{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,25]],"date-time":"2026-07-25T02:19:02Z","timestamp":1784945942977,"version":"3.55.0"},"reference-count":78,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Pattern Anal. Mach. Intell."],"published-print":{"date-parts":[[2022]]},"DOI":"10.1109\/tpami.2022.3193449","type":"journal-article","created":{"date-parts":[[2022,7,25]],"date-time":"2022-07-25T20:11:06Z","timestamp":1658779866000},"page":"1-18","source":"Crossref","is-referenced-by-count":56,"title":["Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification"],"prefix":"10.1109","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8179-4508","authenticated-orcid":false,"given":"Daizong","family":"Liu","sequence":"first","affiliation":[{"name":"Wangxuan Institute of Computer Technology, Peking University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9860-0922","authenticated-orcid":false,"given":"Wei","family":"Hu","sequence":"additional","affiliation":[{"name":"Wangxuan Institute of Computer Technology, Peking University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"ref2","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref4","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017"},{"key":"ref5","article-title":"Adversarial machine learning at scale","author":"Kurakin","year":"2016"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.3301742"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.691"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3206025.3206080"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/IROS.2017.8206060"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TCYB.2020.2996960"},{"key":"ref11","article-title":"Adversarial attack and defense on point sets","author":"Zhang","year":"2019"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00935"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/BigData47090.2019.9006307"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8803770"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i01.5443"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3044712"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/tmm.2021.3111440"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2014.2378055"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/PCS.2015.7170047"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00444"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00059"},{"key":"ref23","first-page":"652","article-title":"PointNet: Deep learning on point sets for 3D classification and segmentation","volume-title":"Proc. IEEE Conf. Comput. Vis. Pattern Recognit.","author":"Qi"},{"key":"ref24","first-page":"5105","article-title":"PointNet++: Deep hierarchical feature learning on point sets in a metric space","volume-title":"Proc. Adv. Neural Informat. Process. Syst.","author":"Qi"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3326362"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00029"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00910"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00542"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3240508.3240621"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00719"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.114"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.2983410"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00961"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2021.3083288"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2021.3098789"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00027"},{"key":"ref37","first-page":"820","article-title":"PointCNN: Convolution on X-transformed points","volume-title":"Proc. Adv. Neural Informat. Process. Syst.","author":"Li"},{"key":"ref38","first-page":"3391","article-title":"Deep sets","volume-title":"Proc. Adv. Neural Informat. Process. Syst.","author":"Zaheer"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01595"},{"key":"ref40","article-title":"Rethinking network design and local geometry in point cloud: A simple residual MLP framework","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Ma"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01258-8_10"},{"key":"ref45","first-page":"2484","article-title":"Simple black-box adversarial attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Guo"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58621-8_46"},{"key":"ref47","article-title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Lin"},{"key":"ref48","article-title":"Countering adversarial images using input transformations","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Guo"},{"key":"ref49","article-title":"Mitigating adversarial effects through randomization","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Xie"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00191"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00624"},{"key":"ref53","first-page":"1310","article-title":"Certified adversarial robustness via randomized smoothing","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Cohen"},{"key":"ref54","article-title":"Ensemble adversarial training: Attacks and defenses","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Tram\u00e8r"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01204"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00168"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00128"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01037"},{"key":"ref59","article-title":"ShapeAdv: Generating shape-aware adversarial 3D point clouds","author":"Lee","year":"2020"},{"key":"ref60","article-title":"Poisoning Morphnet for clean-label backdoor attack to point clouds","author":"Tian","year":"2021"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00205"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01153"},{"key":"ref63","article-title":"IF-defense: 3D Adversarial point cloud defense via implicit function based restoration","author":"Wu","year":"2020"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00612"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/133994.134011"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/34.232073"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.264"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/3422622"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298682"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00348"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00950"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298801"},{"key":"ref75","article-title":"L2 regularization for learning kernels","author":"Cortes","year":"2012"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2017.8296925"},{"key":"ref77","article-title":"Adam: A method for stochastic optimization","author":"Kingma","year":"2014"},{"key":"ref78","article-title":"On adversarial robustness of 3D point cloud classification under adaptive attacks","author":"Sun","year":"2020"}],"container-title":["IEEE Transactions on Pattern Analysis and Machine Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/34\/4359286\/09839597.pdf?arnumber=9839597","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,2]],"date-time":"2024-03-02T03:30:29Z","timestamp":1709350229000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9839597\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"references-count":78,"URL":"https:\/\/doi.org\/10.1109\/tpami.2022.3193449","relation":{},"ISSN":["0162-8828","2160-9292","1939-3539"],"issn-type":[{"value":"0162-8828","type":"print"},{"value":"2160-9292","type":"electronic"},{"value":"1939-3539","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]}}}