{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,14]],"date-time":"2026-04-14T15:52:44Z","timestamp":1776181964037,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":39,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,11,2]],"date-time":"2020-11-02T00:00:00Z","timestamp":1604275200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,11,2]]},"DOI":"10.1145\/3400302.3415758","type":"proceedings-article","created":{"date-parts":[[2020,12,18]],"date-time":"2020-12-18T01:16:38Z","timestamp":1608254198000},"page":"1-7","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":16,"title":["Counteracting adversarial attacks in autonomous driving"],"prefix":"10.1145","author":[{"given":"Qi","family":"Sun","sequence":"first","affiliation":[{"name":"Chinese University of Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Arjun Ashok","family":"Rao","sequence":"additional","affiliation":[{"name":"Chinese University of Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xufeng","family":"Yao","sequence":"additional","affiliation":[{"name":"Chinese University of Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bei","family":"Yu","sequence":"additional","affiliation":[{"name":"Chinese University of Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shiyan","family":"Hu","sequence":"additional","affiliation":[{"name":"University of Southampton"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,12,17]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2019.2892405"},{"key":"e_1_3_2_1_2_1","first-page":"91","volume-title":"Faster r-cnn: Towards real-time object detection with region proposal networks,\" in Advances in neural information processing systems","author":"Ren S.","year":"2015"},{"key":"e_1_3_2_1_3_1","volume-title":"3d object proposals using stereo imagery for accurate object class detection,\" IEEE transactions on pattern analysis and machine intelligence","author":"Chen X."},{"key":"e_1_3_2_1_4_1","first-page":"646","volume-title":"Qin et al., \"Stereo vision-based semantic 3d object and ego-motion tracking for autonomous driving,\" in Proceedings of the European Conference on Computer Vision (ECCV)","author":"Li P.","year":"2018"},{"key":"e_1_3_2_1_5_1","first-page":"7644","volume-title":"Stereo r-cnn based 3d object detection for autonomous driving,\" in IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Li P.","year":"2019"},{"key":"e_1_3_2_1_6_1","first-page":"536","article-title":"Dsgn: Deep stereo geometry network for 3d object detection","author":"Chen Y.","year":"2020","journal-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition"},{"key":"e_1_3_2_1_7_1","first-page":"5099","volume-title":"Pointnet++: Deep hierarchical feature learning on point sets in a metric space,\" in Advances in neural information processing systems","author":"Qi C. R.","year":"2017"},{"key":"e_1_3_2_1_8_1","first-page":"1907","volume-title":"Multi-view 3d object detection network for autonomous driving,\" in IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Chen X.","year":"2017"},{"key":"e_1_3_2_1_9_1","first-page":"3569","volume-title":"Fast and furious: Real time end-to-end 3d detection, tracking and motion forecasting with a single convolutional net,\" in IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Luo W.","year":"2018"},{"key":"e_1_3_2_1_10_1","volume-title":"June","author":"Shi S.","year":"2019"},{"key":"e_1_3_2_1_11_1","volume-title":"Intriguing properties of neural networks,\" International Conference on Learning Representations (ICLR)","author":"Szegedy C.","year":"2014"},{"key":"e_1_3_2_1_12_1","volume-title":"Explaining and harnessing adversarial examples,\" International Conference on Learning Representations (ICLR)","author":"Goodfellow I. J.","year":"2015"},{"key":"e_1_3_2_1_13_1","first-page":"2574","article-title":"Deepfool: a simple and accurate method to fool deep neural networks","author":"Moosavi-Dezfooli S.-M.","year":"2016","journal-title":"Proceedings of the IEEE conference on computer vision and pattern recognition"},{"key":"e_1_3_2_1_14_1","volume-title":"Attacks and defenses,\" arXiv preprint arXiv:1705.07204","author":"Tram\u00e8r F.","year":"2017"},{"key":"e_1_3_2_1_15_1","first-page":"1369","volume-title":"Adversarial examples for semantic segmentation and object detection,\" in IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Xie C.","year":"2017"},{"key":"e_1_3_2_1_16_1","volume-title":"Adversarial examples in the physical world,\" arXiv preprint arXiv:1607.02533","author":"Kurakin A.","year":"2016"},{"key":"e_1_3_2_1_17_1","volume-title":"Towards deep learning models resistant to adversarial attacks,\" International Conference on Learning Representations (ICLR)","author":"Madry A.","year":"2018"},{"key":"e_1_3_2_1_18_1","volume-title":"Lyu et al., \"Robust adversarial perturbation on deep proposal-based models,\" British Machine Vision Conference (BMVC)","author":"Li Y.","year":"2018"},{"key":"e_1_3_2_1_19_1","volume-title":"Exploring the vulnerability of single shot module in object detectors via imperceptible background patches,\" in British Machine Vision Conference (BMVC)","author":"Li Y.","year":"2019"},{"key":"e_1_3_2_1_20_1","first-page":"52","volume-title":"Robust physical adversarial attack on faster r-cnn object detector,\" in Joint European Conference on Machine Learning and Knowledge Discovery in Databases","author":"Chen S.-T.","year":"2018"},{"key":"e_1_3_2_1_21_1","first-page":"895","article-title":"Robust superpixel-guided attentional adversarial attack","author":"Dong X.","year":"2020","journal-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition"},{"key":"e_1_3_2_1_22_1","first-page":"1625","volume-title":"Robust physical-world attacks on deep learning visual classification,\" in IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Eykholt K.","year":"2018"},{"key":"e_1_3_2_1_23_1","volume-title":"Adversarial t-shirt! evading person detectors in a physical world,\" arXiv","author":"Xu K.","year":"1910"},{"key":"e_1_3_2_1_24_1","volume-title":"Making an invisibility cloak: Real world adversarial attacks on object detectors,\" European Conference on Computer Vision (ECCV)","author":"Wu Z.","year":"2020"},{"key":"e_1_3_2_1_25_1","first-page":"284","volume-title":"Synthesizing robust adversarial examples,\" in International conference on machine learning","author":"Athalye A.","year":"2018"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"e_1_3_2_1_27_1","volume-title":"Mitigating adversarial effects through randomization,\" International Conference on Learning Representations (ICLR)","author":"Xie C.","year":"2018"},{"key":"e_1_3_2_1_28_1","volume-title":"Keeping the bad guys out: Protecting and vaccinating deep learning with jpeg compression,\" arXiv preprint arXiv:1705.02900","author":"Das N.","year":"2017"},{"key":"e_1_3_2_1_29_1","volume-title":"Oct","author":"Lu J.","year":"2017"},{"key":"e_1_3_2_1_30_1","first-page":"2672","volume-title":"Generative adversarial nets,\" in Advances in neural information processing systems","author":"Goodfellow I.","year":"2014"},{"key":"e_1_3_2_1_31_1","first-page":"1222","article-title":"Perceptual generative adversarial networks for small object detection","author":"Li J.","year":"2017","journal-title":"Proceedings of the IEEE conference on computer vision and pattern recognition"},{"key":"e_1_3_2_1_32_1","first-page":"6398","article-title":"Circle loss: A unified perspective of pair similarity optimization","author":"Sun Y.","year":"2020","journal-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition"},{"issue":"3","key":"e_1_3_2_1_33_1","first-page":"7","article-title":"Large-margin softmax loss for convolutional neural networks","volume":"2","author":"Liu W.","year":"2016","journal-title":"ICML"},{"key":"e_1_3_2_1_34_1","first-page":"847","article-title":"Adversarial robustness through local linearization","author":"Qin C.","year":"2019","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"crossref","unstructured":"J. Xu Y. Li Y. Bai Y. Jiang and S.-T. Xia \"Adversarial defense via local flatness regularization \" arXiv preprint arXiv:1910.12165 2019.  J. Xu Y. Li Y. Bai Y. Jiang and S.-T. Xia \"Adversarial defense via local flatness regularization \" arXiv preprint arXiv:1910.12165 2019.","DOI":"10.1109\/ICIP40778.2020.9191346"},{"key":"e_1_3_2_1_36_1","first-page":"676","article-title":"Tangent-normal adversarial regularization for semi-supervised learning","author":"Yu B.","year":"2019","journal-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2018.2870962"},{"key":"e_1_3_2_1_38_1","first-page":"3354","volume-title":"IEEE","author":"Geiger A.","year":"2012"},{"key":"e_1_3_2_1_39_1","volume-title":"Numerical Analysis, ser. Graduate Texts in Mathematics","author":"Kress R.","year":"1998"}],"event":{"name":"ICCAD '20: IEEE\/ACM International Conference on Computer-Aided Design","location":"Virtual Event USA","acronym":"ICCAD '20","sponsor":["SIGDA ACM Special Interest Group on Design Automation","IEEE CAS","IEEE CEDA","IEEE CS"]},"container-title":["Proceedings of the 39th International Conference on Computer-Aided Design"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3400302.3415758","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3400302.3415758","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:38:42Z","timestamp":1750199922000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3400302.3415758"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,11,2]]},"references-count":39,"alternative-id":["10.1145\/3400302.3415758","10.1145\/3400302"],"URL":"https:\/\/doi.org\/10.1145\/3400302.3415758","relation":{},"subject":[],"published":{"date-parts":[[2020,11,2]]},"assertion":[{"value":"2020-12-17","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}