3D vision with real-time LiDAR-based point cloud data became a vital part of autonomous system research, especially perception and prediction modules use for object classification, segmentation, and detection. Despite their success, point cloud-based network models are vulnerable to multiple adversarial attacks, where the certain factor of changes in the validation set causes significant performance drop in well-trained networks. Most of the existing verifiers work perfectly on 2D convolution. Due to complex architecture, dimension of hyper-parameter, and 3D convolution, no verifiers can perform the basic layer-wise verification. It is difficult to conclude the robustness of a 3D vision model without performing the verification. Because there will be always corner cases and adversarial input that can compromise the model's effectiveness. In this project, we describe a point cloud-based network verifier that successfully deals state of the art 3D classifier PointNet verifies the robustness by generating adversarial inputs. We have used extracted properties from the trained PointNet and changed certain factors for perturbation input. We calculate the impact on model accuracy versus property factor and can test PointNet network's robustness against a small collection of perturbing input states resulting from adversarial attacks like the suggested hybrid reverse signed attack. The experimental results reveal that the resilience property of PointNet is affected by our hybrid reverse signed perturbation strategy
翻译:以 LiDAR 为基础的点云数据为实时的 3D 3D 视觉 3D 的 3D 点云数据 成为自主系统研究的重要组成部分, 特别是用于对象分类、 分割和检测的感知和预测模块 。 尽管取得了成功, 点云网络模型很容易受到多重对抗性攻击, 验证集中的某些变化因素导致经过良好训练的网络出现显著的性能下降。 大部分现有的验证员在 2D 组合上完美地工作 。 由于复杂的结构、 超参数尺寸 和 3D Convolution, 任何核查员都无法进行基本的层级核查。 不进行核查, 很难完成 3D 视觉模型的稳健性, 很难完成 3D 视觉模型模型的校准模式。 因为总是有角落案例和对抗性投入, 这会损害模型的效果 。 在这个项目中, 我们描述一个基于点云基网络的点验证器, 成功处理艺术 3D Gligerrentr Point Net 的状态, 通过产生对抗性攻击的小规模的反向式战略, 我们通过签署反向式网络进行反向式攻击的反向式攻击的反向式攻击的观察结果, 。