{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T17:28:46Z","timestamp":1784136526661,"version":"3.55.0"},"reference-count":122,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2020,2,1]],"date-time":"2020-02-01T00:00:00Z","timestamp":1580515200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,2,1]],"date-time":"2020-02-01T00:00:00Z","timestamp":1580515200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,2,1]],"date-time":"2020-02-01T00:00:00Z","timestamp":1580515200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61772236"],"award-info":[{"award-number":["61772236"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Zhejiang Key R&D Plan","award":["2019C03133"],"award-info":[{"award-number":["2019C03133"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61822207"],"award-info":[{"award-number":["61822207"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1636219"],"award-info":[{"award-number":["U1636219"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Equipment Pre-Research Joint Fund of Ministry of Education of China","award":["6141A02033327"],"award-info":[{"award-number":["6141A02033327"]}]},{"name":"Outstanding Youth Foundation of Hubei Province","award":["2017CFA047"],"award-info":[{"award-number":["2017CFA047"]}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["2042019kf0210"],"award-info":[{"award-number":["2042019kf0210"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002920","name":"Research Grants Council, University Grants Committee","doi-asserted-by":"publisher","award":["CityU C1008-16G"],"award-info":[{"award-number":["CityU C1008-16G"]}],"id":[{"id":"10.13039\/501100002920","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61572412"],"award-info":[{"award-number":["61572412"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Major Scientific Research Project of Zhejiang Lab","award":["2018FD0ZX01"],"award-info":[{"award-number":["2018FD0ZX01"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. IEEE"],"published-print":{"date-parts":[[2020,2]]},"DOI":"10.1109\/jproc.2019.2948775","type":"journal-article","created":{"date-parts":[[2019,11,5]],"date-time":"2019-11-05T04:16:19Z","timestamp":1572927379000},"page":"357-372","source":"Crossref","is-referenced-by-count":197,"title":["The Security of Autonomous Driving: Threats, Defenses, and Future Directions"],"prefix":"10.1109","volume":"108","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1969-2591","authenticated-orcid":false,"given":"Kui","family":"Ren","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8967-8525","authenticated-orcid":false,"given":"Qian","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0547-315X","authenticated-orcid":false,"given":"Cong","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhan","family":"Qin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8916-6645","authenticated-orcid":false,"given":"Xiaodong","family":"Lin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","first-page":"1","article-title":"Security analysis of a cryptographically-enabled RFID device","author":"bono","year":"2005","journal-title":"Proc 14th USENIX Secur Symp (USENIX Secur )"},{"key":"ref38","year":"1995","journal-title":"The Basics of Microscopy"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2005.1505111"},{"key":"ref32","first-page":"1543","article-title":"Anti-spoofing & authenticated signal architectures for civil navigation systems","author":"scott","year":"2001","journal-title":"Proceedings of the 16th International Technical Meeting of the Satellite Division of the Institute of Navigation ION GPS\/GNSS"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/PLANS.2014.6851385"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1002\/navi.44"},{"key":"ref37","first-page":"389","article-title":"Realization of RF distance bounding","author":"rasmussen","year":"2010","journal-title":"Proc 14th USENIX Secur Symp (USENIX Secur )"},{"key":"ref36","first-page":"344","article-title":"Distance-bounding protocols","author":"brands","year":"1993","journal-title":"Proc Workshop Theory Appl Cryptograph Techn"},{"key":"ref35","first-page":"5101","article-title":"Obstacle detection for self-driving cars using only monocular cameras and wheel odometry","author":"h\u00e4ne","year":"2015","journal-title":"Proc IEEE\/RSJ Int Conf Intell Robots Syst (IROS)"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2006.883940"},{"key":"ref28","first-page":"1233","article-title":"A low-complexity GPS anti-spoofing method using a multi-antenna array","author":"daneshmand","year":"2012","journal-title":"Proc ION GNSS"},{"key":"ref27","first-page":"2776","article-title":"GNSS spoofing detection using two-antenna differential carrier phase","author":"psiaki","year":"2014","journal-title":"Proc Radionavigat Lab Conf"},{"key":"ref29","first-page":"2949","article-title":"GNSS spoofing detection using high-frequency antenna motion and carrier-phase data","author":"psiaki","year":"2013","journal-title":"Proceedings of the ION GNSS Meeting"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TWC.2018.2873731"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2867917"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243777"},{"key":"ref24","first-page":"1","article-title":"An evaluation of the vestigial signal defense for civil GPS anti-spoofing","author":"wesson","year":"2011","journal-title":"Proc Radionavigat Lab Conf"},{"key":"ref23","first-page":"19","article-title":"GPS spoofing countermeasures","volume":"25","author":"warner","year":"2003","journal-title":"Journal of Homeland Security"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2014.2304139"},{"key":"ref26","first-page":"40","article-title":"A multi-antenna defense: Receiver-autonomous GPS spoofing detection","volume":"4","author":"montgomery","year":"2009","journal-title":"Inside GNSS"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/WCICSS.2015.7420322"},{"key":"ref25","first-page":"2937","article-title":"Autonomous spoofing detection and mitigation in a GNSS receiver with an adaptive antenna array","author":"konovaltsev","year":"2013","journal-title":"Proc ION GNSS"},{"key":"ref50","first-page":"929","article-title":"Attacks on the KeeLoq block cipher and authentication systems","author":"bogdanov","year":"2007","journal-title":"Proc 3rd Citeseer Conf RFID Secur"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-85174-5_12"},{"key":"ref59","first-page":"513","article-title":"Hidden voice commands","author":"carlini","year":"2016","journal-title":"Proc 25th USENIX Secur Symp (USENIX Secur )"},{"key":"ref58","doi-asserted-by":"crossref","first-page":"370","DOI":"10.1109\/JSAC.2005.861394","article-title":"Wormhole attacks in wireless networks","volume":"24","author":"hu","year":"2006","journal-title":"IEEE J Sel Areas Commun"},{"key":"ref57","first-page":"87","article-title":"Keep your enemies close: Distance bounding against smartcard relay attacks","volume":"312","author":"drimer","year":"2007","journal-title":"Proc 16th Conf USENIX Secur Symp (USENIX Security)"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2009.06.001"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-29656-7"},{"key":"ref54","author":"mangard","year":"2010","journal-title":"Power Analysis Attacks Revealing the Secrets of Smart Cards"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35371-0_8"},{"key":"ref52","first-page":"929","article-title":"Lock it and still lose it—On the (in)security of automotive remote keyless entry systems","author":"garcia","year":"2016","journal-title":"Proc 25th USENIX Secur Symp (USENIX Secur )"},{"key":"ref40","first-page":"1","article-title":"Relay attacks on passive keyless entry and start systems in modern cars","author":"francillon","year":"2011","journal-title":"Proc Network and Distributed System Security Symp (NDSS)"},{"key":"ref4","article-title":"Can you trust autonomous vehicles: Contactless attacks against sensors of self-driving vehicle","volume":"24","author":"yan","year":"2016","journal-title":"Proceedings of the DEFCON"},{"key":"ref3","year":"2018","journal-title":"Autonomous Vehicle Sales to Surpass 33 Million Annually in 2040 Enabling New Autonomous Mobility in More Than 26 Percent of New Car Sales IHS Markit Says"},{"key":"ref6","first-page":"19","article-title":"A simple demonstration that the global positioning system (GPS) is vulnerable to spoofing","volume":"25","author":"warner","year":"2002","journal-title":"J Security Admin"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1017\/S0373463303002273"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2016.2526658"},{"key":"ref49","article-title":"Drive it like you hacked it: New attacks and tools to wirelessly steal cars","volume":"23","author":"kamkar","year":"2015","journal-title":"Proceedings of the DEFCON"},{"key":"ref7","first-page":"2314","article-title":"Assessing the spoofing threat: Development of a portable GPS civilian spoofer","author":"humphreys","year":"2008","journal-title":"Proc Radionavigat Lab Conf"},{"key":"ref9","first-page":"1527","article-title":"All your GPS are belong to us: Towards stealthy manipulation of road navigation systems","author":"zeng","year":"2018","journal-title":"Proc 7th USENIX Secur Symp (USENIX Secur )"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/EMCEurope.2014.6931095"},{"key":"ref45","year":"2012","journal-title":"Lock ‘Jammers’ Steal Cars in a Click"},{"key":"ref48","year":"2014","journal-title":"Jam Intercept and Replay Attack Against Rolling Code KeyFob Entry Systems Using RTL-SDR"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TEMC.2004.831899"},{"key":"ref42","first-page":"703","article-title":"Dismantling megamos crypto: Wirelessly lockpicking a vehicle immobilizer","author":"verdult","year":"2013","journal-title":"Proc 22th USENIX Secur Symp (USENIX Secur )"},{"key":"ref41","first-page":"237","article-title":"Gone in 360 seconds: Hijacking with Hitag2","author":"verdult","year":"2012","journal-title":"Proc 21st USENIX Secur Symp (USENIX Security)"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2004.838829"},{"key":"ref43","article-title":"Implementation attacks on an immobilizer protocol stack","author":"takahashi","year":"2013","journal-title":"Proc 11th Embedded Secur Cars Conf Eur (ESCAR Eur )"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2007.906878"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2944058"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737422"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2019.1900006"},{"key":"ref76","first-page":"260","article-title":"Adventures in automotive networks and control units","volume":"21","author":"miller","year":"2013","journal-title":"Proceedings of the DEFCON"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978302"},{"key":"ref74","first-page":"1","article-title":"Introduction to the controller area network (CAN)","author":"hpl","year":"2002"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.34"},{"key":"ref78","first-page":"447","article-title":"Comprehensive experimental analyses of automotive attack surfaces","volume":"4","author":"checkoway","year":"2011","journal-title":"Proc 20th USENIX Secur Symp (USENIX Secur )"},{"key":"ref79","first-page":"91","article-title":"Remote exploitation of an unaltered passenger vehicle","author":"miller","year":"2015","journal-title":"Proc Black Hat USA"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134052"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00009"},{"key":"ref61","first-page":"547","article-title":"Inaudible voice commands: The long-range attack and defense","author":"roy","year":"2018","journal-title":"Proc USENIX Symp Netw Syst Design Implem (NSDI)"},{"key":"ref63","year":"1996","journal-title":"An Introduction to Keeloq Code Hopping"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.2019.1800477"},{"key":"ref65","year":"2011","journal-title":"Lock it or Lose it"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/SECURECOMM.2005.56"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-10433-6_9"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/ICICS.2009.5397727"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2012.2189803"},{"key":"ref69","first-page":"49","article-title":"CommanderSong: A systematic approach for practical adversarial voice recognition","author":"yuan","year":"2018","journal-title":"Proc 7th USENIX Secur Symp (USENIX Secur )"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/64.85920"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01258-8_10"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.2200\/S00800ED1V01Y201709SPT022"},{"key":"ref108","article-title":"DARTS: Deceiving autonomous cars with toxic signs","author":"sitawarin","year":"2018","journal-title":"arXiv 1802 06430"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.4271\/2016-01-0068"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00033"},{"key":"ref93","article-title":"CaCAN-centralized authentication system in CAN (controller area network)","author":"kurachi","year":"2014","journal-title":"Proc 10th Int Conf Embedded Secur Cars (ESCAR)"},{"key":"ref106","article-title":"Robust physical-world attacks on deep learning models","author":"eykholt","year":"2017","journal-title":"arXiv 1707 08945"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/VETECS.2012.6240294"},{"key":"ref105","year":"2019","journal-title":"Uber Cleared Over Arizona Pedestrian’s Self-Driving Car Death"},{"key":"ref91","article-title":"Practical attacks on CAN message authentication","author":"weisglass","year":"2017","journal-title":"Proc 4th Int Conf Embedded Secur Cars (ESCAR Asia)"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2019.8715114"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35404-5_15"},{"key":"ref103","year":"2016","journal-title":"Taxonomy and Definitions for Terms Related to On-Road Motor Vehicle Automated Driving Systems"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2018.2810232"},{"key":"ref111","first-page":"591","article-title":"Real-time and spatio-temporal crowd-sourced social network data publishing with differential privacy","volume":"15","author":"wang","year":"2018","journal-title":"IEEE Trans Dependable Secure Comput"},{"key":"ref112","article-title":"The secret sharer: Measuring unintended neural network memorization & extracting secrets","author":"carlini","year":"2018","journal-title":"arXiv 1802 08232"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/543"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2008.4621263"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/ISIAS.2010.5604050"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134640"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2019.2906161"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046719"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382245"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1002\/rob.21513"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1002\/navi.183"},{"key":"ref14","year":"2016","journal-title":"LIDAR and Autonomous Technology"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66787-4_22"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-79228-4_1"},{"key":"ref16","first-page":"2015","article-title":"Remote attacks on automated vehicles sensors: Experiments on camera and LiDAR","volume":"11","author":"petit","year":"2015","journal-title":"Proc Black Hat Europe"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.2197\/ipsjjip.25.220"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1145\/773153.773173"},{"key":"ref17","author":"skolnik","year":"1990","journal-title":"Radar Handbook"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/IECON.2018.8592744"},{"key":"ref18","year":"2018","journal-title":"LiDAR vs RADAR"},{"key":"ref84","first-page":"1","article-title":"Security in automotive bus systems","author":"wolf","year":"2004","journal-title":"Proc 2nd Int Conf Embedded Secur Cars (ESCAR)"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2939713"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2018.2842771"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-88181-0_11"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2001.990529"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1145\/3296957.3173191"},{"key":"ref116","year":"2017","journal-title":"Federated learning Collaborative machine learning without centralized training data"},{"key":"ref80","first-page":"1","article-title":"Free-fall: Hacking Tesla from wireless to CAN bus","author":"nie","year":"2017","journal-title":"Proc Black Hat Briefings"},{"key":"ref115","first-page":"2547","article-title":"Tree-to-tree neural networks for program translation","author":"chen","year":"2018","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23189"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1145\/1873548.1873558"},{"key":"ref121","first-page":"1","article-title":"Intel SGX explained","volume":"2016","author":"costan","year":"2016","journal-title":"IACR Cryptology ePrint"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1145\/3214292.3214301"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2014.2371470"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/2746266.2746276"},{"key":"ref87","first-page":"993","article-title":"A practical wireless attack on the connected car and security protocol for in-vehicle CAN","volume":"16","author":"woo","year":"2015","journal-title":"IEEE Trans Intell Transp Syst"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/VETECF.2008.259"}],"container-title":["Proceedings of the IEEE"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/5\/8967317\/08890622.pdf?arnumber=8890622","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,27]],"date-time":"2022-04-27T13:40:23Z","timestamp":1651066823000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8890622\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,2]]},"references-count":122,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/jproc.2019.2948775","relation":{},"ISSN":["0018-9219","1558-2256"],"issn-type":[{"value":"0018-9219","type":"print"},{"value":"1558-2256","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,2]]}}}