arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2201.12733cs.CVcs.LG

TPC:针对点云模型的变换特定平滑方法

TPC: Transformation-Specific Smoothing for Point Cloud Models

Institute for Interdisciplinary Information Sciences, Tsinghua University(清华大学交叉信息研究院);University of Illinois Urbana-Champaign (UIUC)(伊利诺伊大学厄巴纳-香槟分校(UIUC))

Wenda Chu, Linyi Li, Bo Li

AI总结:

本文提出TPC框架,针对点云模型语义变换攻击,分类3D变换并制定认证策略,显著提升鲁棒性认证准确率。

摘要:

采用神经网络架构的点云模型已取得巨大成功,并被广泛应用于安全关键型应用中,例如自动驾驶汽车中基于激光雷达的识别系统。然而,此类模型被证明易受对抗性攻击的影响,这些攻击旨在施加诸如旋转和锥形化等隐蔽的语义变换,以误导模型预测。在本文中,我们提出了一种变换特定的平滑框架TPC,它为点云模型针对语义变换攻击提供了紧密且可扩展的鲁棒性保证。我们首先将常见的3D变换分为三类:加性变换(如剪切)、可组合变换(如旋转)和间接可组合变换(如锥形化),并分别针对所有类别提出了通用的鲁棒性认证策略。随后,我们为一系列特定的语义变换及其组合制定了独特的认证协议。在多种常见3D变换上的大量实验表明,TPC显著优于现有技术水平。例如,我们的框架将针对绕z轴扭曲变换(在20°以内)的认证准确率从20.3%提升至83.8%。代码和模型可在https://github.com/chuwd19/Point-Cloud-Smoothing获取。

英文摘要:

Point cloud models with neural network architectures have achieved great success and have been widely used in safety-critical applications, such as Lidar-based recognition systems in autonomous vehicles. However, such models are shown vulnerable to adversarial attacks which aim to apply stealthy semantic transformations such as rotation and tapering to mislead model predictions. In this paper, we propose a transformation-specific smoothing framework TPC, which provides tight and scalable robustness guarantees for point cloud models against semantic transformation attacks. We first categorize common 3D transformations into three categories: additive (e.g., shearing), composable (e.g., rotation), and indirectly composable (e.g., tapering), and we present generic robustness certification strategies for all categories respectively. We then specify unique certification protocols for a range of specific semantic transformations and their compositions. Extensive experiments on several common 3D transformations show that TPC significantly outperforms the state of the art. For example, our framework boosts the certified accuracy against twisting transformation along z-axis (within 20$^\circ$) from 20.3$\%$ to 83.8$\%$. Codes and models are available at https://github.com/chuwd19/Point-Cloud-Smoothing.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑