{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/understanding-the-robustness-of-skeleton","title":"Understanding the Robustness of Skeleton-based Action Recognition under Adversarial Attack","arxiv_id":"2103.05347","date":"2021-03-09","proceeding":"CVPR 2021 1","authors":["He Wang","Feixiang He","Zhexi Peng","Tianjia Shao","Yong-Liang Yang","Kun Zhou","David Hogg"],"abstract":"Action recognition has been heavily employed in many applications such as autonomous vehicles, surveillance, etc, where its robustness is a primary concern. In this paper, we examine the robustness of state-of-the-art action recognizers against adversarial attack, which has been rarely investigated so far. To this end, we propose a new method to attack action recognizers that rely on 3D skeletal motion. Our method involves an innovative perceptual loss that ensures the imperceptibility of the attack. Empirical studies demonstrate that our method is effective in both white-box and black-box scenarios. Its generalizability is evidenced on a variety of action recognizers and datasets. Its versatility is shown in different attacking strategies. Its deceitfulness is proven in extensive perceptual studies. Our method shows that adversarial attack on 3D skeletal motions, one type of time-series data, is significantly different from traditional adversarial attack problems. Its success raises serious concern on the robustness of action recognizers and provides insights on potential improvements.","url_abs":"https://arxiv.org/abs/2103.05347v2","url_pdf":"https://arxiv.org/pdf/2103.05347v2.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"understanding-the-robustness-of-skeleton","repo_url":"https://github.com/realcrane/SMART","is_official":1,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"pytorch","reach":null}],"tasks":[{"task_slug":"action-recognition-in-videos","task_name":"Action Recognition"},{"task_slug":"adversarial-attack","task_name":"Adversarial Attack"},{"task_slug":"autonomous-vehicles","task_name":"Autonomous Vehicles"},{"task_slug":"skeleton-based-action-recognition","task_name":"Skeleton Based Action Recognition"},{"task_slug":"time-series-1","task_name":"Time Series"},{"task_slug":"time-series","task_name":"Time Series Analysis"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":"https://syntology.ai/paper/2103.05347","atlas_url":"https://app.syntology.ai/?focus=2103.05347","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2103.05347"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-25T09:33:49+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/realcrane/SMART","reach":null}],"summary":{"ran":2,"unverified":4},"by_repo_kind":{"official":{"samples":6,"ran":2,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":6,"samples":[{"code_sha256_prefix":"5c0335e20ae8982a","entry":"ActionAttacker","repo":"realcrane/SMART","repo_kind":"official","path":"code/Attackers/SMARTAttacker.py","file_url":"https://github.com/realcrane/SMART/blob/HEAD/code/Attackers/SMARTAttacker.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"5c0335e20ae8982a"}},{"code_sha256_prefix":"d277185a612f829e","entry":"ActionClassifier","repo":"realcrane/SMART","repo_kind":"official","path":"code/Attackers/SMARTAttacker.py","file_url":"https://github.com/realcrane/SMART/blob/HEAD/code/Attackers/SMARTAttacker.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"d277185a612f829e"}},{"code_sha256_prefix":"add9f890f112eb72","entry":"ClassifierArgs","repo":"realcrane/SMART","repo_kind":"official","path":"code/Attackers/SMARTAttacker.py","file_url":"https://github.com/realcrane/SMART/blob/HEAD/code/Attackers/SMARTAttacker.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"add9f890f112eb72"}},{"code_sha256_prefix":"09e724115d32b811","entry":"SmartAttacker","repo":"realcrane/SMART","repo_kind":"official","path":"code/Attackers/SMARTAttacker.py","file_url":"https://github.com/realcrane/SMART/blob/HEAD/code/Attackers/SMARTAttacker.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"09e724115d32b811"}},{"code_sha256_prefix":"38ec0fff58b07f51","entry":"ThreeLayerMLP","repo":"realcrane/SMART","repo_kind":"official","path":"code/Attackers/SMARTAttacker.py","file_url":"https://github.com/realcrane/SMART/blob/HEAD/code/Attackers/SMARTAttacker.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"38ec0fff58b07f51"}},{"code_sha256_prefix":"024b1ed5cc82d2e8","entry":"loadClassifier","repo":"realcrane/SMART","repo_kind":"official","path":"code/Attackers/SMARTAttacker.py","file_url":"https://github.com/realcrane/SMART/blob/HEAD/code/Attackers/SMARTAttacker.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"024b1ed5cc82d2e8"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}