{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T07:02:34Z","timestamp":1782975754337,"version":"3.54.5"},"reference-count":70,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00183","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"4618-4635","source":"Crossref","is-referenced-by-count":0,"title":["Weaponizing Reflectivity for Pointcloud Deception with Forged Invisible Geometries"],"prefix":"10.1109","author":[{"given":"Hengwei","family":"Chen","sequence":"first","affiliation":[{"name":"Southern University of Science and Technology"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Menglan","family":"Hu","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tianyue","family":"Zheng","sequence":"additional","affiliation":[{"name":"Southern University of Science and Technology"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.isprsjprs.2022.12.021"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.52202\/079017-0145"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.01415"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00571"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2024.3360259"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2023.3321309"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.compag.2023.108146"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.01868"},{"key":"ref9","volume-title":"Drive Pilot","year":"2024"},{"key":"ref10","volume-title":"Humanoid Robot: Atlas","year":"2024"},{"key":"ref11","volume-title":"Spatial mapping","year":"2023"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3435937"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2020.3048074"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevResearch.4.023178"},{"key":"ref15","first-page":"1061","article-title":"Influences of Different Materials on the Measurements of A Terrestrial Laser Scanner (TLS)","volume-title":"Proc. of the 21st ISPRS Congress","volume":"37","author":"Voegtle","year":"2008"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01204"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00935"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2019.2918437"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2023.3286611"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01373"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00076"},{"key":"ref22","first-page":"2993","article-title":"You Can\u2019t See Me: Physical Removal Attacks on Lidar-Based Autonomous Vehicles Driving Frameworks","volume-title":"Proc. of the 32nd USENIX Security","author":"Cao","year":"2023"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66787-4_22"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2005.848022"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TCSI.2020.3022714"},{"key":"ref26","volume-title":"ToF Automotive LiDAR Market Size, Share and Growth Analysis 2030","author":"Reports","year":"2025"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1002\/lpor.202100511"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2024.3484152"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TIM.2022.3181272"},{"key":"ref30","article-title":"Physical Adversarial Examples for Object Detectors","volume-title":"Proc. of the 12th USENIX Workshop","author":"Song","year":"2018"},{"key":"ref31","first-page":"284","article-title":"Synthesizing Robust Adversarial Examples","volume-title":"Proc. of the 35th PMLR ICML","author":"Athalye","year":"2018"},{"key":"ref32","volume-title":"CloudCompare","author":"Project","year":"2024"},{"key":"ref33","volume-title":"Supervisely Computer Vision platform","year":"2023"},{"key":"ref34","article-title":"PointNet++: Deep Hierarchical Feature Learning on Point Sets in a Metric Space","volume-title":"Proc. of the 31st NeurIPS","volume":"30","author":"Qi","year":"2017"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3326362"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00985"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01298"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00086"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01161"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01054"},{"key":"ref41","volume-title":"Pointnet\/Pointnet++ Pytorch","author":"Yan","year":"2019"},{"key":"ref42","volume-title":"DGCNN Pytorch","year":"2022"},{"key":"ref43","volume-title":"PointConv Pytorch","year":"2020"},{"key":"ref44","volume-title":"OpenPCDet: An Open-source Toolbox for 3D Object Detection from Point Clouds","author":"Team","year":"2020"},{"key":"ref45","first-page":"321","article-title":"Why Do Adversarial Attacks Transfer? Explaining Transferability of Evasion and Poisoning Attacks","volume-title":"Proc. of the 28th USENIX Security","author":"Demontis","year":"2019"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICRA48506.2021.9561877"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00044"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3340889"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00205"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2024.3372456"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690343"},{"key":"ref53","first-page":"3745","article-title":"The Space of Adversarial Strategies","volume-title":"Proc. of the 32nd USENIX Security","author":"Sheatsley","year":"2023"},{"key":"ref54","first-page":"1327","article-title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","volume-title":"Proc. of the 29th USENIX Security","author":"Suya","year":"2020"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3264699"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.52202\/068431-0629"},{"key":"ref58","first-page":"2957","article-title":"Discovering Adversarial Driving Maneuvers against Autonomous Vehicles","volume-title":"Proc. of the 32nd USENIX Security","author":"Song","year":"2023"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00168"},{"key":"ref60","first-page":"20052","article-title":"Fast Minimum-Norm Adversarial Attacks Through Adaptive Norm Constraints","volume-title":"Proc. of the 35th NeurIPS","volume":"34","author":"Pintor","year":"2021"},{"issue":"3","key":"ref61","first-page":"4","article-title":"Robust Physical-World Attacks on Machine Learning Models","volume":"2","author":"Evtimov","year":"2017","journal-title":"arXiv preprint"},{"key":"ref62","first-page":"877","article-title":"Towards Robust LiDAR-Based Perception in Autonomous Driving: General Black-Box Adversarial Sensor Attack and Countermeasures","volume-title":"Proc. of the 29th USENIX Security","author":"Sun","year":"2020"},{"key":"ref63","first-page":"697","article-title":"Hard-Label Black-Box Universal Adversarial Patch Attack","volume-title":"Proc. of the 32nd USENIX Security","author":"Tao","year":"2023"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/3317611"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.241053"},{"key":"ref66","article-title":"Why Don\u2019t You Clean Your Glasses? Perception Attacks with Dynamic Optical Perturbations","author":"Han","year":"2023","journal-title":"arXiv preprint"},{"key":"ref67","first-page":"7321","article-title":"$\\pi$-Jack: Physical-World Adversarial Attack on Monocular Depth Estimation with Perspective Hijacking","volume-title":"Proc. of the 33rd USENIX Security","author":"Zheng","year":"2024"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW67362.2025.00341"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/SPW54247.2022.9833890"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00498"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573445.pdf?arnumber=11573445","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:31:53Z","timestamp":1782970313000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573445\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":70,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00183","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}