{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/on-isometry-robustness-of-deep-3d-point-cloud","title":"On Isometry Robustness of Deep 3D Point Cloud Models under Adversarial Attacks","arxiv_id":"2002.12222","date":"2020-02-27","proceeding":"CVPR 2020 6","authors":["Yue Zhao","Yuwei Wu","Caihua Chen","Andrew Lim"],"abstract":"While deep learning in 3D domain has achieved revolutionary performance in many tasks, the robustness of these models has not been sufficiently studied or explored. Regarding the 3D adversarial samples, most existing works focus on manipulation of local points, which may fail to invoke the global geometry properties, like robustness under linear projection that preserves the Euclidean distance, i.e., isometry. In this work, we show that existing state-of-the-art deep 3D models are extremely vulnerable to isometry transformations. Armed with the Thompson Sampling, we develop a black-box attack with success rate over 95% on ModelNet40 data set. Incorporating with the Restricted Isometry Property, we propose a novel framework of white-box attack on top of spectral norm based perturbation. In contrast to previous works, our adversarial samples are experimentally shown to be strongly transferable. Evaluated on a sequence of prevailing 3D models, our white-box attack achieves success rates from 98.88% to 100%. It maintains a successful attack rate over 95% even within an imperceptible rotation range $[\\pm 2.81^{\\circ}]$.","url_abs":"https://arxiv.org/abs/2002.12222v2","url_pdf":"https://arxiv.org/pdf/2002.12222v2.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"on-isometry-robustness-of-deep-3d-point-cloud","repo_url":"https://github.com/skywalker6174/3d-isometry-robust","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"pytorch","reach":null}],"tasks":[{"task_slug":"thompson-sampling","task_name":"Thompson Sampling"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":"https://syntology.ai/paper/2002.12222","atlas_url":"https://app.syntology.ai/?focus=2002.12222","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2002.12222"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-25T09:33:49+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/skywalker6174/3d-isometry-robust","reach":null}],"summary":{"ran_draft_wrong":1,"unverified":2},"by_repo_kind":{"official":{"samples":3,"ran":1,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":3,"samples":[{"code_sha256_prefix":"1a65698a4ceb9300","entry":"logits_info","repo":"skywalker6174/3d-isometry-robust","repo_kind":"official","path":"attack.py","file_url":"https://github.com/skywalker6174/3d-isometry-robust/blob/HEAD/attack.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"1a65698a4ceb9300"}},{"code_sha256_prefix":"0b3628082aec98d2","entry":"iso_penalty","repo":"skywalker6174/3d-isometry-robust","repo_kind":"official","path":"attack.py","file_url":"https://github.com/skywalker6174/3d-isometry-robust/blob/HEAD/attack.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"0b3628082aec98d2"}},{"code_sha256_prefix":"1ef3ef28cc0e8539","entry":"spectral_penalty","repo":"skywalker6174/3d-isometry-robust","repo_kind":"official","path":"attack.py","file_url":"https://github.com/skywalker6174/3d-isometry-robust/blob/HEAD/attack.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"1ef3ef28cc0e8539"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}