{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T07:46:03Z","timestamp":1782891963285,"version":"3.54.5"},"reference-count":39,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Vision and Image Understanding"],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1016\/j.cviu.2026.104812","type":"journal-article","created":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T16:15:17Z","timestamp":1778861717000},"page":"104812","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Invisibility stickers against LiDAR: Adversarial attacks on point cloud intensity for LiDAR-based object detection"],"prefix":"10.1016","volume":"269","author":[{"given":"Junqi","family":"Wu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5224-9834","authenticated-orcid":false,"given":"Wen","family":"Yao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zijian","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4685-8232","authenticated-orcid":false,"given":"Donghua","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiahuan","family":"Long","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hanqing","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tingsong","family":"Jiang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Liang","family":"Xiao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaoya","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8857-3679","authenticated-orcid":false,"given":"Yang","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chengyin","family":"Hu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chao","family":"Ma","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.cviu.2026.104812_b1","doi-asserted-by":"crossref","unstructured":"Caesar,\u00a0H., Bankiti,\u00a0V., Lang,\u00a0A.H., Vora,\u00a0S., Liong,\u00a0V.E., Xu,\u00a0Q., Krishnan,\u00a0A., Pan,\u00a0Y., Baldan,\u00a0G., Beijbom,\u00a0O., 2020. nuscenes: A multimodal dataset for autonomous driving. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 11621\u201311631.","DOI":"10.1109\/CVPR42600.2020.01164"},{"key":"10.1016\/j.cviu.2026.104812_b2","series-title":"IEEE International Conference on High Performance Computing and Communications; IEEE International Conference on Smart City; IEEE International Conference on Data Science and Systems","first-page":"1042","article-title":"Adversarial point cloud perturbations to attack deep object detection models","author":"Cai","year":"2020"},{"key":"10.1016\/j.cviu.2026.104812_b3","unstructured":"Cao,\u00a0Y., Bhupathiraju,\u00a0S.H., Naghavi,\u00a0P., Sugawara,\u00a0T., Mao,\u00a0Z.M., Rampazzi,\u00a0S., 2023. You can\u2019t see me: Physical removal attacks on lidar-based autonomous vehicles driving frameworks. In: USENIX Security Symposium. pp. 2993\u20133010."},{"key":"10.1016\/j.cviu.2026.104812_b4","doi-asserted-by":"crossref","unstructured":"Cao,\u00a0Y., Xiao,\u00a0C., Cyr,\u00a0B., Zhou,\u00a0Y., Park,\u00a0W., Rampazzi,\u00a0S., Chen,\u00a0Q.A., Fu,\u00a0K., Mao,\u00a0Z.M., 2019a. Adversarial sensor attack on lidar-based perception in autonomous driving. In: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security. pp. 2267\u20132281.","DOI":"10.1145\/3319535.3339815"},{"key":"10.1016\/j.cviu.2026.104812_b5","series-title":"Adversarial objects against lidar-based autonomous driving systems","author":"Cao","year":"2019"},{"key":"10.1016\/j.cviu.2026.104812_b6","doi-asserted-by":"crossref","unstructured":"Chen,\u00a0P.-Y., Zhang,\u00a0H., Sharma,\u00a0Y., Yi,\u00a0J., Hsieh,\u00a0C.-J., 2017. Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models. In: Proceedings of the ACM Workshop on Artificial Intelligence and Security. pp. 15\u201326.","DOI":"10.1145\/3128572.3140448"},{"key":"10.1016\/j.cviu.2026.104812_b7","first-page":"1201","article-title":"Voxel r-cnn: Towards high performance voxel-based 3d object detection","volume":"vol. 35","author":"Deng","year":"2021"},{"key":"10.1016\/j.cviu.2026.104812_b8","doi-asserted-by":"crossref","unstructured":"Dong,\u00a0Y., Liao,\u00a0F., Pang,\u00a0T., Su,\u00a0H., Zhu,\u00a0J., Hu,\u00a0X., Li,\u00a0J., 2018. Boosting Adversarial Attacks with Momentum. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 9185\u20139193.","DOI":"10.1109\/CVPR.2018.00957"},{"key":"10.1016\/j.cviu.2026.104812_b9","doi-asserted-by":"crossref","unstructured":"Geiger,\u00a0A., Lenz,\u00a0P., Urtasun,\u00a0R., 2012. Are we ready for autonomous driving? the kitti vision benchmark suite. In: IEEE Conference on Computer Vision and Pattern Recognition. pp. 3354\u20133361.","DOI":"10.1109\/CVPR.2012.6248074"},{"key":"10.1016\/j.cviu.2026.104812_b10","unstructured":"Goodfellow,\u00a0I.J., Shlens,\u00a0J., Szegedy,\u00a0C., 2015. Explaining and Harnessing Adversarial Examples. In: International Conference on Learning Representations."},{"issue":"12","key":"10.1016\/j.cviu.2026.104812_b11","doi-asserted-by":"crossref","first-page":"4338","DOI":"10.1109\/TPAMI.2020.3005434","article-title":"Deep learning for 3D point clouds: A survey","volume":"43","author":"Guo","year":"2021","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.cviu.2026.104812_b12","unstructured":"Hu,\u00a0J.S., Kuai,\u00a0T., Waslander,\u00a0S.L., 2022. Point density-aware voxels for lidar 3d object detection. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 8469\u20138478."},{"key":"10.1016\/j.cviu.2026.104812_b13","doi-asserted-by":"crossref","DOI":"10.1016\/j.cviu.2023.103877","article-title":"Adversarial neon beam: A light-based physical attack to dnns","volume":"238","author":"Hu","year":"2024","journal-title":"Comput. Vis. Image Underst."},{"key":"10.1016\/j.cviu.2026.104812_b14","series-title":"IEEE Symposium on Security and Privacy","first-page":"1822","article-title":"Pla-lidar: Physical laser attacks against lidar-based 3d object detection in autonomous vehicle","author":"Jin","year":"2023"},{"key":"10.1016\/j.cviu.2026.104812_b15","series-title":"Artificial Intelligence Safety and Security","first-page":"99","article-title":"Adversarial examples in the physical world","author":"Kurakin","year":"2018"},{"key":"10.1016\/j.cviu.2026.104812_b16","unstructured":"Lang,\u00a0A.H., Vora,\u00a0S., Caesar,\u00a0H., Zhou,\u00a0L., Yang,\u00a0J., Beijbom,\u00a0O., 2019. PointPillars: Fast Encoders for Object Detection From Point Clouds. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 12689\u201312697."},{"issue":"8","key":"10.1016\/j.cviu.2026.104812_b17","doi-asserted-by":"crossref","first-page":"1709","DOI":"10.1364\/PRJ.509710","article-title":"Towards an ultrafast 3D imaging scanning LiDAR system: a review","volume":"12","author":"Li","year":"2024","journal-title":"Photonics Res."},{"key":"10.1016\/j.cviu.2026.104812_b18","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2020.107584","article-title":"Universal adversarial perturbations against object detection","volume":"110","author":"Li","year":"2021","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.cviu.2026.104812_b19","unstructured":"Lin,\u00a0J., Song,\u00a0C., He,\u00a0K., Wang,\u00a0L., Hopcroft,\u00a0J.E., 2020. Nesterov accelerated gradient and scale in variance for adversarial attacks. In: International Conference on Learning Representations. p. 1, 2, 4, 5."},{"key":"10.1016\/j.cviu.2026.104812_b20","doi-asserted-by":"crossref","unstructured":"Liu,\u00a0H., Wu,\u00a0Y., Yu,\u00a0Z., Vorobeychik,\u00a0Y., Zhang,\u00a0N., 2023. SlowLiDAR: Increasing the Latency of LiDAR-Based Detection Using Adversarial Examples. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 5146\u20135155.","DOI":"10.1109\/CVPR52729.2023.00498"},{"key":"10.1016\/j.cviu.2026.104812_b21","series-title":"6th International Conference on Learning Representations, ICLR 2018, Vancouver, BC, Canada, April 30 - May 3, 2018, Conference Track Proceedings","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2018"},{"key":"10.1016\/j.cviu.2026.104812_b22","doi-asserted-by":"crossref","unstructured":"M\u00f6ller,\u00a0T., Trumbore,\u00a0B., 2005. Fast, minimum storage ray\/triangle intersection. In: ACM SIGGRAPH 2005 Courses. pp. 7\u2013es.","DOI":"10.1145\/1198555.1198746"},{"key":"10.1016\/j.cviu.2026.104812_b23","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2022.108796","article-title":"3D object detection for autonomous driving: A survey","volume":"130","author":"Qian","year":"2022","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.cviu.2026.104812_b24","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1016\/j.neunet.2017.07.017","article-title":"A patch-based convolutional neural network for remote sensing image classification","volume":"95","author":"Sharma","year":"2017","journal-title":"Neural Netw."},{"key":"10.1016\/j.cviu.2026.104812_b25","doi-asserted-by":"crossref","unstructured":"Shi,\u00a0S., Guo,\u00a0C., Jiang,\u00a0L., Wang,\u00a0Z., Shi,\u00a0J., Wang,\u00a0X., Li,\u00a0H., 2020. Pv-rcnn: Point-voxel feature set abstraction for 3d object detection. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 10529\u201310538.","DOI":"10.1109\/CVPR42600.2020.01054"},{"key":"10.1016\/j.cviu.2026.104812_b26","doi-asserted-by":"crossref","unstructured":"Shi,\u00a0S., Wang,\u00a0X., Li,\u00a0H., 2019. Pointrcnn: 3d object proposal generation and detection from point cloud. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 770\u2013779.","DOI":"10.1109\/CVPR.2019.00086"},{"key":"10.1016\/j.cviu.2026.104812_b27","unstructured":"Song,\u00a0D., Eykholt,\u00a0K., Evtimov,\u00a0I., Fernandes,\u00a0E., Li,\u00a0B., Rahmati,\u00a0A., Tramer,\u00a0F., Prakash,\u00a0A., Kohno,\u00a0T., 2018. Physical adversarial examples for object detectors. In: 12th USENIX Workshop on Offensive Technologies. WOOT 18."},{"key":"10.1016\/j.cviu.2026.104812_b28","unstructured":"Szegedy,\u00a0C., Zaremba,\u00a0W., Sutskever,\u00a0I., Bruna,\u00a0J., Erhan,\u00a0D., Goodfellow,\u00a0I.J., Fergus,\u00a0R., 2014. Intriguing properties of neural networks. In: International Conference on Learning Representations."},{"key":"10.1016\/j.cviu.2026.104812_b29","doi-asserted-by":"crossref","unstructured":"Tu,\u00a0J., Ren,\u00a0M., Manivasagam,\u00a0S., Liang,\u00a0M., Yang,\u00a0B., Du,\u00a0R., Cheng,\u00a0F., Urtasun,\u00a0R., 2020. Physically realizable adversarial examples for lidar object detection. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 13716\u201313725.","DOI":"10.1109\/CVPR42600.2020.01373"},{"key":"10.1016\/j.cviu.2026.104812_b30","doi-asserted-by":"crossref","first-page":"27","DOI":"10.1016\/j.neucom.2021.09.027","article-title":"Adversarial point cloud perturbations against 3d object detection in autonomous driving systems","volume":"466","author":"Wang","year":"2021","journal-title":"Neurocomputing"},{"key":"10.1016\/j.cviu.2026.104812_b31","article-title":"Adversarial obstacle generation against lidar-based 3d object detection","author":"Wang","year":"2023","journal-title":"IEEE Trans. Multimed."},{"key":"10.1016\/j.cviu.2026.104812_b32","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2024.111156","article-title":"Gradient-based sparse voxel attacks on point cloud object detection","volume":"160","author":"Wu","year":"2025","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.cviu.2026.104812_b33","doi-asserted-by":"crossref","unstructured":"Xie,\u00a0C., Wang,\u00a0J., Zhang,\u00a0Z., Zhou,\u00a0Y., Xie,\u00a0L., Yuille,\u00a0A., 2017. Adversarial examples for semantic segmentation and object detection. In: Proceedings of the IEEE International Conference on Computer Vision. pp. 1369\u20131378.","DOI":"10.1109\/ICCV.2017.153"},{"key":"10.1016\/j.cviu.2026.104812_b34","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2023.109847","article-title":"AdvMask: A sparse adversarial attack-based data augmentation method for image classification","volume":"144","author":"Yang","year":"2023","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.cviu.2026.104812_b35","doi-asserted-by":"crossref","unstructured":"Yang,\u00a0K., Tsai,\u00a0T., Yu,\u00a0H., Panoff,\u00a0M., Ho,\u00a0T.-Y., Jin,\u00a0Y., 2021. Robust Roadside Physical Adversarial Attack Against Deep Learning in Lidar Perception Modules. In: Proceedings of the ACM Asia Conference on Computer and Communications Security. pp. 349\u2013362.","DOI":"10.1145\/3433210.3453106"},{"key":"10.1016\/j.cviu.2026.104812_b36","doi-asserted-by":"crossref","DOI":"10.1016\/j.autcon.2021.103874","article-title":"Automated semantic segmentation of industrial point clouds using ResPointNet++","volume":"130","author":"Yin","year":"2021","journal-title":"Autom. Constr."},{"key":"10.1016\/j.cviu.2026.104812_b37","doi-asserted-by":"crossref","DOI":"10.1016\/j.cag.2021.07.003","article-title":"A comprehensive survey of LIDAR-based 3D object detection methods with deep learning for autonomous driving","author":"Zamanakos","year":"2021","journal-title":"Comput. Graph."},{"key":"10.1016\/j.cviu.2026.104812_b38","doi-asserted-by":"crossref","unstructured":"Zhang,\u00a0Y., Hu,\u00a0Q., Xu,\u00a0G., Ma,\u00a0Y., Wan,\u00a0J., Guo,\u00a0Y., 2022. Not all points are equal: Learning highly efficient point-based detectors for 3d lidar point clouds. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 18953\u201318962.","DOI":"10.1109\/CVPR52688.2022.01838"},{"key":"10.1016\/j.cviu.2026.104812_b39","doi-asserted-by":"crossref","unstructured":"Zhu,\u00a0Y., Miao,\u00a0C., Zheng,\u00a0T., Hajiaghajani,\u00a0F., Su,\u00a0L., Qiao,\u00a0C., 2021. Can We Use Arbitrary Objects to Attack LiDAR Perception in Autonomous Driving?. In: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security. Virtual Event Republic of Korea, pp. 1945\u20131960.","DOI":"10.1145\/3460120.3485377"}],"container-title":["Computer Vision and Image Understanding"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1077314226001797?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1077314226001797?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T05:55:57Z","timestamp":1782885357000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1077314226001797"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6]]},"references-count":39,"alternative-id":["S1077314226001797"],"URL":"https:\/\/doi.org\/10.1016\/j.cviu.2026.104812","relation":{},"ISSN":["1077-3142"],"issn-type":[{"value":"1077-3142","type":"print"}],"subject":[],"published":{"date-parts":[[2026,6]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Invisibility stickers against LiDAR: Adversarial attacks on point cloud intensity for LiDAR-based object detection","name":"articletitle","label":"Article Title"},{"value":"Computer Vision and Image Understanding","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.cviu.2026.104812","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Published by Elsevier Inc.","name":"copyright","label":"Copyright"}],"article-number":"104812"}}