Deep Neural Networks (DNNs) for 3D point cloud recognition are vulnerable to adversarial examples, threatening their practical deployment. Despite the many research endeavors have been made to tackle this issue in recent years, the diversity of adversarial examples on 3D point clouds makes them more challenging to defend against than those on 2D images. For examples, attackers can generate adversarial examples by adding, shifting, or removing points. Consequently, existing defense strategies are hard to counter unseen point cloud adversarial examples. In this paper, we first establish a comprehensive, and rigorous point cloud adversarial robustness benchmark to evaluate adversarial robustness, which can provide a detailed understanding of the effects of the defense and attack methods. We then collect existing defense tricks in point cloud adversarial defenses and then perform extensive and systematic experiments to identify an effective combination of these tricks. Furthermore, we propose a hybrid training augmentation methods that consider various types of point cloud adversarial examples to adversarial training, significantly improving the adversarial robustness. By combining these tricks, we construct a more robust defense framework achieving an average accuracy of 83.45\% against various attacks, demonstrating its capability to enabling robust learners. Our codebase are open-sourced on: \url{https://github.com/qiufan319/benchmark_pc_attack.git}.

翻译：深度神经网络（DNN）在三维点云识别中易受对抗样本攻击，威胁其实际部署。近年来，尽管已有大量研究致力于解决该问题，但三维点云对抗样本的多样性（例如，攻击者可通过增加、移动或移除点来生成对抗样本）使其比二维图像对抗样本更难以防御。因此，现有防御策略难以应对未见过的点云对抗样本。本文首先建立了一个全面且严谨的点云对抗鲁棒性基准测试框架，用于评估对抗鲁棒性，从而深入理解防御与攻击方法的效果。随后，我们收集了现有的点云对抗防御技巧，并通过大规模系统实验确定这些技巧的有效组合。此外，我们提出了一种混合训练增强方法，将多种类型的点云对抗样本纳入对抗训练，显著提升了对抗鲁棒性。通过整合上述技巧，我们构建了一个更鲁棒的防御框架，在多种攻击下平均准确率达到83.45%，验证了其实现鲁棒学习的能力。我们的代码已在 \url{https://github.com/qiufan319/benchmark_pc_attack.git} 开源。