% Key papers for Adversarial point cloud attacks (scime atlas, https://atlas.scime.ai). Authors are not included: add them from the paper pages.

@inproceedings{cvpr2019_generating_14245,
  title = {{Generating 3D Adversarial Point Clouds}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2019},
}

@inproceedings{aaai2020_robust_100270,
  title = {{Robust Adversarial Objects against Deep Learning Models}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2020},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/5443},
}

@inproceedings{cvpr2020_lg_15730,
  title = {{LG-GAN: Label Guided Adversarial Network for Flexible Targeted Attack of Point Cloud Based Deep Networks}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2020},
}

@inproceedings{cvpr2022_shape_19865,
  title = {{Shape-Invariant 3D Adversarial Point Clouds}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{cvpr2021_pointguard_17621,
  title = {{PointGuard: Provably Robust 3D Point Cloud Classification}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2021},
}

@inproceedings{cvpr2020_self_16201,
  title = {{Self-Robust 3D Point Recognition via Gather-Vector Guidance}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2020},
}

@inproceedings{aaai2023_generating_3769,
  title = {{Generating Transferable 3D Adversarial Point Cloud via Random Perturbation Factorization}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2023},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/25154},
}

@inproceedings{icml2022_benchmarking_40283,
  title = {{Benchmarking and Analyzing Point Cloud Classification under Corruptions}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2022},
  url = {https://icml.cc/virtual/2022/poster/18377},
}

@inproceedings{cvpr2024_hide_23696,
  title = {{Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Clouds}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/31322},
}

@inproceedings{cvpr2022_robust_19760,
  title = {{Robust Structured Declarative Classifiers for 3D Point Clouds: Defending Adversarial Attacks With Implicit Gradients}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{cvpr2022_art_18242,
  title = {{ART-Point: Improving Rotation Robustness of Point Cloud Classifiers via Adversarial Rotation}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{aaai2024_manifold_6600,
  title = {{Manifold Constraints for Imperceptible Adversarial Attacks on Point Clouds}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28318},
}

@inproceedings{neurips2021_adversarially_63328,
  title = {{Adversarially Robust 3D Point Cloud Recognition Using Self-Supervisions}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2021},
  url = {https://nips.cc/virtual/2021/poster/26926},
}

@inproceedings{aaai2022_shape_2734,
  title = {{Shape Prior Guided Attack: Sparser Perturbations on 3D Point Clouds}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2022},
  url = {https://aaai.org/papers/08277-shape-prior-guided-attack-sparser-perturbations-on-3d-point-clouds/},
}

@inproceedings{aaai2023_deep_3427,
  title = {{Deep Manifold Attack on Point Clouds via Parameter Plane Stretching}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2023},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/25338},
}

@inproceedings{aaai2024_explicitly_5901,
  title = {{Explicitly Perceiving and Preserving the Local Geometric Structures for 3D Point Cloud Attack}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28146},
}

@inproceedings{aaai2024_pointcvar_6965,
  title = {{PointCVaR: Risk-Optimized Outlier Removal for Robust 3D Point Cloud Classification}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/30129},
}

@inproceedings{aaai2023_pointca_4377,
  title = {{PointCA: Evaluating the Robustness of 3D Point Cloud Completion Models against Adversarial Examples}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2023},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/25166},
}

@inproceedings{aaai2021_cpcgan_229,
  title = {{CPCGAN: A Controllable 3D Point Cloud Generative Adversarial Network with Semantic Label Generating}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2021},
  url = {https://aaai.org/papers/03154-cpcgan-a-controllable-3d-point-cloud-generative-adversarial-network-with-semantic-label-generating/},
}

@inproceedings{aaai2024_invisible_6357,
  title = {{Invisible Backdoor Attack against 3D Point Cloud Classifier in Graph Spectral Domain}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/30099},
}

@inproceedings{cvpr2024_causalpc_22957,
  title = {{CausalPC: Improving the Robustness of Point Cloud Classification by Causal Effect Identification}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/30433},
}

@inproceedings{aaai2024_curvature_5538,
  title = {{Curvature-Invariant Adversarial Attacks for 3D Point Clouds}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28542},
}

@inproceedings{aaai2025_imperceptible_9511,
  title = {{Imperceptible 3D Point Cloud Attacks on Lattice-based Barycentric Coordinates}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/34294},
}

@inproceedings{neurips2024_improving_70467,
  title = {{Improving Robustness of 3D Point Cloud Recognition from a Fourier Perspective}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/96641},
}

@inproceedings{aaai2026_multimodal_100689,
  title = {{Multimodal Robust Prompt Distillation for 3D Point Cloud Models}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/42429},
}

@inproceedings{aaai2026_less_104376,
  title = {{Less Is More: Sparse and Cooperative Perturbation for Point Cloud Attacks}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/37903},
}

@inproceedings{icml2024_toward_43749,
  title = {{Toward Availability Attacks in 3D Point Clouds}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2024},
  url = {https://icml.cc/virtual/2024/poster/34703},
}

@inproceedings{neurips2024_target_71292,
  title = {{Target-Guided Adversarial Point Cloud Transformer Towards Recognition Against Real-world Corruptions}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/95955},
}

@inproceedings{neurips2026_neural_91883,
  title = {{Neural Reconstruction of LiDAR Point Clouds under Jamming Attacks via Full-Waveform Representation and Simultaneous Laser Sensing}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2026},
  url = {https://neurips.cc/virtual/2026/poster/154337},
}

@inproceedings{aaai2026_3d_101133,
  title = {{3D-ANC: Adaptive Neural Collapse for Robust 3D Point Cloud Recognition}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/37434},
}

@inproceedings{aaai2026_certified_105621,
  title = {{Certified L2-Norm Robustness of 3D Point Cloud Recognition in the Frequency Domain}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/38377},
}

@inproceedings{iclr2025_concretizer_81585,
  title = {{ConcreTizer: Model Inversion Attack via Occupancy Classification and Dispersion Control for 3D Point Cloud Restoration}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2025},
  url = {https://iclr.cc/virtual/2025/poster/32098},
}

@inproceedings{cvpr2026_good_99580,
  title = {{Good Can Sometimes be Bad: A Unified Attack against 3D Point Cloud Classifier by a Flexible Isotropic Resampling}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2026},
  url = {https://openaccess.thecvf.com/content/CVPR2026/html/Fan_Good_Can_Sometimes_be_Bad_A_Unified_Attack_against_3D_CVPR_2026_paper.html},
}