531555},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.07333049178123474},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cvpr52734.2025.01110","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cvpr52734.2025.01110","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4399999976158142,"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2772917594","https://openalex.org/W2036807459","https://openalex.org/W2058170566","https://openalex.org/W2755342338","https://openalex.org/W2166024367","https://openalex.org/W3116076068","https://openalex.org/W2229312674","https://openalex.org/W2951359407","https://openalex.org/W2079911747","https://openalex.org/W1969923398"],"abstract_inverted_index":{"Deep":[0],"learning":[1],"models":[2,132,236],"for":[3,184],"3D":[4,31,40,54,80,100,111,131,169,235],"data":[5,62],"have":[6,15],"shown":[7],"to":[8,11,83,95,106,122,133,161,188,205,214,248],"be":[9],"vulnerable":[10],"adversarial":[12,125,217,243],"attacks,":[13],"which":[14,127],"received":[16],"increasing":[17],"attention":[18],"in":[19,48,192,218],"various":[20],"safety-critical":[21],"applications":[22,55,85],"such":[23],"as":[24],"autonomous":[25],"driving":[26],"and":[27,71,118,159,182,237,245],"robotic":[28],"navigation.":[29],"Existing":[30],"attackers":[32],"mainly":[33],"put":[34],"effort":[35],"into":[36,156],"attacking":[37],"the":[38,49,68,97,107,110,115,168,175,193,207],"simple":[39],"classification":[41],"model":[42,69],"by":[43,165,173],"perturbing":[44],"point":[45],"cloud":[46],"objects":[47,139],"white/black-box":[50],"setting.":[51],"However,":[52],"real-world":[53],"focus":[56],"on":[57,142,233],"tackling":[58],"more":[59],"complicated":[60],"scene-based":[61,239],"while":[63],"sharing":[64],"no":[65],"information":[66],"about":[67],"parameters":[70],"logits":[72],"with":[73,103,153,178,210,241],"users.":[74],"Therefore,":[75],"directly":[76],"applying":[77],"previous":[78],"naive":[79],"attack":[81,102,116,228],"methods":[82],"these":[84,138],"does":[86],"not":[87],"work.":[88],"To":[89,113],"this":[90,92],"end,":[91],"paper":[93],"attempts":[94],"address":[96],"challenging":[98],"hard-label":[99],"scene":[101,144,194],"access":[104],"only":[105,166],"input/output":[108],"of":[109],"models.":[112],"make":[114,215],"effective":[117],"stealthy,":[119],"we":[120,147,197],"propose":[121],"generate":[123],"universal":[124],"objects,":[126],"will":[128],"mislead":[129,162],"scene-aware":[130],"predict":[134],"attacker-chosen":[135],"labels":[136],"whenever":[137],"are":[140],"placed":[141],"any":[143],"input.":[145],"Specifically,":[146],"inject":[148],"an":[149,185,219],"imperceptible":[150],"object":[151,181,208],"trigger":[152,176,209],"further":[154],"perturbations":[155],"all":[157],"scenes":[158],"learn":[160],"their":[163],"reasoning":[164],"querying":[167],"model.":[170],"We":[171],"start":[172],"initializing":[174],"pattern":[177],"a":[179,199],"realistic":[180],"searching":[183],"appropriate":[186],"location":[187],"place":[189],"it":[190],"naturally":[191],"data.":[195],"Then,":[196],"design":[198],"novel":[200],"weighted":[201],"gradient":[202],"estimation":[203],"strategy":[204],"perturb":[206],"additive":[211],"slight":[212],"noise":[213],"them":[216],"iterative":[220],"optimization":[221],"procedure.":[222],"Extensive":[223],"experiments":[224],"demonstrate":[225],"that":[226],"our":[227],"can":[229],"achieve":[230],"superior":[231],"performance":[232],"seven":[234],"three":[238],"datasets,":[240],"satisfactory":[242],"imperceptibility":[244],"strong":[246],"resistance":[247],"defense":[249],"methods.":[250]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}