{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T22:11:22Z","timestamp":1784239882226,"version":"3.55.0"},"reference-count":79,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"NSF","doi-asserted-by":"publisher","award":["CNS-2321532"],"award-info":[{"award-number":["CNS-2321532"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00129","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"1539-1557","source":"Crossref","is-referenced-by-count":0,"title":["Banshee: Target Switch Attacks on Gimbal-Stabilized Visual Tracking Systems via Acoustic Injection"],"prefix":"10.1109","author":[{"given":"Jiarui","family":"Li","sequence":"first","affiliation":[{"name":"University of Michigan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joseph","family":"Brewington","sequence":"additional","affiliation":[{"name":"University of Michigan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qingzhao","family":"Zhang","sequence":"additional","affiliation":[{"name":"The University of Arizona"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Z. Morley","family":"Mao","sequence":"additional","affiliation":[{"name":"University of Michigan"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ICRA48506.2021.9561948"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/IROS.2017.8205986"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/LRA.2024.3366013"},{"key":"ref4","volume-title":"Best drones that follow you automatically (2024)","year":"2024"},{"key":"ref5","volume-title":"The best follow me drone in 2022","year":"2022"},{"key":"ref6","volume-title":"Autel evo ii drone dynamic track mode full review","year":"2020"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.ipm.2022.103149"},{"key":"ref8","author":"Li","journal-title":"Wip: Hijacking attacks on uav follow-me systems in realistic scenarios"},{"key":"ref9","author":"Hibberd","year":"2025","journal-title":"Using drones for peeping, burglaries on rise: \u201cit\u2019s gotten dramatically worse\u201d"},{"key":"ref10","author":"Dolan","year":"2025","journal-title":"Like moths to a false flame: Lethality and protection through deception operations"},{"key":"ref11","article-title":"Controlling {UAVs} with sensor input spoofing attacks","volume-title":"10th USENIX workshop on offensive technologies (WOOT 16)","author":"Davidson"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-00369-6_11"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.ymssp.2019.106548"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.42"},{"key":"ref15","first-page":"1545","article-title":"Injected and delivered: Fabricating implicit control over actuation systems by spoofing inertial sensors","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Tu"},{"key":"ref16","first-page":"881","article-title":"Rocking drones with intentional sound noise on gyroscopic sensors","volume-title":"24th USENIX security symposium (USENIX Security 15)","author":"Son"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3560905.3568532"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.14722\/vehiclesec.2024.23060"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00091"},{"key":"ref20","article-title":"Fooling detection alone is not enough: Adversarial attack against multiple object tracking","volume-title":"International Conference on Learning Representations (ICLR\u201920)","author":"Jia"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559390"},{"key":"ref22","article-title":"Controlloc: Physical-world hijacking attack on visual perception in autonomous driving","author":"Ma","year":"2024","journal-title":"arXiv preprint"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC63791.2024.00080"},{"key":"ref24","volume-title":"Flytrap: Physical distance-pulling attack towards camera-based autonomous target tracking systems","author":"Xie","year":"2025"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICRA46639.2022.9811688"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TRO.2023.3335670"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00867"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01194"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TIE.2021.3088366"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/WACV51458.2022.00196"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01438"},{"key":"ref32","article-title":"Learning spatiotemporal transformer for visual tracking","volume-title":"CoRR","volume":"abs\/2103.17154","author":"Yan","year":"2021"},{"key":"ref33","article-title":"ATOM: accurate tracking by overlap maximization","volume-title":"CoRR","volume":"abs\/1811.07628","author":"Danelljan","year":"2018"},{"key":"ref34","article-title":"Learning discriminative model prediction for tracking","volume-title":"CoRR","volume":"abs\/1904.07220","author":"Bhat","year":"2019"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW54120.2021.00315"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24112"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14722\/vehiclesec.2023.23063"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2023.3317054"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00492"},{"key":"ref40","first-page":"661","article-title":"TPatch: A triggered physical adversarial patch","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Zhu"},{"key":"ref41","volume-title":"Long-range acoustic device","year":"2025"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00832"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00707"},{"key":"ref44","volume-title":"Storm32bgc gimbal controller","year":"2015"},{"key":"ref45","volume-title":"Simplebgc gimbal controller","year":"2025"},{"key":"ref46","volume-title":"Mpu-6000 and mpu-6050 product specification","year":"2025"},{"key":"ref47","volume-title":"L3g4200d product specification","year":"2025"},{"key":"ref48","volume-title":"Bmi160 data sheet","year":"2025"},{"key":"ref49","volume-title":"Lsm6ds3tr-c data sheet","year":"2025"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/IC4.2015.7375580"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2016.7533003"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2014.2345390"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00935"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1115\/1.3662552"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/IROS.2004.1389727"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00441"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01240-3_7"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-023-10558-5"},{"key":"ref59","volume-title":"Quick start guide: Nvidia jetson with ultralytics yolo11","year":"2025"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i7.28493"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.789"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1405.0312"},{"key":"ref64","volume-title":"Px4 autopilot","year":"2025"},{"key":"ref65","article-title":"The OpenCV Library","author":"Bradski","year":"2000","journal-title":"Dr. Dobb\u2019s Journal of Software Tools"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0010047"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3373646"},{"key":"ref68","article-title":"Savior: securing autonomous vehicles with robust physical invariants","volume-title":"Proceedings of the 29th USENIX Conference on Security Symposium","author":"Quinonez"},{"key":"ref69","volume-title":"Vimu: Effective physics-based realtime detection and recovery against stealthy attacks on uavs","author":"Wang","year":"2025"},{"key":"ref70","volume-title":"Mars: Defending unmanned aerial vehicles from attacks on inertial sensors with model-based anomaly detection and recovery","author":"Meng","year":"2025"},{"issue":"7","key":"ref71","doi-asserted-by":"crossref","DOI":"10.3390\/s25072208","article-title":"Gyro-mag: Attack-resilient system based on sensor estimation","volume":"25","author":"Lee","year":"2025","journal-title":"Sensors"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-51630-6_4"},{"issue":"20","key":"ref73","doi-asserted-by":"crossref","DOI":"10.3390\/s21206769","article-title":"Gnss spoofing detection based on coupled visual\/inertial\/gnss navigation system","volume":"21","author":"Gu","year":"2021","journal-title":"Sensors"},{"issue":"1","key":"ref74","article-title":"Spoofing detection of civilian uavs using visual odometry","volume":"9","author":"Varshosaz","year":"2020","journal-title":"ISPRS International Journal of GeoInformation"},{"key":"ref75","doi-asserted-by":"crossref","DOI":"10.1109\/ICCV.2019.00249","volume-title":"Attacking optical flow","author":"Ranjan","year":"2019"},{"key":"ref76","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-031-20047-2_11","volume-title":"A perturbation-constrained adversarial attack for evaluating the robustness of optical flow","author":"Schmalfuss","year":"2022"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24112"},{"key":"ref78","first-page":"3503","article-title":"An experimental study of {GPS} spoofing and takeover attacks on {UAVs}","volume-title":"31st USENIX security symposium (USENIX security 22)","author":"Sathaye"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.20"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573942.pdf?arnumber=11573942","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T21:47:45Z","timestamp":1784238465000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573942\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":79,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00129","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}