Login Paper Search My Schedule Paper Index Help

My ICIP 2021 Schedule

Note: Your custom schedule will not be saved unless you create a new account or login to an existing account.
  1. Create a login based on your email (takes less than one minute)
  2. Perform 'Paper Search'
  3. Select papers that you desire to save in your personalized schedule
  4. Click on 'My Schedule' to see the current list of selected papers
  5. Click on 'Printable Version' to create a separate window suitable for printing (the header and menu will appear, but will not actually print)

Paper Detail

Paper ID3D-1.6
Paper Title TD-NET: TOPOLOGY DESTRUCTION NETWORK FOR GENERATING ADVERSARIAL POINT CLOUD
Authors Jingyu Zhang, Chunhua Jiang, Xupeng Wang, Mumuxin Cai, University of Electronic Science and Technology of China, China
Session3D-1: Point Cloud Processing 1
LocationArea J
Session Time:Tuesday, 21 September, 15:30 - 17:00
Presentation Time:Tuesday, 21 September, 15:30 - 17:00
Presentation Poster
Topic Three-Dimensional Image and Video Processing: Point cloud processing
IEEE Xplore Open Preview  Click here to view in IEEE Xplore
Abstract Despite a great progress has been made in 3D point cloud recognition, recent studies find that deep models are vulnerable to adversarial attacks generated through various point cloud transformations. However, existing spoofing attack methods neglect the influence of point cloud topology on the model recognition accuracy. In this paper, we propose a novel adversarial point cloud generation network, named Topology Destruction Network (TD-Net), which destroys topological structure of a point cloud by selectively dropping points leading to the formulation of holes on the surface. The network consists of an encoder and a decoder. The encoder first leverages a PointNet architecture to extract geometric information of the original point cloud, from which a topological adjacency matrix is encoded describing adjacency relationships between points. The decoder selects a specific point to drop associated with its neighboring points derived from the learned adjacency matrix, resulting in an adversarial point cloud with a destructed topology. Experiments on the ModelNet40 dataset demonstrate that the proposed method surpasses existing adversarial attacks in terms of reducing model recognition accuracy.