{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,20]],"date-time":"2026-05-20T08:37:42Z","timestamp":1779266262833,"version":"3.51.4"},"reference-count":45,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,3,6]],"date-time":"2026-03-06T00:00:00Z","timestamp":1772755200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,6]],"date-time":"2026-03-06T00:00:00Z","timestamp":1772755200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,3,6]]},"DOI":"10.1109\/wacv61042.2026.00170","type":"proceedings-article","created":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T19:59:32Z","timestamp":1778011172000},"page":"1695-1704","source":"Crossref","is-referenced-by-count":1,"title":["AD\n                    <sup>2<\/sup>\n                    : Analysis and Detection of Adversarial Threats in Visual Perception for End-to-End Autonomous Driving Systems"],"prefix":"10.1109","author":[{"given":"Ishan","family":"Sahu","sequence":"first","affiliation":[{"name":"Indian Institute of Technology Kharagpur"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Somnath","family":"Hazra","sequence":"additional","affiliation":[{"name":"Indian Institute of Technology Kharagpur"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Somak","family":"Aditya","sequence":"additional","affiliation":[{"name":"Indian Institute of Technology Kharagpur"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Soumyajit","family":"Dey","sequence":"additional","affiliation":[{"name":"Indian Institute of Technology Kharagpur"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3691625"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref3","article-title":"Steal now and attack later: Evaluating robustness of object detection against black-box adversarial attacks","author":"Chen","year":"2024"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3435937"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2024.3484152"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3200245"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/OJVT.2023.3335180"},{"key":"ref8","first-page":"1","article-title":"CARLA: An open urban driving simulator","volume-title":"Proceedings of the 1st annual conference on robot learning","author":"Dosovitskiy"},{"key":"ref9","article-title":"An image is worth 16x16 words: Transformers for image recognition at scale","volume-title":"International Conference on Learning Representations","author":"Dosovitskiy"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.52202\/079017-4268"},{"key":"ref11","article-title":"Detecting adversarial samples from artifacts","author":"Feinman","year":"2017"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-01233-4"},{"key":"ref13","article-title":"Explaining and Harnessing Adversarial Examples","volume-title":"3rd International Conference on Learning Representations, ICLR 2015, San Diego, CA, USA, May 7-9, 2015, Conference Track Proceedings","author":"Goodfellow"},{"key":"ref14","article-title":"Navigating threats: a survey of physical adversarial attacks on LiDAR perception systems in autonomous vehicles","author":"Guesmi","year":"2024"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00091"},{"key":"ref17","first-page":"7249","article-title":"GlitchHiker: Uncovering vulnerabilities of image signal transmission with IEMI","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Jiang"},{"key":"ref18","article-title":"A survey on adversarial robustness of lidar-based machine learning perception in autonomous vehicles","author":"Kim","year":"2024"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51701.2025.02535"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i26.34958"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01455"},{"key":"ref22","article-title":"Towards deep learning models resistant to adversarial attacks","volume-title":"6th international conference on learning representations, ICLR 2018, vancouver, BC, canada, april 30 - may 3, 2018, conference track proceedings","author":"Madry","year":"2018"},{"key":"ref23","first-page":"6929","article-title":"That person moves like a car: Misclassification attack detection for autonomous systems using spatiotemporal consistency","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Man"},{"key":"ref24","article-title":"On detecting adversarial perturbations","volume-title":"International conference on learning representations","author":"Metzen"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2025.3561225"},{"key":"ref26","first-page":"442","volume-title":"Automated driving systems 2.0: A vision for safety, national highway traffic safety administration and others","volume":"812","year":"2017"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3473611"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2012.11.011"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/IV64158.2025.11097424"},{"key":"ref30","article-title":"WIP: On robustness of lane detection models to physical-world adversarial attacks in autonomous driving","volume-title":"NDSS 2022 Automotive and Autonomous Vehicle Security (AutoSec) Workshop","author":"Sato"},{"key":"ref31","first-page":"726","article-title":"Safety-enhanced autonomous driving using interpretable sensor fusion transformer","volume-title":"Proceedings of the 6th conference on robot learning","author":"Shao"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01319"},{"key":"ref33","article-title":"Darts: Deceiving autonomous cars with toxic signs","author":"Sitawarin","year":"2018"},{"key":"ref34","article-title":"Intriguing properties of neural networks","volume-title":"2nd international conference on learning representations, ICLR 2014, banff, AB, canada, april 14-16, 2014, conference track proceedings","author":"Szegedy"},{"key":"ref35","first-page":"21692","article-title":"Detecting adversarial examples is (Nearly) as hard as classifying them","volume-title":"Proceedings of the 39th international conference on machine learning","author":"Tramer"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.6028\/nist.ai.100-2e2023"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3433612"},{"key":"ref38","first-page":"8349","article-title":"Attack end-to-end autonomous driving through module-wise noise","volume-title":"Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (CVPR) workshops","author":"Wang"},{"key":"ref39","article-title":"Autonomous Vehicles: Timeline, and Roadmap Ahead, white paper, world economic forum","year":"2025"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/IV55152.2023.10186386"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2024.109890"},{"key":"ref42","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2018.23198","article-title":"Feature squeezing: Detecting adversarial examples in deep neural networks","volume-title":"25th annual network and distributed system security symposium, NDSS 2018, san diego, california, USA, february 18-21, 2018","author":"Xu"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670290"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3099164"},{"key":"ref45","first-page":"661","article-title":"TPatch: A triggered physical adversarial patch","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Zhu"}],"event":{"name":"2026 IEEE\/CVF Winter Conference on Applications of Computer Vision (WACV)","location":"Tucson, AZ, USA","start":{"date-parts":[[2026,3,6]]},"end":{"date-parts":[[2026,3,10]]}},"container-title":["2026 IEEE\/CVF Winter Conference on Applications of Computer Vision (WACV)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11491838\/11491925\/11492155.pdf?arnumber=11492155","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T05:54:49Z","timestamp":1778046889000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11492155\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,6]]},"references-count":45,"URL":"https:\/\/doi.org\/10.1109\/wacv61042.2026.00170","relation":{},"subject":[],"published":{"date-parts":[[2026,3,6]]}}}