论文标题
PointAcl:在对抗性攻击下强大点云表示的对抗性对比度学习
PointACL:Adversarial Contrastive Learning for Robust Point Clouds Representation under Adversarial Attack
论文作者
论文摘要
尽管基于3D点云表示的基于自我监督的对比学习模型最近取得了成功,但此类预训练模型的对抗性鲁棒性引起了人们的关注。对抗性对比学习(ACL)被认为是改善预训练模型的鲁棒性的有效方法。在对比学习中,投影仪被认为是在对比度预处理过程中删除不必要的功能信息的有效组成部分,并且大多数ACL作品还使用对比损失与预计功能表示形式相对损失,以预读预审计示例,而“未定位”的特征表示在交易期间使用“未置换”特征,因为在交易期间使用了分配的分布,并构造了分布的分布。下游任务的强大功能表示。我们介绍了一种新方法,通过利用虚拟对抗性损失,在对比性学习框架中使用“未重新注射”功能表示,从而生成高质量的3D对抗示例,以进行对抗训练。我们介绍了强大的意识损失功能,以对抗自我监督的对比学习框架。此外,我们发现选择具有正常操作员(DON)操作员的差异的高差异作为对抗性自我监视的对比度学习的附加输入,可以显着提高预训练模型的对抗性鲁棒性。我们在下游任务上验证我们的方法,包括3D分类和使用多个数据集的3D分割。与最先进的对抗性学习方法相比,它获得了可比的鲁棒精度。
Despite recent success of self-supervised based contrastive learning model for 3D point clouds representation, the adversarial robustness of such pre-trained models raised concerns. Adversarial contrastive learning (ACL) is considered an effective way to improve the robustness of pre-trained models. In contrastive learning, the projector is considered an effective component for removing unnecessary feature information during contrastive pretraining and most ACL works also use contrastive loss with projected feature representations to generate adversarial examples in pretraining, while "unprojected " feature representations are used in generating adversarial inputs during inference.Because of the distribution gap between projected and "unprojected" features, their models are constrained of obtaining robust feature representations for downstream tasks. We introduce a new method to generate high-quality 3D adversarial examples for adversarial training by utilizing virtual adversarial loss with "unprojected" feature representations in contrastive learning framework. We present our robust aware loss function to train self-supervised contrastive learning framework adversarially. Furthermore, we find selecting high difference points with the Difference of Normal (DoN) operator as additional input for adversarial self-supervised contrastive learning can significantly improve the adversarial robustness of the pre-trained model. We validate our method, PointACL on downstream tasks, including 3D classification and 3D segmentation with multiple datasets. It obtains comparable robust accuracy over state-of-the-art contrastive adversarial learning methods.