LPF-Defense: 3D Adversarial Defense based on Frequency Analysis. (arXiv:2202.11287v2 [cs.CV] UPDATED)

Although 3D point cloud classification has recently been widely deployed in
different application scenarios, it is still very vulnerable to adversarial
attacks. This increases the importance of robust training of 3D models in the
face of adversarial attacks. Based on our analysis on the performance of
existing adversarial attacks, more adversarial perturbations are found in the
mid and high-frequency components of input data. Therefore, by suppressing the
high-frequency content in the training phase, the models robustness against
adversarial examples is …

3d adversarial analysis defense