{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,8]],"date-time":"2026-09-08T15:00:18Z","timestamp":1788879618131,"version":"build-2803163510"},"reference-count":35,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"8","license":[{"start":{"date-parts":[[2022,8,1]],"date-time":"2022-08-01T00:00:00Z","timestamp":1659312000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,8,1]],"date-time":"2022-08-01T00:00:00Z","timestamp":1659312000000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,8,1]],"date-time":"2022-08-01T00:00:00Z","timestamp":1659312000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,8,1]],"date-time":"2022-08-01T00:00:00Z","timestamp":1659312000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"NSF","doi-asserted-by":"publisher","award":["1801495"],"award-info":[{"award-number":["1801495"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000183","name":"Army Research Office","doi-asserted-by":"publisher","award":["W911NF-21-1-0155"],"award-info":[{"award-number":["W911NF-21-1-0155"]}],"id":[{"id":"10.13039\/100000183","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Intell. Transport. Syst."],"published-print":{"date-parts":[[2022,8]]},"DOI":"10.1109\/tits.2021.3103441","type":"journal-article","created":{"date-parts":[[2021,8,16]],"date-time":"2021-08-16T20:21:55Z","timestamp":1629145315000},"page":"11386-11396","source":"Crossref","is-referenced-by-count":20,"title":["Overriding Autonomous Driving Systems Using Adaptive Adversarial Billboards"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8746-1376","authenticated-orcid":false,"given":"Naman","family":"Patel","sequence":"first","affiliation":[{"name":"Department of Electrical and Computer Engineering, Control\/Robotics Research Laboratory (CRRL), NYU Tandon School of Engineering, Brooklyn, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8264-7972","authenticated-orcid":false,"given":"Prashanth","family":"Krishnamurthy","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Control\/Robotics Research Laboratory (CRRL), NYU Tandon School of Engineering, Brooklyn, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6158-9512","authenticated-orcid":false,"given":"Siddharth","family":"Garg","sequence":"additional","affiliation":[{"name":"Center for Cyber-Security (CCS), NYU Tandon School of Engineering, Brooklyn, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8418-004X","authenticated-orcid":false,"given":"Farshad","family":"Khorrami","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Control\/Robotics Research Laboratory (CRRL), NYU Tandon School of Engineering, Brooklyn, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref2","first-page":"284","article-title":"Synthesizing robust adversarial examples","volume-title":"Proc. 35th Int. Conf. Mach. Learn. (ICML)","author":"Athalye"},{"key":"ref3","article-title":"Physical adversarial examples for object detectors","volume-title":"Proc. USENIX Workshop Offensive Technol.","author":"Song"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2018.8489741"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00249"},{"key":"ref6","volume-title":"Self-driving Uber kills Arizona woman in first fatal crash involving pedestrian","volume":"19","author":"Levin","year":"2018"},{"key":"ref7","volume-title":"Self-driving Tesla was involved in fatal crash, US says","volume":"302016","author":"Vlasic","year":"2016"},{"key":"ref8","article-title":"End to end learning for self-driving cars","author":"Bojarski","year":"2016","journal-title":"arXiv:1604.07316"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/IROS.2017.8205958"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICRA.2018.8460487"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.robot.2019.03.001"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/LRA.2019.2930475"},{"key":"ref13","first-page":"1","article-title":"CARLA: An open urban driving simulator","volume-title":"Proc. 1st Conf. Robot Learn. (CoRL)","author":"Dosovitskiy"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/IROS40897.2019.8968267"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2013.6638947"},{"key":"ref16","volume-title":"ImageNet Large Scale Visual Recognition Competition","year":"2012"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1049\/iet-its.2019.0783"},{"key":"ref18","first-page":"739","article-title":"Off-road obstacle avoidance through end-to-end learning","volume-title":"Proc. Neural Inf. Process. Syst.","author":"LeCun"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/IROS.2018.8593375"},{"key":"ref20","first-page":"352","article-title":"Semantic segmentation guided SLAM using vision and LiDAR","volume-title":"Proc. 50th Int. Symp. Robot.","author":"Patel"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2019.2960872"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2020.3031962"},{"key":"ref23","article-title":"Intriguing properties of neural networks","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Szegedy"},{"key":"ref24","article-title":"Certified defenses against adversarial examples","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Raghunathan"},{"key":"ref25","first-page":"125","article-title":"Adversarial examples are not bugs, they are features","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","author":"Ilyas"},{"key":"ref26","article-title":"Delving into transferable adversarial examples and black-box attacks","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Liu"},{"key":"ref27","first-page":"359","article-title":"Lack of robustness of LiDAR-based deep learning systems to small adversarial perturbations","volume-title":"Proc. 50th Int. Symp. Robot.","author":"Patel"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.sysarc.2020.101766"},{"key":"ref29","first-page":"347","article-title":"Deepbillboard: Systematic physical-world testing of autonomous driving systems","volume-title":"Proc. Int. Conf. Softw. Eng.","author":"Zhou"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.4271\/R-114"},{"key":"ref31","first-page":"2017","article-title":"Spatial transformer networks","volume-title":"Proc. NIPS","author":"Jaderberg"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/WACV45572.2020.9093363"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1002\/rob.20147"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ACC.2007.4282788"}],"container-title":["IEEE Transactions on Intelligent Transportation Systems"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/6979\/9853713\/9514525-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6979\/9853713\/09514525.pdf?arnumber=9514525","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,11]],"date-time":"2024-01-11T22:54:31Z","timestamp":1705013671000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9514525\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,8]]},"references-count":35,"journal-issue":{"issue":"8"},"URL":"https:\/\/doi.org\/10.1109\/tits.2021.3103441","relation":{},"ISSN":["1524-9050","1558-0016"],"issn-type":[{"value":"1524-9050","type":"print"},{"value":"1558-0016","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,8]]}}}