Stealthy Patch-Wise Backdoor Attack in 3D Point Cloud Via Curvature Awareness

Highlights• Introduces SPBA: the first patch-wise backdoor for 3D point clouds.• Employs curvature-based scoring to select imperceptible complex patches.• Applies patch-wise spectral triggers (GFT) to minimize distortion and cost.• Demonstrates superior trade-off in effectiveness, stealthiness, and robustness.Stealthy Patch-Wise Backdoor Attack in 3D Point Cloud via Curvature AwarenessBackdoor attacks pose a severe threat to deep neural networks (DNNs) by implanting hidden backdoors that can be activated with predefined triggers to manipulate model behaviors maliciously. Existing 3D point cloud backdoor attacks primarily rely on sample-wise global modifications, which suffer from low imperceptibility. Although optimization can improve stealthiness, optimizing sample-wise triggers significantly increases computational cost. To address these limitations, we propose the Stealthy Patch-Wise Backdoor Attack (SPBA), the first patch-wise backdoor attack framework for 3D point clouds. Specifically, SPBA decomposes point clouds into local patches and employs a curvature-based imperceptibility score to guide trigger injection into visually less sensitive patches. By optimizing a unified patch-wise trigger that perturbs spectral features of selected patches, SPBA significantly enhances optimization efficiency while maintaining high stealthiness. Extensive experiments on ModelNet40 and ShapeNetPart further demonstrate that SPBA surpasses prior state-of-the-art backdoor attacks in both attack effectiveness and resistance to defense methods. The code is available at https://github.com/HazardFY/SPBA.