{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T18:08:18Z","timestamp":1779386898365,"version":"3.53.1"},"reference-count":54,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Pattern Recognition"],"published-print":{"date-parts":[[2026,10]]},"DOI":"10.1016\/j.patcog.2026.113438","type":"journal-article","created":{"date-parts":[[2026,3,16]],"date-time":"2026-03-16T17:00:25Z","timestamp":1773680425000},"page":"113438","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Adversarial contribution-based perturbation for transferable attack on point cloud"],"prefix":"10.1016","volume":"178","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-3305-7125","authenticated-orcid":false,"given":"Shuxin","family":"Wei","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5162-9894","authenticated-orcid":false,"given":"Lifeng","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1160-0717","authenticated-orcid":false,"given":"Chengying","family":"Gao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0884-0058","authenticated-orcid":false,"given":"Ning","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.patcog.2026.113438_bib0001","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV)","article-title":"DiffRefine: diffusion-based proposal specific point cloud densification for cross-domain object detection","author":"Shin","year":"2025"},{"key":"10.1016\/j.patcog.2026.113438_bib0002","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"20258","article-title":"Symphonize 3D semantic scene completion with contextual instance queries","author":"Jiang","year":"2024"},{"key":"10.1016\/j.patcog.2026.113438_sbref0003","series-title":"Advances in Neural Information Processing Systems","first-page":"32653","article-title":"PointMamba: a simple state space model for point cloud analysis","volume":"37","author":"Liang","year":"2024"},{"key":"10.1016\/j.patcog.2026.113438_bib0004","series-title":"2025 IEEE International Conference on Multimedia and Expo (ICME)","first-page":"1","article-title":"Imperceptible beam-sensitive adversarial attacks for LiDAR-based object detection in autonomous driving","author":"Cai","year":"2025"},{"key":"10.1016\/j.patcog.2026.113438_sbref0005","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2025.112920","article-title":"SmokeAttack: physically-based adversarial smoke for LiDAR point cloud detectors","volume":"173","author":"Wei","year":"2026","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.patcog.2026.113438_sbref0006","series-title":"IEEE Conference on Computer Vision and Pattern Recognition","first-page":"9136","article-title":"Generating 3D adversarial point clouds","author":"Xiang","year":"2019"},{"key":"10.1016\/j.patcog.2026.113438_sbref0007","series-title":"2019 IEEE\/CVF International Conference on Computer Vision","first-page":"1598","article-title":"PointCloud saliency maps","author":"Zheng","year":"2019"},{"key":"10.1016\/j.patcog.2026.113438_sbref0008","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"15314","article-title":"Shape-invariant 3D adversarial point clouds","author":"Huang","year":"2022"},{"key":"10.1016\/j.patcog.2026.113438_sbref0009","series-title":"Computer Vision - ECCV 2020 - 16th European Conference","first-page":"241","article-title":"AdvPC: transferable adversarial perturbations on 3D point clouds","volume":"12357","author":"Hamdi","year":"2020"},{"key":"10.1016\/j.patcog.2026.113438_sbref0010","article-title":"Improving transferability of 3D adversarial attacks with scale and shear transformations","volume":"abs\/2211.01093","author":"Zhang","year":"2022","journal-title":"CoRR"},{"key":"10.1016\/j.patcog.2026.113438_bib0011","series-title":"Computer Vision - ECCV 2022 - 17th European Conference","first-page":"229","article-title":"Exploring the devil in graph spectral domain for 3D point cloud attacks","volume":"13663","author":"Hu","year":"2022"},{"key":"10.1016\/j.patcog.2026.113438_sbref0012","doi-asserted-by":"crossref","first-page":"50974","DOI":"10.1109\/ACCESS.2022.3171659","article-title":"Boosting 3D adversarial attacks with attacking on frequency","volume":"10","author":"Liu","year":"2022","journal-title":"IEEE Access"},{"issue":"2","key":"10.1016\/j.patcog.2026.113438_sbref0013","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1371\/journal.pone.0271388","article-title":"LPF-defense: 3D adversarial defense based on frequency analysis","volume":"18","author":"Naderi","year":"2023","journal-title":"PLOS ONE"},{"key":"10.1016\/j.patcog.2026.113438_sbref0014","series-title":"3rd International Conference on Learning Representations","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2015"},{"key":"10.1016\/j.patcog.2026.113438_sbref0015","series-title":"2017 IEEE Symposium on Security and Privacy","first-page":"39","article-title":"Towards evaluating the robustness of neural networks","author":"Carlini","year":"2017"},{"issue":"6","key":"10.1016\/j.patcog.2026.113438_sbref0016","doi-asserted-by":"crossref","first-page":"2984","DOI":"10.1109\/TPAMI.2020.3044712","article-title":"Geometry-aware generation of adversarial point clouds","volume":"44","author":"Wen","year":"2022","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.patcog.2026.113438_sbref0017","doi-asserted-by":"crossref","first-page":"491","DOI":"10.1016\/j.ins.2023.03.084","article-title":"3D adversarial attacks beyond point cloud","volume":"633","author":"Zhang","year":"2023","journal-title":"Inf. Sci."},{"key":"10.1016\/j.patcog.2026.113438_sbref0018","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2023.109825","article-title":"Adaptive local adversarial attacks on 3D point clouds","volume":"144","author":"Zheng","year":"2023","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.patcog.2026.113438_sbref0019","series-title":"2020 IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"10353","article-title":"LG-GAN: label guided adversarial network for flexible targeted attack of point cloud based deep networks","author":"Zhou","year":"2020"},{"key":"10.1016\/j.patcog.2026.113438_sbref0020","series-title":"NeurIPS","article-title":"Isometric 3D adversarial examples in the physical world","author":"Miao","year":"2022"},{"key":"10.1016\/j.patcog.2026.113438_sbref0021","series-title":"The Thirty-Seventh AAAI Conference on Artificial Intelligence","first-page":"2420","article-title":"Deep manifold attack on point clouds via parameter plane stretching","volume":"37","author":"Tang","year":"2023"},{"key":"10.1016\/j.patcog.2026.113438_bib0022","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","article-title":"NoPain: no-box point cloud attack via optimal transport singular boundary","author":"Li","year":"2025"},{"key":"10.1016\/j.patcog.2026.113438_sbref0023","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"7142","article-title":"Curvature-invariant adversarial attacks for 3D point clouds","author":"Zhang","year":"2024"},{"key":"10.1016\/j.patcog.2026.113438_bib0024","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"3576","article-title":"Explicitly perceiving and preserving the local geometric structures for 3D point cloud attack","volume":"38","author":"Liu","year":"2024"},{"key":"10.1016\/j.patcog.2026.113438_bib0025","doi-asserted-by":"crossref","first-page":"5466","DOI":"10.1109\/TMM.2025.3543050","article-title":"Imperceptible backdoor attacks on text-guided 3D scene grounding","volume":"27","author":"Liu","year":"2025","journal-title":"IEEE Trans. Multimedia"},{"key":"10.1016\/j.patcog.2026.113438_bib0026","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"24326","article-title":"Hide in thicket: Generating imperceptible and rational adversarial perturbations on 3D point clouds","author":"Lou","year":"2024"},{"key":"10.1016\/j.patcog.2026.113438_sbref0027","series-title":"IEEE Conference on Computer Vision and Pattern Recognition","first-page":"2730","article-title":"Improving transferability of adversarial examples with input diversity","author":"Xie","year":"2019"},{"key":"10.1016\/j.patcog.2026.113438_sbref0028","series-title":"The Thirty-Fourth AAAI Conference on Artificial Intelligence","first-page":"11458","article-title":"Learning transferable adversarial examples via ghost networks","author":"Li","year":"2020"},{"key":"10.1016\/j.patcog.2026.113438_sbref0029","series-title":"5th International Conference on Learning Representations","article-title":"Adversarial machine learning at scale","author":"Kurakin","year":"2017"},{"key":"10.1016\/j.patcog.2026.113438_sbref0030","series-title":"8th International Conference on Learning Representations","article-title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","author":"Lin","year":"2020"},{"key":"10.1016\/j.patcog.2026.113438_sbref0031","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2022.108831","article-title":"Cyclical adversarial attack pierces black-box deep neural networks","volume":"131","author":"Huang","year":"2022","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.patcog.2026.113438_sbref0032","series-title":"5th International Conference on Learning Representations","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"Liu","year":"2017"},{"key":"10.1016\/j.patcog.2026.113438_sbref0033","series-title":"Proceedings of the 37th International Conference on Machine Learning","first-page":"8828","article-title":"Informative dropout for robust representation learning: a shape-bias perspective","volume":"119","author":"Shi","year":"2020"},{"key":"10.1016\/j.patcog.2026.113438_bib0034","doi-asserted-by":"crossref","first-page":"4828","DOI":"10.1109\/TIP.2023.3251719","article-title":"Erosion attack: harnessing corruption to improve adversarial examples","volume":"32","author":"Huang","year":"2023","journal-title":"IEEE Trans. Image Process."},{"key":"10.1016\/j.patcog.2026.113438_sbref0035","series-title":"Computer Vision - ECCV 2022 - 17th European Conference","first-page":"549","article-title":"Frequency domain model augmentation for adversarial attack","volume":"13664","author":"Long","year":"2022"},{"key":"10.1016\/j.patcog.2026.113438_sbref0036","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2022.109075","article-title":"Frequency domain regularization for iterative adversarial attacks","volume":"134","author":"Li","year":"2023","journal-title":"Pattern Recognit."},{"issue":"4","key":"10.1016\/j.patcog.2026.113438_sbref0037","first-page":"4727","article-title":"Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification","volume":"45","author":"Liu","year":"2023","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.patcog.2026.113438_bib0038","series-title":"Proceedings of the IEEE International Conference on Computer Vision(ICCV)","article-title":"Towards a 3D transfer-based black-box attack via critical feature guidance","author":"Pang","year":"2025"},{"key":"10.1016\/j.patcog.2026.113438_sbref0039","series-title":"IEEE\/CVF International Conference on Computer Vision","first-page":"14294","article-title":"3DHacker: spectrum-based decision boundary generation for hard-label 3D point cloud attack","author":"Tao","year":"2023"},{"issue":"5","key":"10.1016\/j.patcog.2026.113438_sbref0040","doi-asserted-by":"crossref","first-page":"3079","DOI":"10.1109\/TPAMI.2023.3339130","article-title":"Point cloud attacks in graph spectral domain: when 3D geometry meets graph signal processing","volume":"46","author":"Liu","year":"2024","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.patcog.2026.113438_sbref0041","series-title":"IEEE Conference on Computer Vision and Pattern Recognition","first-page":"77","article-title":"PointNet: deep learning on point sets for 3D classification and segmentation","author":"Qi","year":"2017"},{"key":"10.1016\/j.patcog.2026.113438_sbref0042","series-title":"Advances in Neural Information Processing Systems 30","first-page":"5099","article-title":"PointNet++: deep hierarchical feature learning on point sets in a metric space","author":"Qi","year":"2017"},{"issue":"5","key":"10.1016\/j.patcog.2026.113438_sbref0043","doi-asserted-by":"crossref","first-page":"146:1","DOI":"10.1145\/3326362","article-title":"Dynamic graph CNN for learning on point clouds","volume":"38","author":"Wang","year":"2019","journal-title":"ACM Trans. Graph."},{"key":"10.1016\/j.patcog.2026.113438_sbref0044","series-title":"2021 IEEE\/CVF International Conference on Computer Vision","first-page":"895","article-title":"Walk in the cloud: learning curves for point clouds shape analysis","author":"Xiang","year":"2021"},{"key":"10.1016\/j.patcog.2026.113438_sbref0045","series-title":"Advances in Neural Information Processing Systems 31","first-page":"828","article-title":"PointCNN: convolution on X-transformed points","author":"Li","year":"2018"},{"key":"10.1016\/j.patcog.2026.113438_sbref0046","series-title":"IEEE Conference on Computer Vision and Pattern Recognition","first-page":"9621","article-title":"PointConv: deep convolutional networks on 3D point clouds","author":"Wu","year":"2019"},{"issue":"3","key":"10.1016\/j.patcog.2026.113438_sbref0047","doi-asserted-by":"crossref","first-page":"83","DOI":"10.1109\/MSP.2012.2235192","article-title":"The emerging field of signal processing on graphs: extending high-dimensional data analysis to networks and other irregular domains","volume":"30","author":"Shuman","year":"2013","journal-title":"IEEE Signal Process. Mag."},{"key":"10.1016\/j.patcog.2026.113438_sbref0048","series-title":"IEEE Conference on Computer Vision and Pattern Recognition","first-page":"1912","article-title":"3D ShapeNets: A deep representation for volumetric shapes","author":"Wu","year":"2015"},{"key":"10.1016\/j.patcog.2026.113438_sbref0049","article-title":"Improving neural networks by preventing co-adaptation of feature detectors","volume":"abs\/1207.0580","author":"Hinton","year":"2012","journal-title":"CoRR"},{"key":"10.1016\/j.patcog.2026.113438_sbref0050","article-title":"ShapeNet: an information-rich 3D model repository","volume":"abs\/1512.03012","author":"Chang","year":"2015","journal-title":"CoRR"},{"key":"10.1016\/j.patcog.2026.113438_sbref0051","series-title":"The Tenth International Conference on Learning Representations","article-title":"Rethinking network design and local geometry in point cloud: a simple residual MLP framework","author":"Ma","year":"2022"},{"key":"10.1016\/j.patcog.2026.113438_bib0052","series-title":"2019 IEEE\/CVF International Conference on Computer Vision","first-page":"1961","article-title":"DUP-Net: denoiser and upsampler network for 3D adversarial point clouds defense","author":"Zhou","year":"2019"},{"key":"10.1016\/j.patcog.2026.113438_sbref0053","article-title":"IF-defense: 3D adversarial point cloud defense via implicit function based restoration","volume":"abs\/2010.05272","author":"Wu","year":"2020","journal-title":"CoRR"},{"key":"10.1016\/j.patcog.2026.113438_bib0054","series-title":"Computer Vision - ECCV 2022 - 17th European Conference","first-page":"672","article-title":"Improving adversarial robustness of 3D point cloud classification models","volume":"13664","author":"Li","year":"2022"}],"container-title":["Pattern Recognition"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0031320326004036?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0031320326004036?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T17:05:45Z","timestamp":1779383145000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0031320326004036"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10]]},"references-count":54,"alternative-id":["S0031320326004036"],"URL":"https:\/\/doi.org\/10.1016\/j.patcog.2026.113438","relation":{},"ISSN":["0031-3203"],"issn-type":[{"value":"0031-3203","type":"print"}],"subject":[],"published":{"date-parts":[[2026,10]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Adversarial contribution-based perturbation for transferable attack on point cloud","name":"articletitle","label":"Article Title"},{"value":"Pattern Recognition","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.patcog.2026.113438","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"113438"}}