{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T01:44:33Z","timestamp":1787017473782,"version":"build-2736575974"},"publisher-location":"New York, NY, USA","reference-count":58,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,12,6]],"date-time":"2021-12-06T00:00:00Z","timestamp":1638748800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,12,6]]},"DOI":"10.1145\/3485832.3488016","type":"proceedings-article","created":{"date-parts":[[2021,12,6]],"date-time":"2021-12-06T13:42:32Z","timestamp":1638798152000},"page":"399-413","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":27,"title":["They See Me Rollin\u2019: Inherent Vulnerability of the Rolling Shutter in CMOS Image Sensors"],"prefix":"10.1145","author":[{"given":"Sebastian","family":"K\u00f6hler","sequence":"first","affiliation":[{"name":"University of Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Giulio","family":"Lovisotto","sequence":"additional","affiliation":[{"name":"University of Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Simon","family":"Birnbach","sequence":"additional","affiliation":[{"name":"University of Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Richard","family":"Baker","sequence":"additional","affiliation":[{"name":"University of Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ivan","family":"Martinovic","sequence":"additional","affiliation":[{"name":"University of Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,12,6]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Amazon.com. [n. d.]. 1 8 W A M140 445 Nm blue Diode. https:\/\/www.amazon.com\/dp\/B00UECEMEE."},{"key":"e_1_3_2_1_2_1","unstructured":"Amazon.com. [n. d.]. JING TAI Powerful Pointer. https:\/\/amazon.com\/dp\/B0932TQMNZ."},{"key":"e_1_3_2_1_3_1","unstructured":"Axis Communications. 2020. Network video solutions for all industries. https:\/\/www.axis.com\/en-us\/solutions-by-industry."},{"key":"e_1_3_2_1_4_1","volume-title":"Colour filter array. United States of America patent 3971065","author":"Bayer BE","year":"1976","unstructured":"BE Bayer. 1976. Colour filter array. United States of America patent 3971065 (1976)."},{"key":"e_1_3_2_1_5_1","unstructured":"Yulong Cao Jiaxiang Ma Kevin Fu Rampazzi Sara and Morley Mao. [n. d.]. Automated Tracking System For LiDAR Spoofing Attacks On Moving Targets. ([n. d.])."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339815"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","unstructured":"Yaobin Chen and Lingxi Li. 2013. Advances in Intelligent Vehicles. https:\/\/doi.org\/10.1016\/C2011-0-07400-8","DOI":"10.1016\/C2011-0-07400-8"},{"key":"e_1_3_2_1_8_1","unstructured":"Anthony Cuthbertson. 2019. Hong Kong protesters use lasers to avoid facial recognition cameras and blind police. https:\/\/www.independent.co.uk\/news\/world\/asia\/hong-kong-protests-lasers-facial-recognition-ai-china-police-a9033046.html."},{"key":"e_1_3_2_1_9_1","volume-title":"R-fcn: Object detection via region-based fully convolutional networks. In Advances in neural information processing systems. 379\u2013387.","author":"Dai Jifeng","year":"2016","unstructured":"Jifeng Dai, Yi Li, Kaiming He, and Jian Sun. 2016. R-fcn: Object detection via region-based fully convolutional networks. In Advances in neural information processing systems. 379\u2013387."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.2352\/ISSN.2470-1173.2019.4.PMII-590"},{"key":"e_1_3_2_1_11_1","volume-title":"Proceedings of the 1st Annual Conference on Robot Learning. 1\u201316","author":"Dosovitskiy Alexey","year":"2017","unstructured":"Alexey Dosovitskiy, German Ros, Felipe Codevilla, Antonio Lopez, and Vladlen Koltun. 2017. CARLA: An Open Urban Driving Simulator. In Proceedings of the 1st Annual Conference on Robot Learning. 1\u201316."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","unstructured":"Daniel Durini. 2019. High performance silicon imaging: Fundamentals and applications of CMOS and CCD sensors. https:\/\/doi.org\/10.1016\/C2017-0-01564-1","DOI":"10.1016\/C2017-0-01564-1"},{"key":"e_1_3_2_1_13_1","unstructured":"EVERGUARD.ai. 2020. sentri360. https:\/\/everguard.ai\/sentri360.php."},{"key":"e_1_3_2_1_14_1","volume-title":"12th USENIX Workshop on Offensive Technologies (WOOT 18)","author":"Eykholt Kevin","year":"2018","unstructured":"Kevin Eykholt, Ivan Evtimov, Earlence Fernandes, Bo Li, Amir Rahmati, Florian Tramer, Atul Prakash, Tadayoshi Kohno, and Dawn Song. 2018. Physical adversarial examples for object detectors. In 12th USENIX Workshop on Offensive Technologies (WOOT 18)."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2952858"},{"key":"e_1_3_2_1_16_1","volume-title":"Pylot: A Modular Platform for Exploring Latency-Accuracy Tradeoffs in Autonomous Vehicles. arXiv preprint arXiv:2104.07830(2021).","author":"Gog Ionel","year":"2021","unstructured":"Ionel Gog, Sukrit Kalra, Peter Schafhalter, Matthew\u00a0A Wright, Joseph\u00a0E Gonzalez, and Ion Stoica. 2021. Pylot: A Modular Platform for Exploring Latency-Accuracy Tradeoffs in Autonomous Vehicles. arXiv preprint arXiv:2104.07830(2021)."},{"key":"e_1_3_2_1_17_1","unstructured":"Ian\u00a0J Goodfellow Jonathon Shlens and Christian Szegedy. 2014. Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572(2014)."},{"key":"e_1_3_2_1_18_1","unstructured":"Google Nest. 2020. Nest Cam. https:\/\/store.google.com\/us\/product\/nest_cam_outdoor?hl=en-US."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.322"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.1987.290267"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"crossref","unstructured":"Eric\u00a0D Knapp and Joel\u00a0Thomas Langill. 2014. Industrial Network Security: Securing critical infrastructure networks for smart grid SCADA and other Industrial Control Systems. Syngress.","DOI":"10.1016\/B978-0-12-420114-9.00007-1"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","unstructured":"Takao Kuroda. 2017. Essential principles of image sensors. https:\/\/doi.org\/10.1201\/b17411","DOI":"10.1201\/b17411"},{"key":"e_1_3_2_1_23_1","unstructured":"Haoliang Li Yufei Wang Xiaofei Xie Yang Liu Shiqi Wang Renjie Wan Lap-Pui Chau and Alex\u00a0C Kot. 2020. Light Can Hack Your Face! Black-box Backdoor Attack on Face Recognition Systems. arXiv preprint arXiv:2009.06996(2020)."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46448-0_2"},{"key":"e_1_3_2_1_25_1","volume-title":"SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations. In 30th USENIX Security Symposium (USENIX Security 21)","author":"Lovisotto Giulio","year":"2021","unstructured":"Giulio Lovisotto, Henry Turner, Ivo Sluganovic, Martin Strohmeier, and Ivan Martinovic. 2021. SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations. In 30th USENIX Security Symposium (USENIX Security 21)."},{"key":"e_1_3_2_1_26_1","volume-title":"23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020","author":"Man Yanmao","year":"2020","unstructured":"Yanmao Man, Ming Li, and Ryan Gerdes. 2020. GhostImage: Remote Perception Attacks against Camera-based Image Classification Systems. In 23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020). USENIX Association, San Sebastian, 317\u2013332. https:\/\/www.usenix.org\/conference\/raid2020\/presentation\/man"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","unstructured":"Junichi Nakamura. 2006. Image sensors and signal processing for digital still cameras. 1\u2013336 pages. https:\/\/doi.org\/10.1201\/9781420026856","DOI":"10.1201\/9781420026856"},{"key":"e_1_3_2_1_28_1","unstructured":"Ben Nassi Dudi Nassi Raz Ben-Netanel Yisroel Mirsky Oleg Drokin and Yuval Elovici. 2020. Phantom of the ADAS: Phantom Attacks on Driver-Assistance Systems."},{"key":"e_1_3_2_1_29_1","unstructured":"Dudi Nassi Raz Ben-Netanel Yuval Elovici and Ben Nassi. 2019. MobilBye: Attacking ADAS with Camera Spoofing. arXiv preprint arXiv:1906.09765(2019)."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2011.5995586"},{"key":"e_1_3_2_1_31_1","unstructured":"BBC Online. 2020. Met Police to deploy facial recognition cameras. https:\/\/www.bbc.co.uk\/news\/uk-51237665."},{"key":"e_1_3_2_1_32_1","volume-title":"10th USENIX Workshop on Offensive Technologies (WOOT 16)","author":"Park Youngseok","year":"2016","unstructured":"Youngseok Park, Yunmok Son, Hocheol Shin, Dohyun Kim, and Yongdae Kim. 2016. This ain\u2019t your dose: Sensor spoofing attack on medical infusion pump. In 10th USENIX Workshop on Offensive Technologies (WOOT 16)."},{"key":"e_1_3_2_1_33_1","first-page":"2015","article-title":"Remote attacks on automated vehicles sensors: Experiments on camera and lidar","volume":"11","author":"Petit Jonathan","year":"2015","unstructured":"Jonathan Petit, Bas Stottelaar, Michael Feiri, and Frank Kargl. 2015. Remote attacks on automated vehicles sensors: Experiments on camera and lidar. Black Hat Europe 11(2015), 2015.","journal-title":"Black Hat Europe"},{"key":"e_1_3_2_1_34_1","unstructured":"QImaging. 2014. Rolling Shutter vs. Global Shutter. http:\/\/www.tecnicaenlaboratorios.com\/Qimaging\/brochures\/RollingvsGlobalShutter.pdf."},{"key":"e_1_3_2_1_35_1","unstructured":"Shaoqing Ren Kaiming He Ross Girshick and Jian Sun. 2015. Faster r-cnn: Towards real-time object detection with region proposal networks. In Advances in neural information processing systems. 91\u201399."},{"key":"e_1_3_2_1_36_1","unstructured":"Ring. 2020. Ring Camera. https:\/\/ring.com."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01443"},{"key":"e_1_3_2_1_38_1","unstructured":"Blue\u00a0Iris Security. 2020. Video Security. https:\/\/blueirissoftware.com\/."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2018.00211"},{"key":"e_1_3_2_1_40_1","unstructured":"Sam Shead. 2019. Chinese residents worry about rise of facial recognition. https:\/\/www.bbc.co.uk\/news\/technology-50674909."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66787-4_22"},{"key":"e_1_3_2_1_42_1","volume-title":"Physical Adversarial Examples for Object Detectors. In 12th USENIX Workshop on Offensive Technologies (WOOT 18)","author":"Song Dawn","year":"2018","unstructured":"Dawn Song, Kevin Eykholt, Ivan Evtimov, Earlence Fernandes, Bo Li, Amir Rahmati, Florian Tram\u00e8r, Atul Prakash, and Tadayoshi Kohno. 2018. Physical Adversarial Examples for Object Detectors. In 12th USENIX Workshop on Offensive Technologies (WOOT 18). USENIX Association, Baltimore, MD. https:\/\/www.usenix.org\/conference\/woot18\/presentation\/eykholt"},{"key":"e_1_3_2_1_43_1","unstructured":"Nick Statt. 2020. Amazon is expanding its cashierless Go model into a full-blown grocery store. https:\/\/www.theverge.com\/2020\/2\/25\/21151021\/amazon-go-grocery-store-expansion-open-seattle-cashier-less."},{"key":"e_1_3_2_1_44_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Sugawara Takeshi","year":"2020","unstructured":"Takeshi Sugawara, Benjamin Cyr, Sara Rampazzi, Daniel Genkin, and Kevin Fu. 2020. Light commands: laser-based audio injection attacks on voice-controllable systems. In 29th USENIX Security Symposium (USENIX Security 20). 2631\u20132648."},{"key":"e_1_3_2_1_45_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Sun Jiachen","year":"2020","unstructured":"Jiachen Sun, Yulong Cao, Qi\u00a0Alfred Chen, and Z\u00a0Morley Mao. 2020. Towards robust lidar-based perception in autonomous driving: General black-box adversarial sensor attack and countermeasures. In 29th USENIX Security Symposium (USENIX Security 20). 877\u2013894."},{"key":"e_1_3_2_1_46_1","unstructured":"Synology. 2020. Synology Surveillance Station. https:\/\/synology.com\/en-us\/surveillance."},{"key":"e_1_3_2_1_47_1","unstructured":"Bosch\u00a0Security Systems. 2016. FW 6.30 Tamper Detection. https:\/\/resources-boschsecurity-cdn.azureedge.net\/public\/documents\/TN_VCA_tamper_detect_WhitePaper_enUS_22996235531.pdf."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.42"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354195"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00871"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/TED.2002.807253"},{"key":"e_1_3_2_1_52_1","unstructured":"Bing Xu Naiyan Wang Tianqi Chen and Mu Li. 2015. Empirical evaluation of rectified activations in convolutional network. arXiv preprint arXiv:1505.00853(2015)."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2867917"},{"key":"e_1_3_2_1_54_1","first-page":"109","article-title":"Can you trust autonomous vehicles: Contactless attacks against sensors of self-driving vehicle","volume":"24","author":"Yan Chen","year":"2016","unstructured":"Chen Yan, Wenyuan Xu, and Jianhao Liu. 2016. Can you trust autonomous vehicles: Contactless attacks against sensors of self-driving vehicle. DEF CON 24, 8 (2016), 109.","journal-title":"DEF CON"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00271"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134052"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1109\/16.628834"},{"key":"e_1_3_2_1_58_1","unstructured":"Zhe Zhou Di Tang Xiaofeng Wang Weili Han Xiangyu Liu and Kehuan Zhang. 2018. Invisible mask: Practical attacks on face recognition with infrared. arXiv preprint arXiv:1803.04683(2018)."}],"event":{"name":"ACSAC '21: Annual Computer Security Applications Conference","location":"Virtual Event USA","acronym":"ACSAC '21"},"container-title":["Annual Computer Security Applications Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3485832.3488016","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3485832.3488016","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T19:17:29Z","timestamp":1755890249000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3485832.3488016"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,12,6]]},"references-count":58,"alternative-id":["10.1145\/3485832.3488016","10.1145\/3485832"],"URL":"https:\/\/doi.org\/10.1145\/3485832.3488016","relation":{},"subject":[],"published":{"date-parts":[[2021,12,6]]},"assertion":[{"value":"2021-12-06","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}