{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,2]],"date-time":"2026-08-02T20:48:10Z","timestamp":1785703690247,"version":"3.56.0"},"reference-count":60,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Internet of Things"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1016\/j.iot.2026.101973","type":"journal-article","created":{"date-parts":[[2026,5,20]],"date-time":"2026-05-20T18:04:40Z","timestamp":1779300280000},"page":"101973","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Threat landscape of Edge-AI-assisted connected autonomous vehicles (CAV)"],"prefix":"10.1016","volume":"38","author":[{"given":"Mahshid Mehr","family":"Nezhad","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ugur Ilker","family":"Atmaca","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Harsh","family":"Kasyap","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4715-212X","authenticated-orcid":false,"given":"Carsten","family":"Maple","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ligang","family":"He","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.iot.2026.101973_bib0001","series-title":"2019 SoutheastCon","first-page":"1","article-title":"Towards an analysis of the architecture, security, and privacy issues in vehicular fog computing","author":"Hoque","year":"2019"},{"key":"10.1016\/j.iot.2026.101973_bib0002","series-title":"2019 IEEE 10th Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON)","first-page":"1051","article-title":"Towards a threat model for vehicular fog computing","author":"Hoque","year":"2019"},{"key":"10.1016\/j.iot.2026.101973_bib0003","series-title":"2022 IEEE 8th World Forum on Internet of Things (WF-IoT)","first-page":"1","article-title":"Autonomous driving security: a comprehensive threat model of attacks and mitigation strategies","author":"Hoque","year":"2022"},{"issue":"7","key":"10.1016\/j.iot.2026.101973_bib0004","doi-asserted-by":"crossref","first-page":"6240","DOI":"10.1109\/TITS.2021.3085297","article-title":"A survey on cyber-security of connected and autonomous vehicles (CAVs)","volume":"23","author":"Sun","year":"2021","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"issue":"4","key":"10.1016\/j.iot.2026.101973_bib0005","doi-asserted-by":"crossref","first-page":"2167","DOI":"10.1109\/COMST.2020.3007787","article-title":"Communication-efficient Edge AI: algorithms and systems","volume":"22","author":"Shi","year":"2020","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"10.1016\/j.iot.2026.101973_bib0006","series-title":"2020 Fifth International Conference on Fog and Mobile Edge Computing (FMEC)","first-page":"341","article-title":"Towards security and privacy for Edge AI in IoT\/IoE based digital marketing environments","author":"Sachdev","year":"2020"},{"key":"10.1016\/j.iot.2026.101973_bib0007","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2022.100674","article-title":"AI-based fog and edge computing: a systematic review, taxonomy and future directions","volume":"21","author":"Iftikhar","year":"2023","journal-title":"Internet Things"},{"issue":"16","key":"10.1016\/j.iot.2026.101973_bib0008","doi-asserted-by":"crossref","first-page":"19199","DOI":"10.1007\/s10489-023-04499-3","article-title":"FPANet: feature pyramid attention network for crowd counting","volume":"53","author":"Zhai","year":"2023","journal-title":"Appl. Intell."},{"key":"10.1016\/j.iot.2026.101973_bib0009","doi-asserted-by":"crossref","DOI":"10.1145\/3653454","article-title":"Scale attentive aggregation network for crowd counting and localization in smart city","author":"Zhai","year":"2024","journal-title":"ACM Trans. Sens. Netw."},{"issue":"3","key":"10.1016\/j.iot.2026.101973_bib0010","doi-asserted-by":"crossref","first-page":"2487","DOI":"10.1109\/TCSVT.2024.3488721","article-title":"Zero-shot object counting with vision-language prior guidance network","volume":"35","author":"Zhai","year":"2024","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"issue":"2","key":"10.1016\/j.iot.2026.101973_bib0011","doi-asserted-by":"crossref","first-page":"1123","DOI":"10.1109\/TCSVT.2024.3476384","article-title":"Multi-view gait recognition with joint local multi-scale and global contextual spatio-temporal features","volume":"35","author":"Zhai","year":"2024","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"issue":"3","key":"10.1016\/j.iot.2026.101973_bib0012","doi-asserted-by":"crossref","first-page":"5536","DOI":"10.1109\/TCE.2024.3378166","article-title":"Region-aware quantum network for crowd counting","volume":"70","author":"Zhai","year":"2024","journal-title":"IEEE Trans. Consum. Electron."},{"key":"10.1016\/j.iot.2026.101973_bib0013","unstructured":"H.B. McMahan, E. Moore, D. Ramage, B.A.y. Arcas, Federated learning of deep networks using model averaging, (2016). CoRR arXiv: 1602.05629."},{"issue":"23","key":"10.1016\/j.iot.2026.101973_bib0014","doi-asserted-by":"crossref","first-page":"5101","DOI":"10.3390\/app9235101","article-title":"A connected and autonomous vehicle reference architecture for attack surface analysis","volume":"9","author":"Maple","year":"2019","journal-title":"Appl. Sci."},{"issue":"2","key":"10.1016\/j.iot.2026.101973_bib0015","first-page":"546","article-title":"Potential cyberattacks on automated vehicles","volume":"16","author":"Petit","year":"2014","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"issue":"2","key":"10.1016\/j.iot.2026.101973_bib0016","doi-asserted-by":"crossref","first-page":"357","DOI":"10.1109\/JPROC.2019.2948775","article-title":"The security of autonomous driving: threats, defenses, and future directions","volume":"108","author":"Ren","year":"2019","journal-title":"Proc. IEEE"},{"issue":"8","key":"10.1016\/j.iot.2026.101973_bib0017","doi-asserted-by":"crossref","first-page":"1697","DOI":"10.1109\/JPROC.2019.2915983","article-title":"Edge computing for autonomous driving: opportunities and challenges","volume":"107","author":"Liu","year":"2019","journal-title":"Proc. IEEE"},{"key":"10.1016\/j.iot.2026.101973_bib0018","unstructured":"T. Wingarz, A. Lauscher, J. Edinger, D. Kaaser, S. Schulte, M. Fischer, SoK: towards security and safety of Edge AI, (2024). arXiv preprint arXiv: 2410.05349."},{"key":"10.1016\/j.iot.2026.101973_bib0019","series-title":"Proceedings of the 2nd ACM Workshop on Cyber-Physical Systems Security and Privacy","first-page":"47","article-title":"Risk assessment for cooperative automated driving","author":"Dominic","year":"2016"},{"key":"10.1016\/j.iot.2026.101973_bib0020","doi-asserted-by":"crossref","first-page":"136","DOI":"10.1016\/j.infsof.2015.12.008","article-title":"A functional reference architecture for autonomous driving","volume":"73","author":"Behere","year":"2016","journal-title":"Inf. Softw. Technol."},{"key":"10.1016\/j.iot.2026.101973_bib0021","series-title":"2019 IEEE Intelligent Vehicles Symposium (IV)","first-page":"8","article-title":"TARA+: controllability-aware threat analysis and risk assessment for l3 automated driving systems","author":"Bolovinou","year":"2019"},{"key":"10.1016\/j.iot.2026.101973_bib0022","series-title":"Artificial Intelligence and Statistics","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","author":"McMahan","year":"2017"},{"key":"10.1016\/j.iot.2026.101973_bib0023","series-title":"2017 IEEE PES Innovative Smart Grid Technologies Conference Europe (ISGT-Europe)","first-page":"1","article-title":"STRIDE-based threat modeling for cyber-physical systems","author":"Khan","year":"2017"},{"key":"10.1016\/j.iot.2026.101973_bib0024","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103391","article-title":"STRIDE threat model-based framework for assessing the vulnerabilities of modern vehicles","volume":"133","author":"Abuabed","year":"2023","journal-title":"Comput. Secur."},{"key":"10.1016\/j.iot.2026.101973_bib0025","doi-asserted-by":"crossref","first-page":"1774","DOI":"10.1109\/OJVT.2025.3580538","article-title":"Autonomous vehicle security: hybrid threat modeling approach","volume":"6","author":"Yousseef","year":"2025","journal-title":"IEEE Open J. Veh. Technol."},{"key":"10.1016\/j.iot.2026.101973_bib0026","series-title":"Risk Centric Threat Modeling: Process for Attack Simulation and Threat Analysis","author":"UcedaVelez","year":"2015"},{"issue":"1","key":"10.1016\/j.iot.2026.101973_bib0027","article-title":"Threat analysis and risk assessment for connected vehicles: a survey","volume":"2021","author":"Luo","year":"2021","journal-title":"Secur. Commun. Netw."},{"key":"10.1016\/j.iot.2026.101973_bib0028","doi-asserted-by":"crossref","DOI":"10.1016\/j.cosrev.2019.100219","article-title":"A review of attack graph and attack tree visual syntax in cyber security","volume":"35","author":"Lallie","year":"2020","journal-title":"Comput. Sci. Rev."},{"key":"10.1016\/j.iot.2026.101973_bib0029","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103270","article-title":"A novel data poisoning attack in federated learning based on inverted loss function","volume":"130","author":"Gupta","year":"2023","journal-title":"Comput. Secur."},{"key":"10.1016\/j.iot.2026.101973_bib0030","doi-asserted-by":"crossref","first-page":"136361","DOI":"10.1109\/ACCESS.2023.3337638","article-title":"Data poisoning attacks with hybrid particle swarm optimization algorithms against federated learning in connected and autonomous vehicles","volume":"11","author":"Cui","year":"2023","journal-title":"IEEE Access"},{"issue":"5","key":"10.1016\/j.iot.2026.101973_bib0031","doi-asserted-by":"crossref","first-page":"5600","DOI":"10.1109\/TITS.2023.3243003","article-title":"Toward robust hierarchical federated learning in internet of vehicles","volume":"24","author":"Zhou","year":"2023","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"10.1016\/j.iot.2026.101973_bib0032","series-title":"25th Annual Network and Distributed System Security Symposium (NDSS 2018)","article-title":"Trojaning attack on neural networks","author":"Liu","year":"2018"},{"issue":"1","key":"10.1016\/j.iot.2026.101973_bib0033","doi-asserted-by":"crossref","first-page":"20","DOI":"10.1109\/TII.2022.3198481","article-title":"Data poisoning attacks in internet-of-vehicle networks: taxonomy, state-of-the-art, and future directions","volume":"19","author":"Chen","year":"2022","journal-title":"IEEE Trans. Ind. Inform."},{"key":"10.1016\/j.iot.2026.101973_bib0034","doi-asserted-by":"crossref","unstructured":"S. Garg, H. J\u00f6nsson, G. Kalander, A. Nilsson, B. Pirange, V. Valadi, J. \u00d6stman, Poisoning attacks on federated learning for autonomous driving, (2024). arXiv preprint arXiv: 2405.01073.","DOI":"10.3384\/ecp208002"},{"key":"10.1016\/j.iot.2026.101973_bib0035","doi-asserted-by":"crossref","first-page":"5814","DOI":"10.1109\/TIFS.2024.3402113","article-title":"RFed: robustness-enhanced privacy-preserving federated learning against poisoning attack","volume":"19","author":"Miao","year":"2024","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"issue":"4","key":"10.1016\/j.iot.2026.101973_bib0036","doi-asserted-by":"crossref","first-page":"4439","DOI":"10.1109\/TVT.2020.2977378","article-title":"Poisoning and evasion attacks against deep learning algorithms in autonomous vehicles","volume":"69","author":"Jiang","year":"2020","journal-title":"IEEE Trans. Veh. Technol."},{"key":"10.1016\/j.iot.2026.101973_bib0037","series-title":"29th USENIX Security Symposium (USENIX Security 20)","first-page":"1605","article-title":"Local model poisoning attacks to {Byzantine-robust} federated learning","author":"Fang","year":"2020"},{"key":"10.1016\/j.iot.2026.101973_bib0038","series-title":"International Conference on Artificial Intelligence and Statistics","first-page":"2938","article-title":"How to backdoor federated learning","author":"Bagdasaryan","year":"2020"},{"key":"10.1016\/j.iot.2026.101973_bib0039","series-title":"ECAI 2024","first-page":"995","article-title":"Mitigating bias: model pruning for enhanced model fairness and efficiency","author":"Kasyap","year":"2024"},{"issue":"4","key":"10.1016\/j.iot.2026.101973_bib0040","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3704633","article-title":"Membership inference attacks and defenses in federated learning: a survey","volume":"57","author":"Bai","year":"2024","journal-title":"ACM Comput. Surv."},{"issue":"1","key":"10.1016\/j.iot.2026.101973_bib0041","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1109\/TIV.2023.3345661","article-title":"Sustainability opportunities and ethical challenges of AI-enabled connected autonomous vehicles routing in urban areas","volume":"9","author":"Guo","year":"2023","journal-title":"IEEE Trans. Intell. Veh."},{"issue":"1","key":"10.1016\/j.iot.2026.101973_bib0042","doi-asserted-by":"crossref","first-page":"503","DOI":"10.1109\/TII.2022.3177442","article-title":"An interpretive perspective: adversarial trojaning attack on neural-architecture-search enabled Edge AI systems","volume":"19","author":"Xu","year":"2022","journal-title":"IEEE Trans. Ind. Inform."},{"issue":"6","key":"10.1016\/j.iot.2026.101973_bib0043","doi-asserted-by":"crossref","first-page":"839","DOI":"10.1109\/TBDATA.2023.3239116","article-title":"Improved gradient inversion attacks and defenses in federated learning","volume":"10","author":"Geng","year":"2023","journal-title":"IEEE Trans. Big Data"},{"key":"10.1016\/j.iot.2026.101973_bib0044","series-title":"2019 IEEE Symposium on Security and Privacy (SP)","first-page":"691","article-title":"Exploiting unintended feature leakage in collaborative learning","author":"Melis","year":"2019"},{"key":"10.1016\/j.iot.2026.101973_bib0045","doi-asserted-by":"crossref","DOI":"10.1016\/j.adhoc.2021.102680","article-title":"A privacy-preserving route planning scheme for the internet of vehicles","volume":"123","author":"Atmaca","year":"2021","journal-title":"Ad Hoc Netw."},{"key":"10.1016\/j.iot.2026.101973_bib0046","doi-asserted-by":"crossref","unstructured":"U.I. Atmaca, C. Maple, M. Dianati, Emerging privacy challenges and approaches in CAV systems, in: Living in the Internet of Things (IoT 2019)(2019) 1\u20139.","DOI":"10.1049\/cp.2019.0141"},{"issue":"1","key":"10.1016\/j.iot.2026.101973_bib0047","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1007\/s10462-024-11024-6","article-title":"Generative AI model privacy: a survey","volume":"58","author":"Liu","year":"2024","journal-title":"Artif. Intell. Rev."},{"issue":"2","key":"10.1016\/j.iot.2026.101973_bib0048","doi-asserted-by":"crossref","first-page":"685","DOI":"10.1109\/TDSC.2023.3261327","article-title":"A comprehensive defense framework against model extraction attacks","volume":"21","author":"Jiang","year":"2023","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10.1016\/j.iot.2026.101973_bib0049","doi-asserted-by":"crossref","first-page":"161","DOI":"10.1109\/TNNLS.2025.3601834","article-title":"Unveiling group-specific distributed concept drift: a fairness imperative in federated learning","volume":"37","author":"Salazar","year":"2025","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"key":"10.1016\/j.iot.2026.101973_bib0050","doi-asserted-by":"crossref","first-page":"317","DOI":"10.1023\/A:1022810614389","article-title":"Incremental learning from noisy data","volume":"1","author":"Schlimmer","year":"1986","journal-title":"Mach. Learn."},{"issue":"6","key":"10.1016\/j.iot.2026.101973_bib0051","doi-asserted-by":"crossref","first-page":"3198","DOI":"10.1109\/TCYB.2020.2983962","article-title":"Concept drift detection via equal intensity K-means space partitioning","volume":"51","author":"Liu","year":"2020","journal-title":"IEEE Trans. Cybern."},{"issue":"10","key":"10.1016\/j.iot.2026.101973_bib0052","doi-asserted-by":"crossref","first-page":"9523","DOI":"10.1016\/j.jksuci.2021.11.006","article-title":"Concept drift detection in data stream mining: a literature review","volume":"34","author":"Agrahari","year":"2022","journal-title":"J. King Saud Univ.-Comput. Inf. Sci."},{"issue":"12","key":"10.1016\/j.iot.2026.101973_bib0053","first-page":"2346","article-title":"Learning under concept drift: a review","volume":"31","author":"Lu","year":"2018","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"10.1016\/j.iot.2026.101973_bib0054","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1016\/j.eswa.2017.12.022","article-title":"Handling adversarial concept drift in streaming data","volume":"97","author":"Sethi","year":"2018","journal-title":"Expert Syst. Appl."},{"issue":"10","key":"10.1016\/j.iot.2026.101973_bib0055","doi-asserted-by":"crossref","first-page":"4013","DOI":"10.1007\/s10994-022-06177-w","article-title":"Adversarial concept drift detection under poisoning attacks for robust data stream mining","volume":"112","author":"Korycki","year":"2023","journal-title":"Mach. Learn."},{"key":"10.1016\/j.iot.2026.101973_bib0056","series-title":"2019 International Joint Conference on Neural Networks (IJCNN)","first-page":"1","article-title":"GMM-VRD: a Gaussian mixture model for dealing with virtual and real concept drifts","author":"Oliveira","year":"2019"},{"key":"10.1016\/j.iot.2026.101973_bib0057","series-title":"International Conference on Machine Learning","first-page":"5650","article-title":"Byzantine-robust distributed learning: towards optimal statistical rates","author":"Yin","year":"2018"},{"issue":"6","key":"10.1016\/j.iot.2026.101973_bib0058","doi-asserted-by":"crossref","first-page":"4096","DOI":"10.1109\/TCSVT.2021.3116976","article-title":"Byzantine-resilient decentralized stochastic gradient descent","volume":"32","author":"Guo","year":"2021","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"issue":"5","key":"10.1016\/j.iot.2026.101973_bib0059","doi-asserted-by":"crossref","first-page":"4481","DOI":"10.1109\/TDSC.2024.3353317","article-title":"Sine: similarity is not enough for mitigating local model poisoning attacks in federated learning","volume":"21","author":"Kasyap","year":"2024","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10.1016\/j.iot.2026.101973_bib0060","series-title":"NDSS","article-title":"FLTrust: Byzantine-robust federated learning via trust bootstrapping","author":"Cao","year":"2021"}],"container-title":["Internet of Things"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2542660526001034?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2542660526001034?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,8,2]],"date-time":"2026-08-02T19:53:50Z","timestamp":1785700430000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2542660526001034"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":60,"alternative-id":["S2542660526001034"],"URL":"https:\/\/doi.org\/10.1016\/j.iot.2026.101973","relation":{},"ISSN":["2542-6605"],"issn-type":[{"value":"2542-6605","type":"print"}],"subject":[],"published":{"date-parts":[[2026,7]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Threat landscape of Edge-AI-assisted connected autonomous vehicles (CAV)","name":"articletitle","label":"Article Title"},{"value":"Internet of Things","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.iot.2026.101973","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"101973"}}