{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T15:40:44Z","timestamp":1785512444872,"version":"3.56.0"},"publisher-location":"New York, NY, USA","reference-count":100,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,12,5]],"date-time":"2022-12-05T00:00:00Z","timestamp":1670198400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000001","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["DGE-2039634, CNS-1929771, CNS-2145493"],"award-info":[{"award-number":["DGE-2039634, CNS-1929771, CNS-2145493"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"USDOT UTC","award":["69A3552047138"],"award-info":[{"award-number":["69A3552047138"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,12,5]]},"DOI":"10.1145\/3564625.3567977","type":"proceedings-article","created":{"date-parts":[[2022,12,3]],"date-time":"2022-12-03T01:01:29Z","timestamp":1670029289000},"page":"56-70","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["Play the Imitation Game: Model Extraction Attack against Autonomous Driving Localization"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9278-9576","authenticated-orcid":false,"given":"Qifan","family":"Zhang","sequence":"first","affiliation":[{"name":"University of California, Irvine, United States of America"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7944-4445","authenticated-orcid":false,"given":"Junjie","family":"Shen","sequence":"additional","affiliation":[{"name":"University of California, Irvine, United States of America"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7454-9085","authenticated-orcid":false,"given":"Mingtian","family":"Tan","sequence":"additional","affiliation":[{"name":"Fudan University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4879-6258","authenticated-orcid":false,"given":"Zhe","family":"Zhou","sequence":"additional","affiliation":[{"name":"Fudan University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9401-1012","authenticated-orcid":false,"given":"Zhou","family":"Li","sequence":"additional","affiliation":[{"name":"University of California, Irvine, United States of America"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0316-9285","authenticated-orcid":false,"given":"Qi Alfred","family":"Chen","sequence":"additional","affiliation":[{"name":"University of California, Irvine, United States of America"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5741-2311","authenticated-orcid":false,"given":"Haipeng","family":"Zhang","sequence":"additional","affiliation":[{"name":"ShanghaiTech University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,12,5]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.1974.1100645"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICOIACT50329.2020.9332059"},{"key":"e_1_3_2_1_3_1","unstructured":"ars technica. 2017. Google\u2019s Waymo invests in LIDAR technology cuts costs by 90 percent. https:\/\/arstechnica.com\/cars\/2017\/01\/googles-waymo-invests-in-lidar-technology-cuts-costs-by-90-percent\/. (2017).  ars technica. 2017. Google\u2019s Waymo invests in LIDAR technology cuts costs by 90 percent. https:\/\/arstechnica.com\/cars\/2017\/01\/googles-waymo-invests-in-lidar-technology-cuts-costs-by-90-percent\/. (2017)."},{"key":"e_1_3_2_1_4_1","volume-title":"The gamma function","author":"Artin Emil","unstructured":"Emil Artin . 2015. The gamma function . Courier Dover Publications . Emil Artin. 2015. The gamma function. Courier Dover Publications."},{"key":"e_1_3_2_1_5_1","unstructured":"TaskMaster authors. 2022. Code repository for TaskMaster. https:\/\/github.com\/qifan-sailboat\/eskf-acsac22-ae. (2022).  TaskMaster authors. 2022. Code repository for TaskMaster. https:\/\/github.com\/qifan-sailboat\/eskf-acsac22-ae. (2022)."},{"key":"e_1_3_2_1_6_1","unstructured":"Autoware. 2020. Autoware-AI\/autoware.ai: Open-source software for self-driving vehicles. https:\/\/github.com\/Autoware-AI\/autoware.ai. (2020).  Autoware. 2020. Autoware-AI\/autoware.ai: Open-source software for self-driving vehicles. https:\/\/github.com\/Autoware-AI\/autoware.ai. (2020)."},{"key":"e_1_3_2_1_7_1","unstructured":"Baidu. 2020. ApolloAuto\/apollo: An open autonomous driving platform. https:\/\/github.com\/ApolloAuto\/apollo. (2020).  Baidu. 2020. ApolloAuto\/apollo: An open autonomous driving platform. https:\/\/github.com\/ApolloAuto\/apollo. (2020)."},{"key":"e_1_3_2_1_8_1","unstructured":"Baidu. 2020. Baidu apollo controller module. https:\/\/github.com\/ApolloAuto\/apollo\/tree\/r2.5.0\/modules\/control. (2020).  Baidu. 2020. Baidu apollo controller module. https:\/\/github.com\/ApolloAuto\/apollo\/tree\/r2.5.0\/modules\/control. (2020)."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jprocont.2011.01.001"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1243\/14644193JMBD68"},{"key":"e_1_3_2_1_11_1","volume-title":"Mathematics in Science and Engineering. Vol.\u00a0126","author":"Bohlin T","unstructured":"T Bohlin . 1976. Four cases of identification of changing systems . In Mathematics in Science and Engineering. Vol.\u00a0126 . Elsevier , 441\u2013518. T Bohlin. 1976. Four cases of identification of changing systems. In Mathematics in Science and Engineering. Vol.\u00a0126. Elsevier, 441\u2013518."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","unstructured":"Adith Boloor Karthik Garimella Xin He Christopher Gill Yevgeniy Vorobeychik and Xuan Zhang. 2020. Attacking vision-based perception in end-to-end autonomous driving models. Journal of Systems Architecture(2020) 101766.  Adith Boloor Karthik Garimella Xin He Christopher Gill Yevgeniy Vorobeychik and Xuan Zhang. 2020. Attacking vision-based perception in end-to-end autonomous driving models. Journal of Systems Architecture(2020) 101766.","DOI":"10.1016\/j.sysarc.2020.101766"},{"key":"e_1_3_2_1_13_1","unstructured":"Ajay\u00a0Kumar Boyat and Brijendra\u00a0Kumar Joshi. 2015. A review paper: noise models in digital image processing. arXiv preprint arXiv:1505.03489(2015).  Ajay\u00a0Kumar Boyat and Brijendra\u00a0Kumar Joshi. 2015. A review paper: noise models in digital image processing. arXiv preprint arXiv:1505.03489(2015)."},{"key":"e_1_3_2_1_14_1","unstructured":"Jason Brownlee. 2019. A Gentle Introduction to RNN Unrolling. https:\/\/machinelearningmastery.com\/rnn-unrolling\/. (2019).  Jason Brownlee. 2019. A Gentle Introduction to RNN Unrolling. https:\/\/machinelearningmastery.com\/rnn-unrolling\/. (2019)."},{"key":"e_1_3_2_1_15_1","unstructured":"Business Line. 2018. Velodyne LiDAR awarded Perception System Contract from Mercedes-Benz. https:\/\/www.thehindubusinessline.com\/business-wire\/velodyne-lidar-awarded-perception-system-contract-from-mercedesbenz\/article9856916.ece. (2018).  Business Line. 2018. Velodyne LiDAR awarded Perception System Contract from Mercedes-Benz. https:\/\/www.thehindubusinessline.com\/business-wire\/velodyne-lidar-awarded-perception-system-contract-from-mercedesbenz\/article9856916.ece. (2018)."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00076"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339815"},{"key":"e_1_3_2_1_18_1","volume-title":"Tesla, And Others In Autonomous Vehicles. https:\/\/www.cbinsights.com\/research\/baidu-china-autonomous-vehicles\/.","author":"CBINSIGHTS.","year":"2018","unstructured":"CBINSIGHTS. 2018. Android of the Auto Industry? How Baidu May Race Ahead Of Google , Tesla, And Others In Autonomous Vehicles. https:\/\/www.cbinsights.com\/research\/baidu-china-autonomous-vehicles\/. ( 2018 ). CBINSIGHTS. 2018. Android of the Auto Industry? How Baidu May Race Ahead Of Google, Tesla, And Others In Autonomous Vehicles. https:\/\/www.cbinsights.com\/research\/baidu-china-autonomous-vehicles\/. (2018)."},{"key":"e_1_3_2_1_19_1","volume-title":"29th {USENIX} Security Symposium ({USENIX} Security 20). 1309\u20131326.","author":"Chandrasekaran Varun","unstructured":"Varun Chandrasekaran , Kamalika Chaudhuri , Irene Giacomelli , Somesh Jha , and Songbai Yan . 2020. Exploring connections between active learning and model extraction . In 29th {USENIX} Security Symposium ({USENIX} Security 20). 1309\u20131326. Varun Chandrasekaran, Kamalika Chaudhuri, Irene Giacomelli, Somesh Jha, and Songbai Yan. 2020. Exploring connections between active learning and model extraction. In 29th {USENIX} Security Symposium ({USENIX} Security 20). 1309\u20131326."},{"key":"e_1_3_2_1_20_1","volume-title":"USENIX Security Symposium, Vol.\u00a04","author":"Checkoway Stephen","year":"2011","unstructured":"Stephen Checkoway , Damon McCoy , Brian Kantor , Danny Anderson , Hovav Shacham , Stefan Savage , Karl Koscher , Alexei Czeskis , Franziska Roesner , Tadayoshi Kohno , 2011 . Comprehensive experimental analyses of automotive attack surfaces .. In USENIX Security Symposium, Vol.\u00a04 . San Francisco, 447\u2013462. Stephen Checkoway, Damon McCoy, Brian Kantor, Danny Anderson, Hovav Shacham, Stefan Savage, Karl Koscher, Alexei Czeskis, Franziska Roesner, Tadayoshi Kohno, 2011. Comprehensive experimental analyses of automotive attack surfaces.. In USENIX Security Symposium, Vol.\u00a04. San Francisco, 447\u2013462."},{"key":"e_1_3_2_1_21_1","volume-title":"25th {USENIX} Security Symposium ({USENIX} Security 16). 911\u2013927.","author":"Cho Kyong-Tak","unstructured":"Kyong-Tak Cho and Kang\u00a0 G Shin . 2016. Fingerprinting electronic control units for vehicle intrusion detection . In 25th {USENIX} Security Symposium ({USENIX} Security 16). 911\u2013927. Kyong-Tak Cho and Kang\u00a0G Shin. 2016. Fingerprinting electronic control units for vehicle intrusion detection. In 25th {USENIX} Security Symposium ({USENIX} Security 16). 911\u2013927."},{"key":"e_1_3_2_1_22_1","unstructured":"CISOMAG. 2020. Tesla Offers US$1 Million and a Car as Bug Bounty Reward. https:\/\/cisomag.eccouncil.org\/tesla-offers-us1-million-and-a-car-as-bug-bounty-reward\/. (2020).  CISOMAG. 2020. Tesla Offers US$1 Million and a Car as Bug Bounty Reward. https:\/\/cisomag.eccouncil.org\/tesla-offers-us1-million-and-a-car-as-bug-bounty-reward\/. (2020)."},{"key":"e_1_3_2_1_23_1","unstructured":"DARPA. 2014. The DARPA Grand Challenge: Ten Years Later. https:\/\/www.darpa.mil\/news-events\/2014-03-13. (2014).  DARPA. 2014. The DARPA Grand Challenge: Ten Years Later. https:\/\/www.darpa.mil\/news-events\/2014-03-13. (2014)."},{"key":"e_1_3_2_1_24_1","unstructured":"Matthew DeBord. 2018. Waymo has launched its commercial self-driving service in Phoenix - and it\u2019s called \u2019Waymo One\u2019. https:\/\/www:businessinsider:com\/waymo-one-driverless-car-servicelaunches-in-phoenix-arizona-2018-12. (2018).  Matthew DeBord. 2018. Waymo has launched its commercial self-driving service in Phoenix - and it\u2019s called \u2019Waymo One\u2019. https:\/\/www:businessinsider:com\/waymo-one-driverless-car-servicelaunches-in-phoenix-arizona-2018-12. (2018)."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"crossref","unstructured":"David Di\u00a0Ruscio. 2003. Subspace system identification of the Kalman filter. (2003).  David Di\u00a0Ruscio. 2003. Subspace system identification of the Kalman filter. (2003).","DOI":"10.4173\/mic.2003.3.1"},{"key":"e_1_3_2_1_26_1","unstructured":"ETH Z\u00fcrich. 2018. Ethzasl MSF Framework. https:\/\/github.com\/ethz-asl\/ethzasl_msf. (2018).  ETH Z\u00fcrich. 2018. Ethzasl MSF Framework. https:\/\/github.com\/ethz-asl\/ethzasl_msf. (2018)."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"e_1_3_2_1_28_1","unstructured":"Frida. 2022. Dynamic instrumentation toolkit for developers reverse-engineers and security researchers.https:\/\/frida.re\/. (2022).  Frida. 2022. Dynamic instrumentation toolkit for developers reverse-engineers and security researchers.https:\/\/frida.re\/. (2022)."},{"key":"e_1_3_2_1_29_1","volume-title":"Control system design: an introduction to state-space methods","author":"Friedland Bernard","unstructured":"Bernard Friedland . 2012. Control system design: an introduction to state-space methods . Courier Corporation . Bernard Friedland. 2012. Control system design: an introduction to state-space methods. Courier Corporation."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.3724\/SP.J.1004.2013.00816"},{"key":"e_1_3_2_1_31_1","volume-title":"Estimation of aircraft aerodynamic derivatives accounting for measurement and process noise by EKF through adaptive filter tuning. Bangalore","author":"Gemson RMO","year":"1991","unstructured":"RMO Gemson . 1991. Estimation of aircraft aerodynamic derivatives accounting for measurement and process noise by EKF through adaptive filter tuning. Bangalore , India : Department of Aerospace Engineering, Indian Institute of Science ( 1991 ). RMO Gemson. 1991. Estimation of aircraft aerodynamic derivatives accounting for measurement and process noise by EKF through adaptive filter tuning. Bangalore, India: Department of Aerospace Engineering, Indian Institute of Science (1991)."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.3390\/electronics8010089"},{"key":"e_1_3_2_1_33_1","unstructured":"GreenValley International. 2020. LiBackpack - Mobile Handheld LiDAR - 3D Mapping System. https:\/\/greenvalleyintl.com\/hardware\/libackpack\/. (2020).  GreenValley International. 2020. LiBackpack - Mobile Handheld LiDAR - 3D Mapping System. https:\/\/greenvalleyintl.com\/hardware\/libackpack\/. (2020)."},{"key":"e_1_3_2_1_34_1","unstructured":"Hex Rays. 2022. Ida Pro. https:\/\/hex-rays.com\/ida-pro\/. (2022).  Hex Rays. 2022. Ida Pro. https:\/\/hex-rays.com\/ida-pro\/. (2022)."},{"key":"e_1_3_2_1_35_1","unstructured":"HEXAGON. 2020. EasyMile and Velodyne Lidar Announce Three-Year Agreement. https:\/\/insideunmannedsystems.com\/easymile-and-velodyne-lidar-announce-three-year-agreement\/. (2020).  HEXAGON. 2020. EasyMile and Velodyne Lidar Announce Three-Year Agreement. https:\/\/insideunmannedsystems.com\/easymile-and-velodyne-lidar-announce-three-year-agreement\/. (2020)."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSSC.1969.300242"},{"key":"e_1_3_2_1_37_1","volume-title":"Autonomous automobile trajectory tracking for off-road driving: Controller design, experimental validation and racing. In 2007 American control conference","author":"Hoffmann M","unstructured":"Gabriel\u00a0 M Hoffmann , Claire\u00a0 J Tomlin , Michael Montemerlo , and Sebastian Thrun . 2007. Autonomous automobile trajectory tracking for off-road driving: Controller design, experimental validation and racing. In 2007 American control conference . IEEE , 2296\u20132301. Gabriel\u00a0M Hoffmann, Claire\u00a0J Tomlin, Michael Montemerlo, and Sebastian Thrun. 2007. Autonomous automobile trajectory tracking for off-road driving: Controller design, experimental validation and racing. In 2007 American control conference. IEEE, 2296\u20132301."},{"key":"e_1_3_2_1_38_1","volume-title":"GLONASS, Galileo, and more","author":"Hofmann-Wellenhof Bernhard","unstructured":"Bernhard Hofmann-Wellenhof , Herbert Lichtenegger , and Elmar Wasle . 2007. GNSS\u2013global navigation satellite systems: GPS , GLONASS, Galileo, and more . Springer Science & Business Media . Bernhard Hofmann-Wellenhof, Herbert Lichtenegger, and Elmar Wasle. 2007. GNSS\u2013global navigation satellite systems: GPS, GLONASS, Galileo, and more. Springer Science & Business Media."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2010.5548052"},{"key":"e_1_3_2_1_40_1","unstructured":"Steve\u00a0Corrigan HPL. 2002. Introduction to the controller area network (CAN). Application Report SLOA101(2002) 1\u201317.  Steve\u00a0Corrigan HPL. 2002. Introduction to the controller area network (CAN). Application Report SLOA101(2002) 1\u201317."},{"key":"e_1_3_2_1_41_1","unstructured":"Informed Infrastructure. 2012. Velodyne\u2019s LiDAR Division Announces Agreement With Caterpillar for Laser Imaging Technology. https:\/\/informedinfrastructure.com\/25630\/velodynes-lidar-division-announces-agreement-with-caterpillar-for-laser-imaging-technology-2\/. (2012).  Informed Infrastructure. 2012. Velodyne\u2019s LiDAR Division Announces Agreement With Caterpillar for Laser Imaging Technology. https:\/\/informedinfrastructure.com\/25630\/velodynes-lidar-division-announces-agreement-with-caterpillar-for-laser-imaging-technology-2\/. (2012)."},{"key":"e_1_3_2_1_42_1","unstructured":"Inside Unmanned Systems. 2020. EasyMile and Velodyne Lidar Announce Three-Year Agreement. https:\/\/insideunmannedsystems.com\/easymile-and-velodyne-lidar-announce-three-year-agreement\/. (2020).  Inside Unmanned Systems. 2020. EasyMile and Velodyne Lidar Announce Three-Year Agreement. https:\/\/insideunmannedsystems.com\/easymile-and-velodyne-lidar-announce-three-year-agreement\/. (2020)."},{"key":"e_1_3_2_1_43_1","unstructured":"Intel. 2022. Pin - A Dynamic Binary Instrumentation Tool. https:\/\/www.intel.com\/content\/www\/us\/en\/developer\/articles\/tool\/pin-a-dynamic-binary-instrumentation-tool.html. (2022).  Intel. 2022. Pin - A Dynamic Binary Instrumentation Tool. https:\/\/www.intel.com\/content\/www\/us\/en\/developer\/articles\/tool\/pin-a-dynamic-binary-instrumentation-tool.html. (2022)."},{"key":"e_1_3_2_1_44_1","volume-title":"29th {USENIX} Security Symposium ({USENIX} Security 20).","author":"Jagielski Matthew","unstructured":"Matthew Jagielski , Nicholas Carlini , David Berthelot , Alex Kurakin , and Nicolas Papernot . 2020. High Accuracy and High Fidelity Extraction of Neural Networks . In 29th {USENIX} Security Symposium ({USENIX} Security 20). Matthew Jagielski, Nicholas Carlini, David Berthelot, Alex Kurakin, and Nicolas Papernot. 2020. High Accuracy and High Fidelity Extraction of Neural Networks. In 29th {USENIX} Security Symposium ({USENIX} Security 20)."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.5555\/3489212.3489288"},{"key":"e_1_3_2_1_46_1","volume-title":"Complex urban dataset with multi-level sensors from highly diverse urban environments. The International Journal of Robotics Research","author":"Jeong Jinyong","year":"2019","unstructured":"Jinyong Jeong , Younggun Cho , Young-Sik Shin , Hyunchul Roh , and Ayoung Kim . 2019. Complex urban dataset with multi-level sensors from highly diverse urban environments. The International Journal of Robotics Research ( 2019 ), 0278364919843996. Jinyong Jeong, Younggun Cho, Young-Sik Shin, Hyunchul Roh, and Ayoung Kim. 2019. Complex urban dataset with multi-level sensors from highly diverse urban environments. The International Journal of Robotics Research (2019), 0278364919843996."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48063.2020.00030"},{"key":"e_1_3_2_1_48_1","unstructured":"Saurabh Jha Shengkun Cui Subho\u00a0S Banerjee Timothy Tsai Zbigniew Kalbarczyk and Ravi Iyer. 2020. ML-driven Malware that Targets AV Safety. arXiv preprint arXiv:2004.13004(2020).  Saurabh Jha Shengkun Cui Subho\u00a0S Banerjee Timothy Tsai Zbigniew Kalbarczyk and Ravi Iyer. 2020. ML-driven Malware that Targets AV Safety. arXiv preprint arXiv:2004.13004(2020)."},{"key":"e_1_3_2_1_49_1","volume-title":"International Conference on Learning Representations.","author":"Jia Yunhan","year":"2019","unstructured":"Yunhan Jia , Yantao Lu , Junjie Shen , Qi\u00a0Alfred Chen , Hao Chen , Zhenyu Zhong , and Tao Wei . 2019 . Fooling detection alone is not enough: Adversarial attack against multiple object tracking . In International Conference on Learning Representations. Yunhan Jia, Yantao Lu, Junjie Shen, Qi\u00a0Alfred Chen, Hao Chen, Zhenyu Zhong, and Tao Wei. 2019. Fooling detection alone is not enough: Adversarial attack against multiple object tracking. In International Conference on Learning Representations."},{"key":"e_1_3_2_1_50_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Jing Pengfei","year":"2021","unstructured":"Pengfei Jing , Qiyi Tang , Yuefeng Du , Lei Xue , Xiapu Luo , Ting Wang , Sen Nie , and Shi Wu . 2021 . Too good to be safe: Tricking lane detection in autonomous driving with crafted perturbations . In 30th USENIX Security Symposium (USENIX Security 21) . 3237\u20133254. Pengfei Jing, Qiyi Tang, Yuefeng Du, Lei Xue, Xiapu Luo, Ting Wang, Sen Nie, and Shi Wu. 2021. Too good to be safe: Tricking lane detection in autonomous driving with crafted perturbations. In 30th USENIX Security Symposium (USENIX Security 21). 3237\u20133254."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.2514\/3.21006"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00044"},{"key":"e_1_3_2_1_53_1","volume-title":"Vectorization: A Key Tool To Improve Performance On Modern CPUs. https:\/\/software.intel.com\/content\/www\/us\/en\/develop\/articles\/vectorization-a-key-tool-to-improve-performance-on-modern-cpus.html.","author":"Khartchenko Evgueny","year":"2018","unstructured":"Evgueny Khartchenko . 2018 . Vectorization: A Key Tool To Improve Performance On Modern CPUs. https:\/\/software.intel.com\/content\/www\/us\/en\/develop\/articles\/vectorization-a-key-tool-to-improve-performance-on-modern-cpus.html. (2018). Evgueny Khartchenko. 2018. Vectorization: A Key Tool To Improve Performance On Modern CPUs. https:\/\/software.intel.com\/content\/www\/us\/en\/develop\/articles\/vectorization-a-key-tool-to-improve-performance-on-modern-cpus.html. (2018)."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.34"},{"key":"e_1_3_2_1_55_1","unstructured":"Suki Lau. 2017. Learning Rate Schedules and Adaptive Learning Rate Methods for Deep Learning. https:\/\/towardsdatascience.com\/learning-rate-schedules-and-adaptive-learning-rate-methods-for-deep-learning-2c8f433990d1. (2017).  Suki Lau. 2017. Learning Rate Schedules and Adaptive Learning Rate Methods for Deep Learning. https:\/\/towardsdatascience.com\/learning-rate-schedules-and-adaptive-learning-rate-methods-for-deep-learning-2c8f433990d1. (2017)."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.2307\/1402616"},{"key":"e_1_3_2_1_57_1","volume-title":"System identification","author":"Ljung Lennart","year":"1999","unstructured":"Lennart Ljung . 1999. System identification . Wiley encyclopedia of electrical and electronics engineering ( 1999 ), 1\u201319. Lennart Ljung. 1999. System identification. Wiley encyclopedia of electrical and electronics engineering (1999), 1\u201319."},{"key":"e_1_3_2_1_58_1","unstructured":"Jiajun Lu Hussein Sibai and Evan Fabry. 2017. Adversarial examples that fool detectors. arXiv preprint arXiv:1712.02494(2017).  Jiajun Lu Hussein Sibai and Evan Fabry. 2017. Adversarial examples that fool detectors. arXiv preprint arXiv:1712.02494(2017)."},{"key":"e_1_3_2_1_59_1","volume-title":"29th {USENIX} Security Symposium ({USENIX} Security 20). 859\u2013876.","author":"Luo Mulong","unstructured":"Mulong Luo , Andrew\u00a0 C Myers , and G\u00a0Edward Suh . 2020. Stealthy Tracking of Autonomous Vehicles with Cache Side Channels . In 29th {USENIX} Security Symposium ({USENIX} Security 20). 859\u2013876. Mulong Luo, Andrew\u00a0C Myers, and G\u00a0Edward Suh. 2020. Stealthy Tracking of Autonomous Vehicles with Cache Side Channels. In 29th {USENIX} Security Symposium ({USENIX} Security 20). 859\u2013876."},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/IROS.2013.6696917"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.1970.1099422"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.1972.1100100"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.powtec.2019.10.065"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1007\/s001900050236"},{"key":"e_1_3_2_1_65_1","volume-title":"Introduction to the Kalman filter and tuning its statistics for near optimal estimates and Cramer Rao bound. arXiv","author":"Shyam","year":"2015","unstructured":"Shyam Mohan\u00a0M, Naren Naik , RMO Gemson , and MR Ananthasayanam . 2015. Introduction to the Kalman filter and tuning its statistics for near optimal estimates and Cramer Rao bound. arXiv ( 2015 ), arXiv\u20131503. Shyam Mohan\u00a0M, Naren Naik, RMO Gemson, and MR Ananthasayanam. 2015. Introduction to the Kalman filter and tuning its statistics for near optimal estimates and Cramer Rao bound. arXiv (2015), arXiv\u20131503."},{"key":"e_1_3_2_1_66_1","volume-title":"Machine learning: a probabilistic perspective","author":"Murphy P","unstructured":"Kevin\u00a0 P Murphy . 2012. Machine learning: a probabilistic perspective . MIT press . Kevin\u00a0P Murphy. 2012. Machine learning: a probabilistic perspective. MIT press."},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.1976.1101260"},{"key":"e_1_3_2_1_68_1","first-page":"1","article-title":"Free-fall: Hacking tesla from wireless to can bus","volume":"25","author":"Nie Sen","year":"2017","unstructured":"Sen Nie , Ling Liu , and Yuefeng Du . 2017 . Free-fall: Hacking tesla from wireless to can bus . Briefing, Black Hat USA 25 (2017), 1 \u2013 16 . Sen Nie, Ling Liu, and Yuefeng Du. 2017. Free-fall: Hacking tesla from wireless to can bus. Briefing, Black Hat USA 25 (2017), 1\u201316.","journal-title":"Briefing, Black Hat USA"},{"key":"e_1_3_2_1_69_1","volume-title":"The autocovariance least-squares method for estimating covariances: application to model-based control of chemical reactors","author":"Odelson J","year":"2006","unstructured":"Brian\u00a0 J Odelson , Alexander Lutz , and James\u00a0 B Rawlings . 2006. The autocovariance least-squares method for estimating covariances: application to model-based control of chemical reactors . IEEE transactions on control systems technology 14, 3( 2006 ), 532\u2013540. Brian\u00a0J Odelson, Alexander Lutz, and James\u00a0B Rawlings. 2006. The autocovariance least-squares method for estimating covariances: application to model-based control of chemical reactors. IEEE transactions on control systems technology 14, 3(2006), 532\u2013540."},{"key":"e_1_3_2_1_70_1","volume-title":"Fundamentals of Probability and Stochastic Processes with Applications to Communications (1sted.)","author":"Park Kun\u00a0Il","unstructured":"Kun\u00a0Il Park . 2017. Fundamentals of Probability and Stochastic Processes with Applications to Communications (1sted.) . Springer Publishing Company, Inc orporated. Kun\u00a0Il Park. 2017. Fundamentals of Probability and Stochastic Processes with Applications to Communications (1sted.). Springer Publishing Company, Incorporated."},{"key":"e_1_3_2_1_71_1","first-page":"546","article-title":"Potential cyberattacks on automated vehicles","volume":"16","author":"Petit Jonathan","year":"2014","unstructured":"Jonathan Petit and Steven\u00a0 E Shladover . 2014 . Potential cyberattacks on automated vehicles . IEEE Transactions on Intelligent transportation systems 16 , 2(2014), 546 \u2013 556 . Jonathan Petit and Steven\u00a0E Shladover. 2014. Potential cyberattacks on automated vehicles. IEEE Transactions on Intelligent transportation systems 16, 2(2014), 546\u2013556.","journal-title":"IEEE Transactions on Intelligent transportation systems"},{"key":"e_1_3_2_1_72_1","unstructured":"South China\u00a0Morning Post. 2020. Chinese internet giant Baidu offers free trial robotaxi rides through search and map apps in Changsha. https:\/\/www.scmp.com\/tech\/apps-social\/article\/3080712\/chinese-internet-giant-baidu-offers-free-trial-robotaxi-rides. (2020).  South China\u00a0Morning Post. 2020. Chinese internet giant Baidu offers free trial robotaxi rides through search and map apps in Changsha. https:\/\/www.scmp.com\/tech\/apps-social\/article\/3080712\/chinese-internet-giant-baidu-offers-free-trial-robotaxi-rides. (2020)."},{"key":"e_1_3_2_1_73_1","volume-title":"29th {USENIX} Security Symposium ({USENIX} Security 20). 895\u2013912.","author":"Quinonez Raul","unstructured":"Raul Quinonez , Jairo Giraldo , Luis Salazar , Erick Bauman , Alvaro Cardenas , and Zhiqiang Lin . 2020. {SAVIOR} : Securing Autonomous Vehicles with Robust Physical Invariants . In 29th {USENIX} Security Symposium ({USENIX} Security 20). 895\u2013912. Raul Quinonez, Jairo Giraldo, Luis Salazar, Erick Bauman, Alvaro Cardenas, and Zhiqiang Lin. 2020. {SAVIOR}: Securing Autonomous Vehicles with Robust Physical Invariants. In 29th {USENIX} Security Symposium ({USENIX} Security 20). 895\u2013912."},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"crossref","unstructured":"Tyler\u00a0GR Reid Sarah\u00a0E Houts Robert Cammarata Graham Mills Siddharth Agarwal Ankit Vora and Gaurav Pandey. 2019. Localization requirements for autonomous vehicles. arXiv preprint arXiv:1906.01061(2019).  Tyler\u00a0GR Reid Sarah\u00a0E Houts Robert Cammarata Graham Mills Siddharth Agarwal Ankit Vora and Gaurav Pandey. 2019. Localization requirements for autonomous vehicles. arXiv preprint arXiv:1906.01061(2019).","DOI":"10.4271\/12-02-03-0012"},{"key":"e_1_3_2_1_75_1","unstructured":"Renovo.auto Blog. 2017. Renovo selects Velodyne as Reference LiDAR provider for advanced automotive development projects. https:\/\/medium.com\/renovo-auto-blog\/renovo-selects-velodyne-as-reference-lidar-provider-for-aware-automated-mobility-operating-system-f8001b91c6c. (2017).  Renovo.auto Blog. 2017. Renovo selects Velodyne as Reference LiDAR provider for advanced automotive development projects. https:\/\/medium.com\/renovo-auto-blog\/renovo-selects-velodyne-as-reference-lidar-provider-for-aware-automated-mobility-operating-system-f8001b91c6c. (2017)."},{"key":"e_1_3_2_1_76_1","unstructured":"Reuters. 2021. Ford dissolves its 7.6% stake in Velodyne Lidar. https:\/\/www.reuters.com\/article\/us-velodyne-lidar-stake\/ford-dissolves-its-7-6-stake-in-velodyne-lidar-idUSKBN2AF1B7?il=0. (2021).  Reuters. 2021. Ford dissolves its 7.6% stake in Velodyne Lidar. https:\/\/www.reuters.com\/article\/us-velodyne-lidar-stake\/ford-dissolves-its-7-6-stake-in-velodyne-lidar-idUSKBN2AF1B7?il=0. (2021)."},{"key":"e_1_3_2_1_77_1","doi-asserted-by":"crossref","unstructured":"Daniel\u00a0E Rivera Manfred Morari and Sigurd Skogestad. 1986. Internal model control: PID controller design. Industrial & engineering chemistry process design and development 25 1(1986) 252\u2013265.  Daniel\u00a0E Rivera Manfred Morari and Sigurd Skogestad. 1986. Internal model control: PID controller design. Industrial & engineering chemistry process design and development 25 1(1986) 252\u2013265.","DOI":"10.1021\/i200032a041"},{"key":"e_1_3_2_1_78_1","unstructured":"Atsushi Sakai Daniel Ingram Joseph Dinius Karan Chawla Antonin Raffin and Alexis Paques. 2018. PythonRobotics: a Python code collection of robotics algorithms. CoRR abs\/1808.10703(2018). arxiv:1808.10703http:\/\/arxiv.org\/abs\/1808.10703  Atsushi Sakai Daniel Ingram Joseph Dinius Karan Chawla Antonin Raffin and Alexis Paques. 2018. PythonRobotics: a Python code collection of robotics algorithms. CoRR abs\/1808.10703(2018). arxiv:1808.10703http:\/\/arxiv.org\/abs\/1808.10703"},{"key":"e_1_3_2_1_79_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (USENIX Security \u201920)","author":"Shen Junjie","year":"2020","unstructured":"Junjie Shen , Jun\u00a0Yeon Won , Zeyuan Chen , and Qi\u00a0Alfred Chen . 2020 . Drift with Devil: Security of Multi-Sensor Fusion based Localization in High-Level Autonomous Driving under GPS Spoofing . In Proceedings of the 29th USENIX Security Symposium (USENIX Security \u201920) . Boston, MA. Junjie Shen, Jun\u00a0Yeon Won, Zeyuan Chen, and Qi\u00a0Alfred Chen. 2020. Drift with Devil: Security of Multi-Sensor Fusion based Localization in High-Level Autonomous Driving under GPS Spoofing. In Proceedings of the 29th USENIX Security Symposium (USENIX Security \u201920). Boston, MA."},{"key":"e_1_3_2_1_80_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4757-3261-0"},{"key":"e_1_3_2_1_81_1","unstructured":"Joan Sola. 2017. Quaternion kinematics for the error-state Kalman filter. arXiv preprint arXiv:1711.02508(2017).  Joan Sola. 2017. Quaternion kinematics for the error-state Kalman filter. arXiv preprint arXiv:1711.02508(2017)."},{"key":"e_1_3_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2016.2595618"},{"key":"e_1_3_2_1_83_1","volume-title":"29th {USENIX} Security Symposium ({USENIX} Security 20). 877\u2013894.","author":"Sun Jiachen","unstructured":"Jiachen Sun , Yulong Cao , Qi\u00a0Alfred Chen , and Z\u00a0Morley Mao . 2020. Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasures . In 29th {USENIX} Security Symposium ({USENIX} Security 20). 877\u2013894. Jiachen Sun, Yulong Cao, Qi\u00a0Alfred Chen, and Z\u00a0Morley Mao. 2020. Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasures. In 29th {USENIX} Security Symposium ({USENIX} Security 20). 877\u2013894."},{"key":"e_1_3_2_1_84_1","unstructured":"System Plus Consulting. 2018. Bosch\u2019s 6-Axis IMU in the Apple iPhone X. https:\/\/www.systemplus.fr\/reverse-costing-reports\/boschs-6-axis-imu-in-the-apple-iphone-x\/. (2018).  System Plus Consulting. 2018. Bosch\u2019s 6-Axis IMU in the Apple iPhone X. https:\/\/www.systemplus.fr\/reverse-costing-reports\/boschs-6-axis-imu-in-the-apple-iphone-x\/. (2018)."},{"key":"e_1_3_2_1_85_1","unstructured":"Tatsuya Takemura Naoto Yanai and Toru Fujiwara. 2020. Model Extraction Attacks against Recurrent Neural Networks. arXiv preprint arXiv:2002.00123(2020).  Tatsuya Takemura Naoto Yanai and Toru Fujiwara. 2020. Model Extraction Attacks against Recurrent Neural Networks. arXiv preprint arXiv:2002.00123(2020)."},{"key":"e_1_3_2_1_86_1","unstructured":"Tencent Keen Security Lab. 2020. Exploiting Wi-Fi Stack on Tesla Model S. https:\/\/keenlab.tencent.com\/en\/2020\/01\/02\/exploiting-wifi-stack-on-tesla-model-s\/. (2020).  Tencent Keen Security Lab. 2020. Exploiting Wi-Fi Stack on Tesla Model S. https:\/\/keenlab.tencent.com\/en\/2020\/01\/02\/exploiting-wifi-stack-on-tesla-model-s\/. (2020)."},{"key":"e_1_3_2_1_87_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046719"},{"key":"e_1_3_2_1_88_1","unstructured":"Trail of Bits. 2022. McSema. https:\/\/github.com\/lifting-bits\/mcsema. (2022).  Trail of Bits. 2022. McSema. https:\/\/github.com\/lifting-bits\/mcsema. (2022)."},{"key":"e_1_3_2_1_89_1","volume-title":"25th {USENIX} Security Symposium ({USENIX} Security 16). 601\u2013618.","author":"Tram\u00e8r Florian","unstructured":"Florian Tram\u00e8r , Fan Zhang , Ari Juels , Michael\u00a0 K Reiter , and Thomas Ristenpart . 2016. Stealing machine learning models via prediction apis . In 25th {USENIX} Security Symposium ({USENIX} Security 16). 601\u2013618. Florian Tram\u00e8r, Fan Zhang, Ari Juels, Michael\u00a0K Reiter, and Thomas Ristenpart. 2016. Stealing machine learning models via prediction apis. In 25th {USENIX} Security Symposium ({USENIX} Security 16). 601\u2013618."},{"key":"e_1_3_2_1_90_1","volume-title":"27th {USENIX} Security Symposium ({USENIX} Security 18). 1545\u20131562.","author":"Tu Yazhou","unstructured":"Yazhou Tu , Zhiqiang Lin , Insup Lee , and Xiali Hei . 2018. Injected and delivered: Fabricating implicit control over actuation systems by spoofing inertial sensors . In 27th {USENIX} Security Symposium ({USENIX} Security 18). 1545\u20131562. Yazhou Tu, Zhiqiang Lin, Insup Lee, and Xiali Hei. 2018. Injected and delivered: Fabricating implicit control over actuation systems by spoofing inertial sensors. In 27th {USENIX} Security Symposium ({USENIX} Security 18). 1545\u20131562."},{"key":"e_1_3_2_1_91_1","volume-title":"Schedule 13G Under the Securities Exchange Act of 1934 (Amendment No. 1) \u2013 Velodyne Lidar","author":"United States Securities and Exchange Commission. 2020.","year":"2020","unstructured":"United States Securities and Exchange Commission. 2020. Schedule 13G Under the Securities Exchange Act of 1934 (Amendment No. 1) \u2013 Velodyne Lidar , Inc . https:\/\/www.reuters.com\/article\/us-velodyne-lidar-stake\/ford-dissolves-its-7-6-stake-in-velodyne-lidar-idUSKBN2AF1B7?il=0. ( 2020 ). United States Securities and Exchange Commission. 2020. Schedule 13G Under the Securities Exchange Act of 1934 (Amendment No. 1) \u2013 Velodyne Lidar, Inc. https:\/\/www.reuters.com\/article\/us-velodyne-lidar-stake\/ford-dissolves-its-7-6-stake-in-velodyne-lidar-idUSKBN2AF1B7?il=0. (2020)."},{"key":"e_1_3_2_1_92_1","unstructured":"Unmanned Systems Technology. 2018. Velodyne Lidar Partners with Nikon for Autonomous Vision. https:\/\/www.unmannedsystemstechnology.com\/2018\/12\/velodyne-lidar-partners-with-nikon-for-autonomous-vision\/. (2018).  Unmanned Systems Technology. 2018. Velodyne Lidar Partners with Nikon for Autonomous Vision. https:\/\/www.unmannedsystemstechnology.com\/2018\/12\/velodyne-lidar-partners-with-nikon-for-autonomous-vision\/. (2018)."},{"key":"e_1_3_2_1_93_1","volume-title":"Velodyne Lidar: Envision the Future. https:\/\/velodynelidar.com\/.","year":"2022","unstructured":"Velodyne. 2022 . Velodyne Lidar: Envision the Future. https:\/\/velodynelidar.com\/. (2022). Velodyne. 2022. Velodyne Lidar: Envision the Future. https:\/\/velodynelidar.com\/. (2022)."},{"key":"e_1_3_2_1_94_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICRA.2018.8461224"},{"key":"e_1_3_2_1_95_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.24177"},{"key":"e_1_3_2_1_96_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00038"},{"key":"e_1_3_2_1_97_1","unstructured":"Greg Welch Gary Bishop 1995. An introduction to the Kalman filter. (1995).  Greg Welch Gary Bishop 1995. An introduction to the Kalman filter. (1995)."},{"key":"e_1_3_2_1_98_1","unstructured":"yegord. 2022. Snowman. https:\/\/github.com\/yegord\/snowman. (2022).  yegord. 2022. Snowman. https:\/\/github.com\/yegord\/snowman. (2022)."},{"key":"e_1_3_2_1_99_1","unstructured":"Megan\u00a0A Zagrobelny and James\u00a0B Rawlings. 2014. Identification of disturbance covariances using maximum likelihood estimation. Technical report No. 2014\u201302(2014).  Megan\u00a0A Zagrobelny and James\u00a0B Rawlings. 2014. Identification of disturbance covariances using maximum likelihood estimation. Technical report No. 2014\u201302(2014)."},{"key":"e_1_3_2_1_100_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354259"}],"event":{"name":"ACSAC: Annual Computer Security Applications Conference","location":"Austin TX USA","acronym":"ACSAC"},"container-title":["Proceedings of the 38th Annual Computer Security Applications Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3564625.3567977","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3564625.3567977","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3564625.3567977","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:09:12Z","timestamp":1750183752000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3564625.3567977"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,12,5]]},"references-count":100,"alternative-id":["10.1145\/3564625.3567977","10.1145\/3564625"],"URL":"https:\/\/doi.org\/10.1145\/3564625.3567977","relation":{},"subject":[],"published":{"date-parts":[[2022,12,5]]},"assertion":[{"value":"2022-12-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}