{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T16:13:53Z","timestamp":1780676033263,"version":"3.54.1"},"reference-count":81,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Circuits Syst. II"],"published-print":{"date-parts":[[2024,3]]},"DOI":"10.1109\/tcsii.2023.3334273","type":"journal-article","created":{"date-parts":[[2023,11,22]],"date-time":"2023-11-22T19:41:05Z","timestamp":1700682065000},"page":"1701-1707","source":"Crossref","is-referenced-by-count":12,"title":["Security and Functional Safety for AI in Embedded Automotive System\u2014A Tutorial"],"prefix":"10.1109","volume":"71","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2957-4203","authenticated-orcid":false,"given":"Yi","family":"Wang","sequence":"first","affiliation":[{"name":"Automotive Technology, Software and Central Technologies, Continental AG, Hanover, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jing","family":"Xiao","sequence":"additional","affiliation":[{"name":"Continental Autonomous Mobility Germany GmbH, ENP Tech Office, Continental AG, Hanover, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5768-367X","authenticated-orcid":false,"given":"Zhengzhe","family":"Wei","sequence":"additional","affiliation":[{"name":"School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuanjin","family":"Zheng","sequence":"additional","affiliation":[{"name":"School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9689-1236","authenticated-orcid":false,"given":"Kea-Tiong","family":"Tang","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering, National Taiwan University, Taipei City, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8897-6176","authenticated-orcid":false,"given":"Chip Hong","family":"Chang","sequence":"additional","affiliation":[{"name":"School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Cybersecurity Guidebook for Cyber-Physical Vehicle Systems","year":"2016"},{"key":"ref2","volume-title":"Information Technology\u2014Artificial Intelligence\u2014Artificial Intelligence Concepts and Terminology","year":"2022"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-29485-6"},{"key":"ref4","volume-title":"Road Vehicles\u2014Functional Safety","year":"2018"},{"key":"ref5","volume-title":"Road Vehicles\u2014Safety of the Intended Functionality","year":"2022"},{"key":"ref6","volume-title":"Information Technology\u2014Artificial Intelligence\u2014Overview of Ethical and Societal Concerns","year":"2019"},{"key":"ref7","volume-title":"UN regulation No. 155\u2014Cybersecurity and cybersecurity management system","year":"2021"},{"key":"ref8","volume-title":"Road Vehicles\u2014Cybersecurity Engineering","year":"2021"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.6028\/nist.ai.100-2"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.4271\/epr2023023"},{"key":"ref11","volume-title":"Towards auditable AI systems current status and future directions","author":"Berfhoff","year":"2021"},{"key":"ref12","volume-title":"Machine learning process documentation\u2014DEVOPS vs MLOPS","author":"Kumar","year":"2021"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3233190"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2023.3285015"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3019508"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3295944"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3180828"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2021.3129612"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134077"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241142"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3595292"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2023.3261327"},{"key":"ref25","article-title":"Prediction poisoning: Towards defenses against DNN model stealing attacks","author":"Orekondy","year":"2020","journal-title":"arXiv:1906.10908"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00044"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3128646"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2020.3024780"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3135422"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2023.3289446"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3080522"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/tcsii.2023.3318592"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICAA52185.2022.00020"},{"key":"ref34","article-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","author":"Gu","year":"2019","journal-title":"arXiv:1708.06733"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref36","first-page":"2484","article-title":"Simple black-box adversarial attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Guo"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/635"},{"key":"ref39","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Rep.","author":"Goodfellow"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00015"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00465"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3511893"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.56"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP39728.2021.9414670"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33011028"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr.2018.00175"},{"key":"ref50","article-title":"Spectral signatures in backdoor attacks","author":"Tran","year":"2018","journal-title":"arXiv:1811.00636"},{"key":"ref51","article-title":"Robust anomaly detection and backdoor attack detection via differential privacy","author":"Du","year":"2019","journal-title":"arXiv:1911.07116"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3094824"},{"key":"ref53","first-page":"1","article-title":"Detecting backdoor attacks on deep neural networks by activation clustering","volume-title":"Proc. 33rd AAAI Conf. Artif. Intell. Workshop Artif. Intell. Safety (AAAI)","author":"Chen"},{"key":"ref54","article-title":"Adversarial reprogramming of neural networks","author":"Elsayed","year":"2018","journal-title":"arXiv:1806.11146"},{"key":"ref55","article-title":"Failure modes in machine learning systems","author":"Kumar","year":"2019","journal-title":"arXiv:1911.11034"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102352"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-55583-2_25"},{"key":"ref58","article-title":"Strategy to increase the safety of a DNN-based perception for HAD systems","author":"S\u00e4mann","year":"2020","journal-title":"arXiv:2002.08935"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-55583-2_29"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-01233-4_12"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/ATS.2018.00024"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/icasi49664.2020.9426247"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/ASYNC.2019.00025"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/GCCE.2015.7398569"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/TCSII.2018.2858798"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1587\/transfun.E101.A.2320"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/tvlsi.2018.2797019"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/tcad.2015.2511144"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2016.2642198"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2020.3031290"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2019.2963616"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/jssc.2022.3162602"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/tvlsi.2017.2734819"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.23919\/vlsicircuits52068.2021.9492347"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/jssc.2023.3297411"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr52729.2023.01287"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/isscc42613.2021.9365756"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/ROBOT.2007.364024"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/IROS.2015.7353389"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/a-sscc53895.2021.9634793"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/jssc.2020.3028298"}],"container-title":["IEEE Transactions on Circuits and Systems II: Express Briefs"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8920\/10460332\/10325613.pdf?arnumber=10325613","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,4,12]],"date-time":"2024-04-12T17:35:45Z","timestamp":1712943345000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10325613\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3]]},"references-count":81,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tcsii.2023.3334273","relation":{},"ISSN":["1549-7747","1558-3791"],"issn-type":[{"value":"1549-7747","type":"print"},{"value":"1558-3791","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,3]]}}}