{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/arxiv-2508-15650","title":"Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidance","arxiv_id":"2508.15650","date":"2025-08-21","proceeding":"ICCV","authors":["Shuchao Pang","Zhenghan Chen","Shen Zhang","Liming Lu","Siyuan Liang","Anan Du","Yongbin Zhou"],"abstract":"Deep neural networks for 3D point clouds have been demonstrated to be vulnerable to adversarial examples. Previous 3D adversarial attack methods often exploit certain information about the target models, such as model parameters or outputs, to generate adversarial point clouds. However, in realistic scenarios, it is challenging to obtain any information about the target models under conditions of absolute security. Therefore, we focus on transfer-based attacks, where generating adversarial point clouds does not require any information about the target models. Based on our observation that the critical features used for point cloud classification are consistent across different DNN architectures, we propose CFG, a novel transfer-based black-box attack method that improves the transferability of adversarial point clouds via the proposed Critical Feature Guidance. Specifically, our method regularizes the search of adversarial point clouds by computing the importance of the extracted features, prioritizing the corruption of critical features that are likely to be adopted by diverse architectures. Further, we explicitly constrain the maximum deviation extent of the generated adversarial point clouds in the loss function to ensure their imperceptibility. Extensive experiments conducted on the ModelNet40 and ScanObjectNN benchmark datasets demonstrate that the proposed CFG outperforms the state-of-the-art attack methods by a large margin.","url_abs":"https://arxiv.org/abs/2508.15650","url_pdf":"https://arxiv.org/pdf/2508.15650","source":{"archive":null,"snapshot":"2025-07-28","note":"not in the Papers with Code archive (frozen at the snapshot)","row_kind":"graph","title_abstract_authors_date":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)"},"code_links":[],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2508.15650","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2508.15650"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"mentioned_in_github":null,"is_official":null,"provenance":"deterministic:regex_extraction","mentioned_in_paper":null,"url":"https://github.com/AIASLab/CFG-ICCV2025","reach":{"status":"ok","spdx":"MIT"}}],"summary":{"ran_fixture":4,"unverified":5},"by_repo_kind":{"found_in_text":{"samples":9,"ran":4,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"449a0265144f6530","entry":"index_points","repo":"AIASLab/CFG-ICCV2025","repo_kind":"found_in_text","path":"Model/point_pn.py","file_url":"https://github.com/AIASLab/CFG-ICCV2025/blob/HEAD/Model/point_pn.py","link_basis":"harvester_set","language":"python","status":"ran_fixture","verification_level":2,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"449a0265144f6530"}},{"code_sha256_prefix":"cdd0141594039dcb","entry":"knn","repo":"AIASLab/CFG-ICCV2025","repo_kind":"found_in_text","path":"Model/DGCNN.py","file_url":"https://github.com/AIASLab/CFG-ICCV2025/blob/HEAD/Model/DGCNN.py","link_basis":"plan_row","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"cdd0141594039dcb"}},{"code_sha256_prefix":"3fc6f6b239b211f9","entry":"knn_point","repo":"AIASLab/CFG-ICCV2025","repo_kind":"found_in_text","path":"Model/point_pn.py","file_url":"https://github.com/AIASLab/CFG-ICCV2025/blob/HEAD/Model/point_pn.py","link_basis":"harvester_set","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"3fc6f6b239b211f9"}},{"code_sha256_prefix":"3bfe172e686075cd","entry":"square_distance","repo":"AIASLab/CFG-ICCV2025","repo_kind":"found_in_text","path":"Model/point_pn.py","file_url":"https://github.com/AIASLab/CFG-ICCV2025/blob/HEAD/Model/point_pn.py","link_basis":"harvester_set","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"3bfe172e686075cd"}},{"code_sha256_prefix":"9019aa1bd21a7d63","entry":"get_graph_feature","repo":"AIASLab/CFG-ICCV2025","repo_kind":"found_in_text","path":"Model/DGCNN.py","file_url":"https://github.com/AIASLab/CFG-ICCV2025/blob/HEAD/Model/DGCNN.py","link_basis":"plan_row","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"9019aa1bd21a7d63"}},{"code_sha256_prefix":"0a79ea552f8be96b","entry":"get_graph_feature","repo":"AIASLab/CFG-ICCV2025","repo_kind":"found_in_text","path":"Model/ccn.py","file_url":"https://github.com/AIASLab/CFG-ICCV2025/blob/HEAD/Model/ccn.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"0a79ea552f8be96b"}},{"code_sha256_prefix":"702f0f77f4137090","entry":"norm_l2_loss","repo":"AIASLab/CFG-ICCV2025","repo_kind":"found_in_text","path":"Attacker/CFG.py","file_url":"https://github.com/AIASLab/CFG-ICCV2025/blob/HEAD/Attacker/CFG.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"702f0f77f4137090"}},{"code_sha256_prefix":"865f4093b0284d7a","entry":"sample","repo":"AIASLab/CFG-ICCV2025","repo_kind":"found_in_text","path":"loss_utils.py","file_url":"https://github.com/AIASLab/CFG-ICCV2025/blob/HEAD/loss_utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"865f4093b0284d7a"}},{"code_sha256_prefix":"0ad12b1e8408e2f9","entry":"set_bn_momentum_default","repo":"AIASLab/CFG-ICCV2025","repo_kind":"found_in_text","path":"Model/PointNetPP_ssg.py","file_url":"https://github.com/AIASLab/CFG-ICCV2025/blob/HEAD/Model/PointNetPP_ssg.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"0ad12b1e8408e2f9"}}]},"arxiv_metadata":{"licence":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)","fields":["title","abstract","authors","date"],"primary_category":"cs.CV","source":"arxiv_api"},"syntology_extracted_results":null}