{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T06:04:21Z","timestamp":1784268261556,"version":"3.55.0"},"reference-count":67,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/icst69053.2026.00019","type":"proceedings-article","created":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T21:48:20Z","timestamp":1784238500000},"page":"40-51","source":"Crossref","is-referenced-by-count":0,"title":["Natural Adversaries: Fuzzing Autonomous Vehicles with Realistic Roadside Object Placements"],"prefix":"10.1109","author":[{"given":"Yang","family":"Sun","sequence":"first","affiliation":[{"name":"Singapore Management University,School of Computing and Information Systems,Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haoyu","family":"Wang","sequence":"additional","affiliation":[{"name":"Singapore Management University,School of Computing and Information Systems,Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christopher M.","family":"Poskitt","sequence":"additional","affiliation":[{"name":"Singapore Management University,School of Computing and Information Systems,Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jun","family":"Sun","sequence":"additional","affiliation":[{"name":"Singapore Management University,School of Computing and Information Systems,Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.4271\/j3016_202104"},{"key":"ref2","volume-title":"Waymo Driver","year":"2025"},{"key":"ref3","volume-title":"Apollo","year":"2025"},{"key":"ref4","article-title":"Autonomous driving technology designed for trucks","year":"2024"},{"key":"ref5","volume-title":"Code of practice for works on public streets 1","year":"2025"},{"key":"ref6","article-title":"Street works (works on public streets) regulations","year":"2025"},{"key":"ref7","article-title":"Guidelines on greenery provision and tree conservation for developments","year":"2023"},{"key":"ref8","article-title":"How to place your cart at the curb","year":"2025"},{"key":"ref9","volume-title":"Trash cart placement","year":"2024"},{"key":"ref10","article-title":"Cart placement","year":"2024"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00076"},{"key":"ref12","first-page":"1903","article-title":"Security analysis of camera-LiDAR fusion against black-box attacks on autonomous vehicles","volume-title":"USENIX Security Symposium. USENIX Association","author":"Hallyburton"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485377"},{"key":"ref14","first-page":"3309","article-title":"Dirty road can attack: Security of deep learning based automated lane centering under physical-world attack","volume-title":"USENIX Security Symposium. USENIX Association","author":"Sato"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19839-7_30"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559390"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3556897"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC45102.2020.9294422"},{"key":"ref19","article-title":"Unity store","year":"2025"},{"key":"ref20","article-title":"Latest Apollo","year":"2025"},{"key":"ref21","article-title":"Autoware.AI","year":"2025"},{"key":"ref22","first-page":"347","article-title":"DeepBillboard: systematic physical-world testing of autonomous driving systems","author":"Zhou","year":"2020","journal-title":"ICSE. ACM"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/IROS40897.2019.8968267"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2021.3103441"},{"key":"ref25","article-title":"Adversarial machine learning at scale","author":"Kurakin","year":"2017","journal-title":"ICLR (Poster). OpenReview.net"},{"key":"ref26","article-title":"Distilling the knowledge in a neural network","volume":"abs\/1503.02531","author":"Hinton","year":"2015","journal-title":"CoRR"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref28","article-title":"Defense-GAN: Protecting classifiers against adversarial attacks using generative models","author":"Samangouei","year":"2018","journal-title":"ICLR (Poster). OpenReview.net"},{"key":"ref29","article-title":"Adversarial attacks and defences: A survey","volume":"abs\/1810.00069","author":"Chakraborty","year":"2018","journal-title":"CoRR"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1049\/cit2.12028"},{"key":"ref31","article-title":"Street works act 1995","year":"2025"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30206-3_12"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-021-21007-8"},{"key":"ref34","volume-title":"AWSIM","year":"2025"},{"key":"ref35","volume-title":"Unity","year":"2025"},{"key":"ref36","article-title":"TrashFuzz","author":"Sun","year":"2025"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/s10703-017-0286-7"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-59152-6_34"},{"key":"ref39","article-title":"Cyberrt","year":"2021"},{"key":"ref40","article-title":"ROS bridge for Autoware and Carla","year":"2019"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/FTW66604.2025.00009"},{"key":"ref42","article-title":"Evolutionary Algorithms and Neural Networks - Theory and Applications, ser. Studies in Computational Intelligence","volume":"780","author":"Mirjalili","year":"2019"},{"key":"ref43","first-page":"1","article-title":"CARLA: an open urban driving simulator","volume-title":"CoRL, ser. Proceedings of Machine Learning Research","volume":"78","author":"Dosovitskiy"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3485730.3485935"},{"key":"ref45","article-title":"GPT-4o system card","volume":"abs\/2410.21276","year":"2024","journal-title":"CoRR"},{"key":"ref46","article-title":"Images and vision","year":"2025"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/LRA.2024.3440097"},{"key":"ref48","article-title":"VisionGPT: Vision-language understanding agent using generalized multimodal framework","volume":"abs\/2403.09027","author":"Kelly","year":"2024","journal-title":"CoRR"},{"key":"ref49","article-title":"CRASH: challenging reinforcement-learning based adversarial scenarios for safety hardening","volume":"abs\/2411.16996","author":"Kulkarni","year":"2024","journal-title":"CoRR"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670296"},{"key":"ref51","article-title":"Too afraid to drive: Systematic discovery of semantic DoS vulnerability in autonomous driving planning under physical-world attacks","author":"Wan","year":"2022","journal-title":"NDSS. The Internet Society"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484766"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE5003.2020.00012"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00216"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3195640"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3560430"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3540250.3549100"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3150788"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2023.3254142"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598108"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2025.3569086"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3241979"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3206427"},{"key":"ref64","article-title":"Coverage-based scene fuzzing for virtual autonomous driving testing","volume":"abs\/2106.00873","author":"Hu","year":"2021","journal-title":"CoRR"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC.2019.8917326"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00155"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598072"}],"event":{"name":"2026 IEEE International Conference on Software Testing, Verification and Validation (ICST)","location":"Daejeon, Korea, Republic of","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,22]]}},"container-title":["2026 IEEE International Conference on Software Testing, Verification and Validation (ICST)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11600401\/11600462\/11600472.pdf?arnumber=11600472","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T05:22:12Z","timestamp":1784265732000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11600472\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":67,"URL":"https:\/\/doi.org\/10.1109\/icst69053.2026.00019","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}