{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T13:10:15Z","timestamp":1782393015842,"version":"3.54.5"},"reference-count":36,"publisher":"Elsevier BV","issue":"1","license":[{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2024,1,16]],"date-time":"2024-01-16T00:00:00Z","timestamp":1705363200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100004835","name":"Zhejiang University","doi-asserted-by":"publisher","award":["61925109"],"award-info":[{"award-number":["61925109"]}],"id":[{"id":"10.13039\/501100004835","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004835","name":"Zhejiang University","doi-asserted-by":"publisher","award":["62071428"],"award-info":[{"award-number":["62071428"]}],"id":[{"id":"10.13039\/501100004835","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004835","name":"Zhejiang University","doi-asserted-by":"publisher","award":["62222114"],"award-info":[{"award-number":["62222114"]}],"id":[{"id":"10.13039\/501100004835","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004835","name":"Zhejiang University","doi-asserted-by":"publisher","award":["62271280"],"award-info":[{"award-number":["62271280"]}],"id":[{"id":"10.13039\/501100004835","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["High-Confidence Computing"],"published-print":{"date-parts":[[2024,3]]},"DOI":"10.1016\/j.hcc.2024.100203","type":"journal-article","created":{"date-parts":[[2024,1,16]],"date-time":"2024-01-16T21:07:43Z","timestamp":1705439263000},"page":"100203","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":6,"title":["Adversarial robustness analysis of LiDAR-included models in autonomous driving"],"prefix":"10.1016","volume":"4","author":[{"given":"Bo","family":"Yang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zizhi","family":"Jin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yushi","family":"Cheng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaoyu","family":"Ji","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenyuan","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.hcc.2024.100203_b1","series-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"10.1016\/j.hcc.2024.100203_b2","series-title":"2017 Ieee Symposium on Security and Privacy","first-page":"39","article-title":"Towards evaluating the robustness of neural networks","author":"Carlini","year":"2017"},{"key":"10.1016\/j.hcc.2024.100203_b3","series-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"10.1016\/j.hcc.2024.100203_b4","doi-asserted-by":"crossref","unstructured":"K. Eykholt, I. Evtimov, E. Fernandes, B. Li, A. Rahmati, C. Xiao, A. Prakash, T. Kohno, D. Song, Robust physical-world attacks on deep learning visual classification, in: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2018, pp. 1625\u20131634.","DOI":"10.1109\/CVPR.2018.00175"},{"key":"10.1016\/j.hcc.2024.100203_b5","series-title":"30th USENIX Security Symposium (USENIX Security 21)","first-page":"3309","article-title":"Dirty road can attack: Security of deep learning based automated lane centering under Physical-World attack","author":"Sato","year":"2021"},{"key":"10.1016\/j.hcc.2024.100203_b6","doi-asserted-by":"crossref","unstructured":"Y. Cao, C. Xiao, B. Cyr, Y. Zhou, W. Park, S. Rampazzi, Q.A. Chen, K. Fu, Z.M. Mao, Adversarial sensor attack on lidar-based perception in autonomous driving, in: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, 2019, pp. 2267\u20132281.","DOI":"10.1145\/3319535.3339815"},{"key":"10.1016\/j.hcc.2024.100203_b7","doi-asserted-by":"crossref","unstructured":"J. Tu, M. Ren, S. Manivasagam, M. Liang, B. Yang, R. Du, F. Cheng, R. Urtasun, Physically realizable adversarial examples for lidar object detection, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020, pp. 13716\u201313725.","DOI":"10.1109\/CVPR42600.2020.01373"},{"key":"10.1016\/j.hcc.2024.100203_b8","doi-asserted-by":"crossref","first-page":"27","DOI":"10.1016\/j.neucom.2021.09.027","article-title":"Adversarial point cloud perturbations against 3D object detection in autonomous driving systems","volume":"466","author":"Wang","year":"2021","journal-title":"Neurocomputing"},{"key":"10.1016\/j.hcc.2024.100203_b9","unstructured":"J. Sun, Y. Cao, Q.A. Chen, Z.M. Mao, Towards robust lidar-based perception in autonomous driving: General black-box adversarial sensor attack and countermeasures, in: 29th {USENIX} Security Symposium ({USENIX} Security 20), 2020, pp. 877\u2013894."},{"key":"10.1016\/j.hcc.2024.100203_b10","series-title":"2023 IEEE Symposium on Security and Privacy","first-page":"1822","article-title":"Pla-lidar: Physical laser attacks against lidar-based 3d object detection in autonomous vehicle","author":"Jin","year":"2023"},{"key":"10.1016\/j.hcc.2024.100203_b11","doi-asserted-by":"crossref","unstructured":"K. Yang, T. Tsai, H. Yu, M. Panoff, T.-Y. Ho, Y. Jin, Robust roadside physical adversarial attack against deep learning in lidar perception modules, in: Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security, 2021, pp. 349\u2013362.","DOI":"10.1145\/3433210.3453106"},{"key":"10.1016\/j.hcc.2024.100203_b12","doi-asserted-by":"crossref","unstructured":"Y. Zhu, C. Miao, T. Zheng, F. Hajiaghajani, L. Su, C. Qiao, Can We Use Arbitrary Objects to Attack LiDAR Perception in Autonomous Driving?, in: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, 2021, pp. 1945\u20131960.","DOI":"10.1145\/3460120.3485377"},{"key":"10.1016\/j.hcc.2024.100203_b13","series-title":"2021 IEEE International Conference on Image Processing","first-page":"484","article-title":"Sensor adversarial traits: Analyzing robustness of 3d object detection sensor fusion models","author":"Park","year":"2021"},{"key":"10.1016\/j.hcc.2024.100203_b14","unstructured":"R.S. Hallyburton, Y. Liu, Y. Cao, Z.M. Mao, M. Pajic, Security Analysis of {Camera-LiDAR} Fusion Against {Black-Box} Attacks on Autonomous Vehicles, in: 31st USENIX Security Symposium, USENIX Security 22, 2022, pp. 1903\u20131920."},{"key":"10.1016\/j.hcc.2024.100203_b15","series-title":"Exploring adversarial robustness of multi-sensor perception systems in self driving","author":"Tu","year":"2021"},{"key":"10.1016\/j.hcc.2024.100203_b16","series-title":"2021 IEEE\/RSJ International Conference on Intelligent Robots and Systems","first-page":"2189","article-title":"Adversarial attacks on camera-lidar models for 3d car detection","author":"Abdelfattah","year":"2021"},{"key":"10.1016\/j.hcc.2024.100203_b17","series-title":"2021 IEEE Symposium on Security and Privacy","first-page":"176","article-title":"Invisible for both camera and lidar: Security of multi-sensor fusion based perception in autonomous driving under physical-world attacks","author":"Cao","year":"2021"},{"key":"10.1016\/j.hcc.2024.100203_b18","doi-asserted-by":"crossref","unstructured":"A.H. Lang, S. Vora, H. Caesar, L. Zhou, J. Yang, O. Beijbom, Pointpillars: Fast encoders for object detection from point clouds, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2019, pp. 12697\u201312705.","DOI":"10.1109\/CVPR.2019.01298"},{"key":"10.1016\/j.hcc.2024.100203_b19","doi-asserted-by":"crossref","unstructured":"Z. Yang, Y. Sun, S. Liu, J. Jia, 3dssd: Point-based 3d single stage object detector, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020, pp. 11040\u201311048.","DOI":"10.1109\/CVPR42600.2020.01105"},{"key":"10.1016\/j.hcc.2024.100203_b20","doi-asserted-by":"crossref","unstructured":"S. Shi, C. Guo, L. Jiang, Z. Wang, J. Shi, X. Wang, H. Li, Pv-rcnn: Point-voxel feature set abstraction for 3d object detection, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020, pp. 10529\u201310538.","DOI":"10.1109\/CVPR42600.2020.01054"},{"key":"10.1016\/j.hcc.2024.100203_b21","series-title":"2019 International Conference on Robotics and Automation","first-page":"7276","article-title":"Mvx-net: Multimodal voxelnet for 3d object detection","author":"Sindagi","year":"2019"},{"issue":"10","key":"10.1016\/j.hcc.2024.100203_b22","doi-asserted-by":"crossref","first-page":"3337","DOI":"10.3390\/s18103337","article-title":"Second: Sparsely embedded convolutional detection","volume":"18","author":"Yan","year":"2018","journal-title":"Sensors"},{"key":"10.1016\/j.hcc.2024.100203_b23","series-title":"Part-a 2 net: 3d part-aware and aggregation neural network for object detection from point cloud","author":"Shi","year":"2019"},{"key":"10.1016\/j.hcc.2024.100203_b24","doi-asserted-by":"crossref","unstructured":"T. Yin, X. Zhou, P. Krahenbuhl, Center-based 3d object detection and tracking, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2021, pp. 11784\u201311793.","DOI":"10.1109\/CVPR46437.2021.01161"},{"key":"10.1016\/j.hcc.2024.100203_b25","doi-asserted-by":"crossref","unstructured":"S. Shi, X. Wang, H. Li, Pointrcnn: 3d object proposal generation and detection from point cloud, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2019, pp. 770\u2013779.","DOI":"10.1109\/CVPR.2019.00086"},{"key":"10.1016\/j.hcc.2024.100203_b26","doi-asserted-by":"crossref","unstructured":"Y. Zhang, Q. Hu, G. Xu, Y. Ma, J. Wan, Y. Guo, Not all points are equal: Learning highly efficient point-based detectors for 3d lidar point clouds, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2022, pp. 18953\u201318962.","DOI":"10.1109\/CVPR52688.2022.01838"},{"key":"10.1016\/j.hcc.2024.100203_b27","doi-asserted-by":"crossref","unstructured":"C. He, H. Zeng, J. Huang, X.-S. Hua, L. Zhang, Structure aware single-stage 3d object detection from point cloud, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020, pp. 11873\u201311882.","DOI":"10.1109\/CVPR42600.2020.01189"},{"issue":"6","key":"10.1016\/j.hcc.2024.100203_b28","doi-asserted-by":"crossref","first-page":"2425","DOI":"10.1007\/s00371-022-02672-2","article-title":"PV-RCNN++: semantical point-voxel feature interaction for 3D object detection","volume":"39","author":"Wu","year":"2023","journal-title":"Vis. Comput."},{"key":"10.1016\/j.hcc.2024.100203_b29","series-title":"Apollo","year":"2023"},{"key":"10.1016\/j.hcc.2024.100203_b30","doi-asserted-by":"crossref","unstructured":"C.R. Qi, W. Liu, C. Wu, H. Su, L.J. Guibas, Frustum pointnets for 3d object detection from rgb-d data, in: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2018, pp. 918\u2013927.","DOI":"10.1109\/CVPR.2018.00102"},{"key":"10.1016\/j.hcc.2024.100203_b31","series-title":"2019 IEEE\/RSJ International Conference on Intelligent Robots and Systems","first-page":"1742","article-title":"Frustum convnet: Sliding frustums to aggregate local point-wise features for amodal 3d object detection","author":"Wang","year":"2019"},{"key":"10.1016\/j.hcc.2024.100203_b32","series-title":"Computer Vision\u2013ECCV 2020: 16th European Conference, Glasgow, UK, August 23\u201328, 2020, Proceedings, Part XV 16","first-page":"35","article-title":"Epnet: Enhancing point features with image semantics for 3d object detection","author":"Huang","year":"2020"},{"key":"10.1016\/j.hcc.2024.100203_b33","series-title":"2018 IEEE\/RSJ International Conference on Intelligent Robots and Systems","first-page":"1","article-title":"Joint 3d proposal generation and object detection from view aggregation","author":"Ku","year":"2018"},{"key":"10.1016\/j.hcc.2024.100203_b34","series-title":"Object removal attacks on lidar-based 3d object detectors","author":"Hau","year":"2021"},{"key":"10.1016\/j.hcc.2024.100203_b35","doi-asserted-by":"crossref","unstructured":"B. Yang, X. Ji, Z. Jin, Y. Cheng, W. Xu, Exploring Adversarial Robustness of LiDAR-Camera Fusion Model in Autonomous Driving, in: 2023 IEEE Conference on Energy Internet and Energy System Integration, 2023.","DOI":"10.1109\/EI259745.2023.10512506"},{"key":"10.1016\/j.hcc.2024.100203_b36","doi-asserted-by":"crossref","DOI":"10.1177\/0278364913491297","article-title":"Vision meets robotics: The KITTI dataset","author":"Geiger","year":"2013","journal-title":"Int. J. Robot. Res. (IJRR)"}],"container-title":["High-Confidence Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2667295224000060?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2667295224000060?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,9,9]],"date-time":"2025-09-09T08:42:42Z","timestamp":1757407362000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2667295224000060"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3]]},"references-count":36,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2024,3]]}},"alternative-id":["S2667295224000060"],"URL":"https:\/\/doi.org\/10.1016\/j.hcc.2024.100203","relation":{},"ISSN":["2667-2952"],"issn-type":[{"value":"2667-2952","type":"print"}],"subject":[],"published":{"date-parts":[[2024,3]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Adversarial robustness analysis of LiDAR-included models in autonomous driving","name":"articletitle","label":"Article Title"},{"value":"High-Confidence Computing","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.hcc.2024.100203","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2024 The Author(s). Published by Elsevier B.V. on behalf of Shandong University.","name":"copyright","label":"Copyright"}],"article-number":"100203"}}