DBL-Attack: Decision Boundary Loss-Driven Adversarial Attack to Generate Transferable Traffic Object Point Clouds Using Factorized Random Perturbation
摘要
Deep neural networks have begun to receive large amounts of point cloud data for tasks such as intelligent driving and robot recognition. Meanwhile, neural networks have been proven to be highly susceptible to adversarial perturbations. Most existing whitebox-based perturbation attack methods require attackers to fully understand the architecture and parameters of the victim model, and often stay away from the decision boundary of the model for high attack success rate. This complex requirement makes it difficult to achieve in real application scenarios. In order to solve this problem, we will focus on the research of point cloud disturbance transferability. Studying the transferability of perturbation attacks is of great significance for enhancing the security and reliability of deep neural networks in real-world application scenarios. We propose a new method for point cloud perturbation attack called DBL-Attack. Based on the decomposition perturbation method, the model prediction is treated as a probability distribution, and a decision boundary loss term is introduced to optimize the original loss function. This ensures that adversarial perturbations are kept away from the decision boundary during the update process, further improving their transferability. Our method consistently demonstrates superior performance across both real-world and synthetic datasets.