{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/nerfool-uncovering-the-vulnerability-of","title":"NeRFool: Uncovering the Vulnerability of Generalizable Neural Radiance Fields against Adversarial Perturbations","arxiv_id":"2306.06359","date":"2023-06-10","proceeding":null,"authors":["Yonggan Fu","Ye Yuan","Souvik Kundu","Shang Wu","Shunyao Zhang","Yingyan Celine Lin"],"abstract":"Generalizable Neural Radiance Fields (GNeRF) are one of the most promising real-world solutions for novel view synthesis, thanks to their cross-scene generalization capability and thus the possibility of instant rendering on new scenes. While adversarial robustness is essential for real-world applications, little study has been devoted to understanding its implication on GNeRF. We hypothesize that because GNeRF is implemented by conditioning on the source views from new scenes, which are often acquired from the Internet or third-party providers, there are potential new security concerns regarding its real-world applications. Meanwhile, existing understanding and solutions for neural networks' adversarial robustness may not be applicable to GNeRF, due to its 3D nature and uniquely diverse operations. To this end, we present NeRFool, which to the best of our knowledge is the first work that sets out to understand the adversarial robustness of GNeRF. Specifically, NeRFool unveils the vulnerability patterns and important insights regarding GNeRF's adversarial robustness. Built upon the above insights gained from NeRFool, we further develop NeRFool+, which integrates two techniques capable of effectively attacking GNeRF across a wide range of target views, and provide guidelines for defending against our proposed attacks. We believe that our NeRFool/NeRFool+ lays the initial foundation for future innovations in developing robust real-world GNeRF solutions. Our codes are available at: https://github.com/GATECH-EIC/NeRFool.","url_abs":"https://arxiv.org/abs/2306.06359v2","url_pdf":"https://arxiv.org/pdf/2306.06359v2.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"nerfool-uncovering-the-vulnerability-of","repo_url":"https://github.com/gatech-eic/nerfool","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok","spdx":"MIT"}}],"tasks":[{"task_slug":"adversarial-robustness","task_name":"Adversarial Robustness"},{"task_slug":"novel-view-synthesis","task_name":"Novel View Synthesis"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2306.06359","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2306.06359"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"deterministic:regex_extraction","url":"https://github.com/GATECH-EIC/NeRFool","reach":{"status":"ok","spdx":"MIT"}},{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/gatech-eic/nerfool","reach":{"status":"ok","spdx":"MIT"}}],"summary":{"ran":6,"ran_honours":1,"ran_draft_wrong":4,"ran_fixture":3,"unverified":5},"by_repo_kind":{"official":{"samples":19,"ran":14,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"375ac5d275e351d0","entry":"SL1Loss","repo":"gatech-eic/nerfool","repo_kind":"official","path":"eval/ibrnet/eval_adv.py","file_url":"https://github.com/gatech-eic/nerfool/blob/HEAD/eval/ibrnet/eval_adv.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"375ac5d275e351d0"}},{"code_sha256_prefix":"5f62ab16341c86e9","entry":"calc_depth_smooth_loss","repo":"gatech-eic/nerfool","repo_kind":"official","path":"eval/ibrnet/eval_adv.py","file_url":"https://github.com/gatech-eic/nerfool/blob/HEAD/eval/ibrnet/eval_adv.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"5f62ab16341c86e9"}},{"code_sha256_prefix":"abd301e7de6eb76a","entry":"calc_depth_var","repo":"gatech-eic/nerfool","repo_kind":"official","path":"eval/ibrnet/eval_adv.py","file_url":"https://github.com/gatech-eic/nerfool/blob/HEAD/eval/ibrnet/eval_adv.py","link_basis":"first_harvest_node","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"abd301e7de6eb76a"}},{"code_sha256_prefix":"22e670c8093b7c80","entry":"class_for_name","repo":"GATECH-EIC/NeRFool","repo_kind":"official","path":"gnt/feature_network.py","file_url":"https://github.com/GATECH-EIC/NeRFool/blob/HEAD/gnt/feature_network.py","link_basis":"plan_row","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"22e670c8093b7c80"}},{"code_sha256_prefix":"036782aebf2185a0","entry":"conv1x1","repo":"GATECH-EIC/NeRFool","repo_kind":"official","path":"gnt/feature_network.py","file_url":"https://github.com/GATECH-EIC/NeRFool/blob/HEAD/gnt/feature_network.py","link_basis":"plan_row","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"036782aebf2185a0"}},{"code_sha256_prefix":"7e558f4229d053af","entry":"conv3x3","repo":"GATECH-EIC/NeRFool","repo_kind":"official","path":"gnt/feature_network.py","file_url":"https://github.com/GATECH-EIC/NeRFool/blob/HEAD/gnt/feature_network.py","link_basis":"plan_row","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"7e558f4229d053af"}},{"code_sha256_prefix":"ffadd89803ecb27b","entry":"dilate_img","repo":"GATECH-EIC/NeRFool","repo_kind":"official","path":"ibrnet/sample_ray.py","file_url":"https://github.com/GATECH-EIC/NeRFool/blob/HEAD/ibrnet/sample_ray.py","link_basis":"plan_row","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"ffadd89803ecb27b"}},{"code_sha256_prefix":"34ea5f2db980a0f7","entry":"fused_mean_variance","repo":"GATECH-EIC/NeRFool","repo_kind":"official","path":"ibrnet/mlp_network.py","file_url":"https://github.com/GATECH-EIC/NeRFool/blob/HEAD/ibrnet/mlp_network.py","link_basis":"plan_row","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"34ea5f2db980a0f7"}},{"code_sha256_prefix":"598359a17b0a3a7f","entry":"img2mse","repo":"gatech-eic/nerfool","repo_kind":"official","path":"eval/ibrnet/eval_adv.py","file_url":"https://github.com/gatech-eic/nerfool/blob/HEAD/eval/ibrnet/eval_adv.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"598359a17b0a3a7f"}},{"code_sha256_prefix":"3b75759486992d96","entry":"parse_camera","repo":"gatech-eic/nerfool","repo_kind":"official","path":"eval/ibrnet/eval_adv.py","file_url":"https://github.com/gatech-eic/nerfool/blob/HEAD/eval/ibrnet/eval_adv.py","link_basis":"first_harvest_node","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"3b75759486992d96"}},{"code_sha256_prefix":"a4e9aa55fe6d49cd","entry":"project_with_depth","repo":"gatech-eic/nerfool","repo_kind":"official","path":"eval/ibrnet/eval_adv.py","file_url":"https://github.com/gatech-eic/nerfool/blob/HEAD/eval/ibrnet/eval_adv.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"a4e9aa55fe6d49cd"}},{"code_sha256_prefix":"1bbb09fcee81b67f","entry":"raw2outputs","repo":"gatech-eic/nerfool","repo_kind":"official","path":"eval/ibrnet/eval_adv.py","file_url":"https://github.com/gatech-eic/nerfool/blob/HEAD/eval/ibrnet/eval_adv.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"1bbb09fcee81b67f"}},{"code_sha256_prefix":"1771162d12b6e77f","entry":"sample_along_camera_ray","repo":"gatech-eic/nerfool","repo_kind":"official","path":"eval/ibrnet/eval_adv.py","file_url":"https://github.com/gatech-eic/nerfool/blob/HEAD/eval/ibrnet/eval_adv.py","link_basis":"first_harvest_node","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"1771162d12b6e77f"}},{"code_sha256_prefix":"ca8853bb68d69984","entry":"sample_pdf","repo":"gatech-eic/nerfool","repo_kind":"official","path":"eval/ibrnet/eval_adv.py","file_url":"https://github.com/gatech-eic/nerfool/blob/HEAD/eval/ibrnet/eval_adv.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"ca8853bb68d69984"}},{"code_sha256_prefix":"80acb005a349e795","entry":"RaySamplerSingleImage","repo":"gatech-eic/nerfool","repo_kind":"official","path":"eval/ibrnet/eval_adv.py","file_url":"https://github.com/gatech-eic/nerfool/blob/HEAD/eval/ibrnet/eval_adv.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"80acb005a349e795"}},{"code_sha256_prefix":"b7b60558eb5ef908","entry":"de_parallel","repo":"GATECH-EIC/NeRFool","repo_kind":"official","path":"gnt/model.py","file_url":"https://github.com/GATECH-EIC/NeRFool/blob/HEAD/gnt/model.py","link_basis":"plan_row","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"b7b60558eb5ef908"}},{"code_sha256_prefix":"ed70bc3a7a4fe74a","entry":"forward_warp","repo":"gatech-eic/nerfool","repo_kind":"official","path":"eval/ibrnet/eval_adv.py","file_url":"https://github.com/gatech-eic/nerfool/blob/HEAD/eval/ibrnet/eval_adv.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"ed70bc3a7a4fe74a"}},{"code_sha256_prefix":"d861a166b8b9beb1","entry":"optimize_adv_perturb","repo":"gatech-eic/nerfool","repo_kind":"official","path":"eval/ibrnet/eval_adv.py","file_url":"https://github.com/gatech-eic/nerfool/blob/HEAD/eval/ibrnet/eval_adv.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"d861a166b8b9beb1"}},{"code_sha256_prefix":"be1957ada4055c7a","entry":"render_rays","repo":"gatech-eic/nerfool","repo_kind":"official","path":"eval/ibrnet/eval_adv.py","file_url":"https://github.com/gatech-eic/nerfool/blob/HEAD/eval/ibrnet/eval_adv.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"be1957ada4055c7a"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}