{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T14:59:39Z","timestamp":1784300379576,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":55,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T00:00:00Z","timestamp":1667779200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000183","name":"Army Research Office","doi-asserted-by":"publisher","award":["W911NF2110320"],"award-info":[{"award-number":["W911NF2110320"]}],"id":[{"id":"10.13039\/100000183","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Science Foundationoundation","award":["CNS-1801611,CNS-2144645"],"award-info":[{"award-number":["CNS-1801611,CNS-2144645"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,11,7]]},"DOI":"10.1145\/3548606.3559390","type":"proceedings-article","created":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T11:41:28Z","timestamp":1667821288000},"page":"2309-2322","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":17,"title":["Physical Hijacking Attacks against Object Trackers"],"prefix":"10.1145","author":[{"given":"Raymond","family":"Muller","sequence":"first","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yanmao","family":"Man","sequence":"additional","affiliation":[{"name":"University of Arizona, Tucson, AZ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Z. Berkay","family":"Celik","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ming","family":"Li","sequence":"additional","affiliation":[{"name":"University of Arizona, Tucson, AZ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ryan","family":"Gerdes","sequence":"additional","affiliation":[{"name":"Virginia Tech, Arlington, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,11,7]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/3441656"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICRA.2016.7487453"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00076"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339815"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511975837"},{"key":"e_1_3_2_1_6_1","volume-title":"Joint European Conference on Machine Learning and Knowledge Discovery in Databases. Springer","author":"Chen Shang-Tse","year":"2018","unstructured":"Shang-Tse Chen , Cory Cornelius , Jason Martin , and Duen Horng Polo Chau . Shapeshifter : Robust physical adversarial attack on faster R-CNN object detector . In Joint European Conference on Machine Learning and Knowledge Discovery in Databases. Springer , 2018 . Shang-Tse Chen, Cory Cornelius, Jason Martin, and Duen Horng Polo Chau. Shapeshifter: Robust physical adversarial attack on faster R-CNN object detector. In Joint European Conference on Machine Learning and Knowledge Discovery in Databases. Springer, 2018."},{"key":"e_1_3_2_1_7_1","volume-title":"International Conference on Engineering and Applied Science","author":"Chen Xi","year":"2012","unstructured":"Xi Chen , Xiao Wang , and Jianhua Xuan . Tracking multiple moving objects using unscented kalman filtering techniques . In International Conference on Engineering and Applied Science , 2012 . Xi Chen, Xiao Wang, and Jianhua Xuan. Tracking multiple moving objects using unscented kalman filtering techniques. In International Conference on Engineering and Applied Science, 2012."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i2.16195"},{"key":"e_1_3_2_1_9_1","volume-title":"University of California","author":"Dhar Aman","year":"2020","unstructured":"Aman Dhar . Object tracking for autonomous driving systems. Master's thesis, EECS Department , University of California , Berkeley , May 2020 . Aman Dhar. Object tracking for autonomous driving systems. Master's thesis, EECS Department, University of California, Berkeley, May 2020."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i2.16211"},{"key":"e_1_3_2_1_11_1","volume-title":"Computer Vision and Pattern Recognition (CVPR)","author":"Evtimov Ivan","year":"2018","unstructured":"Ivan Evtimov , Kevin Eykholt , Earlence Fernandes , Tadayoshi Kohno , Bo Li , Atul Prakash , Amir Rahmati , and Dawn Song . Robust physical-world attacks on machine learning models . Computer Vision and Pattern Recognition (CVPR) , 2018 . Ivan Evtimov, Kevin Eykholt, Earlence Fernandes, Tadayoshi Kohno, Bo Li, Atul Prakash, Amir Rahmati, and Dawn Song. Robust physical-world attacks on machine learning models. Computer Vision and Pattern Recognition (CVPR), 2018."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW54120.2021.00016"},{"key":"e_1_3_2_1_13_1","volume-title":"https:\/\/earth.google.com\/","author":"Google","year":"2022","unstructured":"Google earth. https:\/\/earth.google.com\/ , 2022 . [Online; Accessed 27-August- 2022] Google earth. https:\/\/earth.google.com\/, 2022. [Online; Accessed 27-August- 2022]"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5772\/62758"},{"key":"e_1_3_2_1_16_1","volume-title":"Mask R-CNN. CoRR, abs\/1703.06870","author":"He Kaiming","year":"2017","unstructured":"Kaiming He , Georgia Gkioxari , Piotr Doll\u00e1r , and Ross B. Girshick . Mask R-CNN. CoRR, abs\/1703.06870 , 2017 . Kaiming He, Georgia Gkioxari, Piotr Doll\u00e1r, and Ross B. Girshick. Mask R-CNN. CoRR, abs\/1703.06870, 2017."},{"key":"e_1_3_2_1_17_1","volume-title":"OSTI","author":"Hodge Cabell","year":"2019","unstructured":"Cabell Hodge , Konrad Hauck , Shivam Gupta , and Jesse C Bennett . Vehicle cybersecurity threats and mitigation approaches. Technical report, National Renewable Energy Lab.(NREL) , OSTI , 2019 . Cabell Hodge, Konrad Hauck, Shivam Gupta, and Jesse C Bennett. Vehicle cybersecurity threats and mitigation approaches. Technical report, National Renewable Energy Lab.(NREL), OSTI, 2019."},{"key":"e_1_3_2_1_18_1","volume-title":"Dynamic adversarial patch for evading object detection models. arXiv preprint arXiv:2010.13070","author":"Hoory Shahar","year":"2020","unstructured":"Shahar Hoory , Tzvika Shapira , Asaf Shabtai , and Yuval Elovici . Dynamic adversarial patch for evading object detection models. arXiv preprint arXiv:2010.13070 , 2020 . Shahar Hoory, Tzvika Shapira, Asaf Shabtai, and Yuval Elovici. Dynamic adversarial patch for evading object detection models. arXiv preprint arXiv:2010.13070, 2020."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48063.2020.00030"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00091"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58529-7_5"},{"key":"e_1_3_2_1_22_1","volume-title":"International Conference on Learning Representations (ICLR)","author":"Jia Yunhan Jia","year":"2020","unstructured":"Yunhan Jia Jia , Yantao Lu , Junjie Shen , Qi Alfred Chen , Hao Chen , Zhenyu Zhong , and Tao Wei Wei . Fooling detection alone is not enough: Adversarial attack against multiple object tracking . In International Conference on Learning Representations (ICLR) , 2020 . Yunhan Jia Jia, Yantao Lu, Junjie Shen, Qi Alfred Chen, Hao Chen, Zhenyu Zhong, and Tao Wei Wei. Fooling detection alone is not enough: Adversarial attack against multiple object tracking. In International Conference on Learning Representations (ICLR), 2020."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485832.3488016"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2016.2516982"},{"key":"e_1_3_2_1_25_1","volume-title":"Advances in Neural Information Processing Systems. Curran Associates","author":"Krizhevsky Alex","year":"2012","unstructured":"Alex Krizhevsky , Ilya Sutskever , and Geoffrey E Hinton . Imagenet classification with deep convolutional neural networks . In Advances in Neural Information Processing Systems. Curran Associates , Inc ., 2012 . Alex Krizhevsky, Ilya Sutskever, and Geoffrey E Hinton. Imagenet classification with deep convolutional neural networks. In Advances in Neural Information Processing Systems. Curran Associates, Inc., 2012."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00935"},{"key":"e_1_3_2_1_27_1","volume":"201","author":"Liu Shaoshan","unstructured":"Shaoshan Liu , Jie Tang , Zhe Zhang , and Jean-Luc Gaudiot . Computer architectures for autonomous driving. IEEE Computer Magazine , 201 7. Shaoshan Liu, Jie Tang, Zhe Zhang, and Jean-Luc Gaudiot. Computer architectures for autonomous driving. IEEE Computer Magazine, 2017.","journal-title":"IEEE Computer Magazine"},{"key":"e_1_3_2_1_28_1","volume-title":"screen resolution. https:\/\/www.logicalincrements.com\/articles\/ resolution","author":"Logical","year":"2021","unstructured":"Logical inst. screen resolution. https:\/\/www.logicalincrements.com\/articles\/ resolution , 2021 . [Online; Accessed 27-August-2022]. Logical inst. screen resolution. https:\/\/www.logicalincrements.com\/articles\/ resolution, 2021. [Online; Accessed 27-August-2022]."},{"key":"e_1_3_2_1_29_1","volume-title":"Adversarial examples that fool detectors. CoRR, abs\/1712.02494","author":"Lu Jiajun","year":"2017","unstructured":"Jiajun Lu , Hussein Sibai , and Evan Fabry . Adversarial examples that fool detectors. CoRR, abs\/1712.02494 , 2017 . Jiajun Lu, Hussein Sibai, and Evan Fabry. Adversarial examples that fool detectors. CoRR, abs\/1712.02494, 2017."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.14722\/autosec.2021.23015"},{"key":"e_1_3_2_1_31_1","volume-title":"International Symposium on Research in Attacks, Intrusions and Defenses","author":"Man Yanmao","year":"2020","unstructured":"Yanmao Man , Ming Li , and Ryan Gerdes . Ghost Image : Remote perception attacks against camera-based image classification systems . In International Symposium on Research in Attacks, Intrusions and Defenses , 2020 . Yanmao Man, Ming Li, and Ryan Gerdes. Ghost Image: Remote perception attacks against camera-based image classification systems. In International Symposium on Research in Attacks, Intrusions and Defenses, 2020."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3059968"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.14722\/autosec.2022.23032"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196506"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423359"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW50498.2020.00415"},{"key":"e_1_3_2_1_37_1","volume-title":"Siamese visual object tracking: A survey","author":"Ondrasovic Milan","year":"2021","unstructured":"Milan Ondrasovic and Peter Tarabek . Siamese visual object tracking: A survey . IEEE Access , 2021 . Milan Ondrasovic and Peter Tarabek. Siamese visual object tracking: A survey. IEEE Access, 2021."},{"key":"e_1_3_2_1_38_1","volume-title":"Optoma lv130 ultra-portable projector. https:\/\/www.optoma.com\/vn\/ product\/lv130\/","year":"2021","unstructured":"Optoma. Optoma lv130 ultra-portable projector. https:\/\/www.optoma.com\/vn\/ product\/lv130\/ , 2021 . [Online; Accessed 27-August-2022]. Optoma. Optoma lv130 ultra-portable projector. https:\/\/www.optoma.com\/vn\/ product\/lv130\/, 2021. [Online; Accessed 27-August-2022]."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2718479"},{"key":"e_1_3_2_1_40_1","volume-title":"Ross B. Girshick, and Ali Farhadi. You only look once: Unified, real-time object detection. CoRR, abs\/1506.02640","author":"Redmon Joseph","year":"2015","unstructured":"Joseph Redmon , Santosh Kumar Divvala , Ross B. Girshick, and Ali Farhadi. You only look once: Unified, real-time object detection. CoRR, abs\/1506.02640 , 2015 . Joseph Redmon, Santosh Kumar Divvala, Ross B. Girshick, and Ali Farhadi. You only look once: Unified, real-time object detection. CoRR, abs\/1506.02640, 2015."},{"key":"e_1_3_2_1_41_1","volume-title":"Advances in Neural Information Processing Systems","author":"Ren Shaoqing","year":"2015","unstructured":"Shaoqing Ren , Kaiming He , Ross Girshick , and Jian Sun . Faster R-CNN : Towards real-time object detection with region proposal networks . Advances in Neural Information Processing Systems , 2015 . Shaoqing Ren, Kaiming He, Ross Girshick, and Jian Sun. Faster R-CNN: Towards real-time object detection with region proposal networks. Advances in Neural Information Processing Systems, 2015."},{"key":"e_1_3_2_1_42_1","volume-title":"USENIX Security Symposium","author":"Shen Junjie","year":"2020","unstructured":"Junjie Shen , Jun Yeon Won , Zeyuan Chen , and Qi Alfred Chen . Drift with devil: Security of multi-sensor fusion based localization in high-level autonomous driving under gps spoofing . In USENIX Security Symposium , 2020 . Junjie Shen, Jun Yeon Won, Zeyuan Chen, and Qi Alfred Chen. Drift with devil: Security of multi-sensor fusion based localization in high-level autonomous driving under gps spoofing. In USENIX Security Symposium, 2020."},{"key":"e_1_3_2_1_43_1","volume-title":"Computer Vision and Pattern Recognition (CVPR)","author":"Shuai Bing","year":"2021","unstructured":"Bing Shuai , Andrew G. Berneshawi , Xinyu Li , Davide Modolo , and Joseph Tighe . Siammot : Siamese multi-object tracking . Computer Vision and Pattern Recognition (CVPR) , 2021 . Bing Shuai, Andrew G. Berneshawi, Xinyu Li, Davide Modolo, and Joseph Tighe. Siammot: Siamese multi-object tracking. Computer Vision and Pattern Recognition (CVPR), 2021."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.1999.786974"},{"key":"e_1_3_2_1_45_1","volume-title":"https:\/\/earthexplorer.usgs.gov\/","author":"United states geological survey explorer.","year":"2022","unstructured":"United states geological survey explorer. https:\/\/earthexplorer.usgs.gov\/ , 2022 . [Online; Accessed 27-August-2022]. United states geological survey explorer. https:\/\/earthexplorer.usgs.gov\/, 2022. [Online; Accessed 27-August-2022]."},{"key":"e_1_3_2_1_46_1","volume-title":"Opencv: Kalmanfilter reference. https:\/\/docs. opencv.org\/3.4.1\/dd\/d6a\/classcv_1_1KalmanFilter.html","author":"Computer Vision Open Source","year":"2022","unstructured":"Open Source Computer Vision . Opencv: Kalmanfilter reference. https:\/\/docs. opencv.org\/3.4.1\/dd\/d6a\/classcv_1_1KalmanFilter.html , 2022 . [Online; Accessed 27-August-2022]. Open Source Computer Vision. Opencv: Kalmanfilter reference. https:\/\/docs. opencv.org\/3.4.1\/dd\/d6a\/classcv_1_1KalmanFilter.html, 2022. [Online; Accessed 27-August-2022]."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484766"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2013.10"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.153"},{"key":"e_1_3_2_1_50_1","volume-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","author":"Yan Bin","year":"2020","unstructured":"Bin Yan , Dong Wang , Huchuan Lu , and Xiaoyun Yang . Cooling-shrinking attack : Blinding the tracker with imperceptible noises . In IEEE\/CVF Conference on Computer Vision and Pattern Recognition , 2020 . Bin Yan, Dong Wang, Huchuan Lu, and Xiaoyun Yang. Cooling-shrinking attack: Blinding the tracker with imperceptible noises. In IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020."},{"key":"e_1_3_2_1_51_1","volume-title":"IEEE International Conference on Acoustics, Speech and Signal Processing","author":"Yan Xiyu","year":"2020","unstructured":"Xiyu Yan , Xuesong Chen , Yong Jiang , Shu-Tao Xia , Yong Zhao , and Feng Zheng . Hijacking tracker : A powerful adversarial attack on visual tracking . In IEEE International Conference on Acoustics, Speech and Signal Processing , 2020 . Xiyu Yan, Xuesong Chen, Yong Jiang, Shu-Tao Xia, Yong Zhao, and Feng Zheng. Hijacking tracker: A powerful adversarial attack on visual tracking. In IEEE International Conference on Acoustics, Speech and Signal Processing, 2020."},{"key":"e_1_3_2_1_52_1","volume-title":"A survey of autonomous driving: Common practices and emerging technologies","author":"Yurtsever Ekim","year":"2020","unstructured":"Ekim Yurtsever , Jacob Lambert , Alexander Carballo , and Kazuya Takeda . A survey of autonomous driving: Common practices and emerging technologies . IEEE access, 2020 . Ekim Yurtsever, Jacob Lambert, Alexander Carballo, and Kazuya Takeda. A survey of autonomous driving: Common practices and emerging technologies. IEEE access, 2020."},{"key":"e_1_3_2_1_53_1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"198","DOI":"10.1007\/978-3-540-45179-2_25","volume-title":"Object classification and tracking in video surveil- lance","author":"Zang Qi","year":"2003","unstructured":"Qi Zang and Reinhard Klette . Object classification and tracking in video surveil- lance . In Lecture Notes in Computer Science , volume 2756 , pages 198 -- 205 , 2003 . Qi Zang and Reinhard Klette. Object classification and tracking in video surveil- lance. In Lecture Notes in Computer Science, volume 2756, pages 198--205, 2003."},{"key":"e_1_3_2_1_54_1","volume-title":"ACM Conference on Computer and Communications Security (CCS)","author":"Zhao Yue","year":"2019","unstructured":"Yue Zhao , Hong Zhu , Ruigang Liang , Qintao Shen , Shengzhi Zhang , and Kai Chen . Seeing isn't believing : Towards more robust adversarial attack against real world object detectors . In ACM Conference on Computer and Communications Security (CCS) , 2019 . Yue Zhao, Hong Zhu, Ruigang Liang, Qintao Shen, Shengzhi Zhang, and Kai Chen. Seeing isn't believing: Towards more robust adversarial attack against real world object detectors. In ACM Conference on Computer and Communications Security (CCS), 2019."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485377"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01240-3_7"}],"event":{"name":"CCS '22: 2022 ACM SIGSAC Conference on Computer and Communications Security","location":"Los Angeles CA USA","acronym":"CCS '22","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3548606.3559390","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3548606.3559390","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3548606.3559390","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:50:57Z","timestamp":1750182657000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3548606.3559390"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,7]]},"references-count":55,"alternative-id":["10.1145\/3548606.3559390","10.1145\/3548606"],"URL":"https:\/\/doi.org\/10.1145\/3548606.3559390","relation":{},"subject":[],"published":{"date-parts":[[2022,11,7]]},"assertion":[{"value":"2022-11-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}