{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,22]],"date-time":"2026-04-22T07:26:11Z","timestamp":1776842771775,"version":"3.51.2"},"publisher-location":"New York, NY, USA","reference-count":39,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,10,26]],"date-time":"2023-10-26T00:00:00Z","timestamp":1698278400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U20B2047, 62072421, 62002334, 62102386, 62121002"],"award-info":[{"award-number":["U20B2047, 62072421, 62002334, 62102386, 62121002"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,10,26]]},"DOI":"10.1145\/3581783.3612018","type":"proceedings-article","created":{"date-parts":[[2023,10,27]],"date-time":"2023-10-27T07:27:30Z","timestamp":1698391650000},"page":"8849-8859","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":13,"title":["Ada3Diff: Defending against 3D Adversarial Point Clouds via Adaptive Diffusion"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1424-2353","authenticated-orcid":false,"given":"Kui","family":"Zhang","sequence":"first","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7860-8452","authenticated-orcid":false,"given":"Hang","family":"Zhou","sequence":"additional","affiliation":[{"name":"Simon Fraser University, Burnaby, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4230-1077","authenticated-orcid":false,"given":"Jie","family":"Zhang","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2702-8516","authenticated-orcid":false,"given":"Qidong","family":"Huang","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5576-6108","authenticated-orcid":false,"given":"Weiming","family":"Zhang","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4417-9316","authenticated-orcid":false,"given":"Nenghai","family":"Yu","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,10,27]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Wagner","author":"Athalye Anish","year":"2018","unstructured":"Anish Athalye, Nicholas Carlini, and David A. Wagner. 2018. Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples. In ICML."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"crossref","unstructured":"Xiaoyi Dong Dongdong Chen Hang Zhou Gang Hua Weiming Zhang and Nenghai Yu. 2020. Self-robust 3D point recognition via gather-vector guidance. In CVPR.","DOI":"10.1109\/CVPR42600.2020.01153"},{"key":"e_1_3_2_1_3_1","unstructured":"Haoqiang Fan Hao Su and Leonidas J Guibas. 2017. A point set generation network for 3D object reconstruction from a single image. In CVPR."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/s41095-021-0229-5"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","unstructured":"Abdullah Hamdi Sara Rojas Ali Thabet and Bernard Ghanem. 2020. AdvPC: Transferable adversarial perturbations on 3D point clouds. In ECCV.","DOI":"10.1007\/978-3-030-58610-2_15"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"crossref","unstructured":"Qidong Huang Xiaoyi Dong Dongdong Chen Hang Zhou Weiming Zhang and Nenghai Yu. 2022. Shape-invariant 3D adversarial point clouds. In CVPR.","DOI":"10.1109\/CVPR52688.2022.01490"},{"key":"e_1_3_2_1_7_1","volume-title":"Duc Thanh Nguyen, and Sai-Kit Yeung","author":"Kim Jaeyeon","year":"2021","unstructured":"Jaeyeon Kim, Binh-Son Hua, Duc Thanh Nguyen, and Sai-Kit Yeung. 2021. Minimal adversarial examples for deep learning on 3D point clouds. In ICCV."},{"key":"e_1_3_2_1_8_1","unstructured":"Kaidong Li Ziming Zhang Cuncong Zhong and Guanghui Wang. 2022. Robust structured declarative classifiers for 3D point clouds: Defending adversarial attacks with implicit gradients. In CVPR."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3171659"},{"key":"e_1_3_2_1_10_1","unstructured":"Daniel Liu Ronald Yu and Hao Su. 2019b. Extending adversarial attacks and defenses to deep 3D point cloud classifiers. In ICIP."},{"key":"e_1_3_2_1_11_1","unstructured":"Zhijian Liu Haotian Tang Yujun Lin and Song Han. 2019a. Point-Voxel CNN for efficient 3D deep learning. In NeruIPS."},{"key":"e_1_3_2_1_12_1","unstructured":"Shitong Luo and Wei Hu. 2021. Diffusion probabilistic models for 3D point cloud generation. In CVPR."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413875"},{"key":"e_1_3_2_1_14_1","unstructured":"Aleksander Madry Aleksandar Makelov Ludwig Schmidt Dimitris Tsipras and Adrian Vladu. 2018. Towards deep learning models resistant to adversarial attacks. In ICLR."},{"key":"e_1_3_2_1_15_1","unstructured":"Weili Nie Brandon Guo Yujia Huang Chaowei Xiao Arash Vahdat and Anima Anandkumar. 2022. Diffusion models for adversarial purification. In ICML."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58580-8_31"},{"key":"e_1_3_2_1_17_1","volume-title":"Guibas","author":"Qi C.","year":"2017","unstructured":"C. Qi, Hao Su, Kaichun Mo, and Leonidas J. Guibas. 2017. PointNet: Deep learning on point sets for 3D classification and segmentation. In CVPR."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.robot.2008.08.005"},{"key":"e_1_3_2_1_19_1","unstructured":"Zhenbo Shi Zhi Chen Zhenbo Xu Wei Yang Zhidong Yu and Liusheng Huang. 2022. Shape prior guided attack: Sparser perturbations on 3D point clouds. In AAAI."},{"key":"e_1_3_2_1_20_1","unstructured":"Jascha Sohl-Dickstein Eric Weiss Niru Maheswaranathan and Surya Ganguli. 2015. Deep unsupervised learning using nonequilibrium thermodynamics. In ICML."},{"key":"e_1_3_2_1_21_1","volume-title":"Zhiding Yu, Anima Anandkumar, Zhuoqing Morley Mao, and Chaowei Xiao.","author":"Sun Jiachen","year":"2021","unstructured":"Jiachen Sun, Yulong Cao, Christopher Bongsoo Choy, Zhiding Yu, Anima Anandkumar, Zhuoqing Morley Mao, and Chaowei Xiao. 2021a. Adversarially robust 3D point cloud recognition using self-supervisions. In NeurIPS."},{"key":"e_1_3_2_1_22_1","volume-title":"Qi Alfred Chen, and Zhuoqing Morley Mao","author":"Sun Jiachen","year":"2021","unstructured":"Jiachen Sun, Karl Koenig, Yulong Cao, Qi Alfred Chen, and Zhuoqing Morley Mao. 2021b. On adversarial robustness of 3D point cloud classification under adaptive attacks. In BMVC."},{"key":"e_1_3_2_1_23_1","volume-title":"PointDP: Diffusion-driven purification against adversarial attacks on 3D point cloud recognition. arXiv preprint arXiv:2208.09801","author":"Sun Jiachen","year":"2022","unstructured":"Jiachen Sun, Weili Nie, Zhiding Yu, Z Morley Mao, and Chaowei Xiao. 2022. PointDP: Diffusion-driven purification against adversarial attacks on 3D point cloud recognition. arXiv preprint arXiv:2208.09801 (2022)."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"crossref","unstructured":"Tzungyu Tsai Kaichen Yang Tsung-Yi Ho and Yier Jin. 2020. Robust adversarial objects against deep learning models. In AAAI.","DOI":"10.1609\/aaai.v34i01.5443"},{"key":"e_1_3_2_1_25_1","volume-title":"Guided diffusion model for adversarial purification. arXiv preprint arXiv:2205.14969","author":"Wang Jinyi","year":"2022","unstructured":"Jinyi Wang, Zhaoyang Lyu, Dahua Lin, Bo Dai, and Hongfei Fu. 2022. Guided diffusion model for adversarial purification. arXiv preprint arXiv:2205.14969 (2022)."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3326362"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3044712"},{"key":"e_1_3_2_1_28_1","unstructured":"Wenxuan Wu Zhongang Qi and Fuxin Li. 2019. PointConv: Deep convolutional networks on 3D point clouds. In CVPR."},{"key":"e_1_3_2_1_29_1","volume-title":"IF-Defense: 3D adversarial point cloud defense via implicit function based restoration. arXiv preprint arXiv:2010.05272","author":"Wu Ziyi","year":"2020","unstructured":"Ziyi Wu, Yueqi Duan, He Wang, Qingnan Fan, and Leonidas J Guibas. 2020. IF-Defense: 3D adversarial point cloud defense via implicit function based restoration. arXiv preprint arXiv:2010.05272 (2020)."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"crossref","unstructured":"Zhirong Wu Shuran Song Aditya Khosla Fisher Yu Linguang Zhang Xiaoou Tang and Jianxiong Xiao. 2015. 3D ShapeNets: A deep representation for volumetric shapes. In CVPR.","DOI":"10.1109\/CVPR.2015.7298801"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","unstructured":"Chong Xiang Charles R Qi and Bo Li. 2019. Generating 3D adversarial point clouds. In CVPR.","DOI":"10.1109\/CVPR.2019.00935"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"crossref","unstructured":"Tiange Xiang Chaoyi Zhang Yang Song Jianhui Yu and Weidong Cai. 2021. Walk in the cloud: Learning curves for point clouds shape analysis. In ICCV.","DOI":"10.1109\/ICCV48922.2021.00095"},{"key":"e_1_3_2_1_33_1","volume-title":"Adversarial attack and defense on point sets. arXiv preprint arXiv:1902.10899","author":"Yang Jiancheng","year":"2019","unstructured":"Jiancheng Yang, Qiang Zhang, Rongyao Fang, Bingbing Ni, Jinxian Liu, and Qi Tian. 2019. Adversarial attack and defense on point sets. arXiv preprint arXiv:1902.10899 (2019)."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/2980179.2980238"},{"key":"e_1_3_2_1_35_1","volume-title":"LION: Latent point diffusion models for 3D shape generation. In NeruIPS.","author":"Zeng Xiaohui","year":"2022","unstructured":"Xiaohui Zeng, Arash Vahdat, Francis Williams, Zan Gojcic, Or Litany, Sanja Fidler, and Karsten Kreis. 2022. LION: Latent point diffusion models for 3D shape generation. In NeruIPS."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"crossref","unstructured":"Tianhang Zheng Changyou Chen Junsong Yuan Bo Li and Kui Ren. 2019. PointCloud saliency maps. In ICCV.","DOI":"10.1109\/ICCV.2019.00168"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"crossref","unstructured":"Hang Zhou Dongdong Chen Jing Liao Kejiang Chen Xiaoyi Dong Kunlin Liu Weiming Zhang Gang Hua and Nenghai Yu. 2020. LG-GAN: Label guided adversarial network for flexible targeted attack of point cloud based deep networks. In CVPR.","DOI":"10.1109\/CVPR42600.2020.01037"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"crossref","unstructured":"Hang Zhou Kejiang Chen Weiming Zhang Han Fang Wenbo Zhou and Nenghai Yu. 2019. DUP-Net: Denoiser and upsampler network for 3D adversarial point clouds defense. In ICCV.","DOI":"10.1109\/ICCV.2019.00205"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"crossref","unstructured":"Linqi Zhou Yilun Du and Jiajun Wu. 2021. 3D shape generation and completion through point-voxel diffusion. In ICCV.","DOI":"10.1109\/ICCV48922.2021.00577"}],"event":{"name":"MM '23: The 31st ACM International Conference on Multimedia","location":"Ottawa ON Canada","acronym":"MM '23","sponsor":["SIGMM ACM Special Interest Group on Multimedia"]},"container-title":["Proceedings of the 31st ACM International Conference on Multimedia"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3581783.3612018","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3581783.3612018","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T00:00:18Z","timestamp":1755820818000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3581783.3612018"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,26]]},"references-count":39,"alternative-id":["10.1145\/3581783.3612018","10.1145\/3581783"],"URL":"https:\/\/doi.org\/10.1145\/3581783.3612018","relation":{},"subject":[],"published":{"date-parts":[[2023,10,26]]},"assertion":[{"value":"2023-10-27","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}