ADDR: Anomaly Detection and Distortion Restoration for 3D Adversarial Point Cloud
Hao Wang, Jian Liu, Qiang Xu, Dong Wang, Kaiju Li · IEEE Transactions on Information Forensics and Security · 2025
The growing adoption of 3D point cloud in applications like autonomous driving has heightened concerns about their vulnerability to adversarial attacks. Existing defense methods face two fundamental challenges: ineffective detection of imperceptible adversarial examples and poor restoration of severely distorted point cloud. In this paper, we present ADDR, an end-to-end defense framework that integratesBinary Geometric Feature Anomaly Detection (BGFAD)andDistorted point cloud Restoration (DPCR). BGFAD employs a dual threshold mechanism combining global distance statistics and local curvature analysis to detect both substantial and imperceptible adversarial perturbations. DPCR leverages attention enhanced feature encoding to reconstruct missing geometric structures while preserving semantic integrity through bidirectional Chamfer loss optimization. Our framework uniquely bridges traditional geometric priors with deep learning mechanisms, achieving attack-agnostic defense without classifier retraining. Extensive experiments on ModelNet40, ShapeNet and ScanObjectNN datasets demonstrate state-of-the-art performance, with about 12% higher robustness against structural attacks and 6× better restoration fidelity than existing methods. ADDR maintains real-time processing capabilities while reducing adversarial success rates to <5% across diverse attacks. The code is available at https://github.com/whwh456/ADDR.