{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T15:11:57Z","timestamp":1778080317062,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":88,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"NTU-Desay SV Research Program","award":["2018-0980"],"award-info":[{"award-number":["2018-0980"]}]},{"name":"National Research Foundation, Singapore and DSO National Laboratories","award":["AISG2-GC-2023-008"],"award-info":[{"award-number":["AISG2-GC-2023-008"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3670290","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"1879-1893","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["PhyScout: Detecting Sensor Spoofing Attacks via Spatio-temporal Consistency"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3711-7216","authenticated-orcid":false,"given":"Yuan","family":"Xu","sequence":"first","affiliation":[{"name":"College of Computing and Data Science, Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0046-6674","authenticated-orcid":false,"given":"Gelei","family":"Deng","sequence":"additional","affiliation":[{"name":"College of Computing and Data Science, Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9431-5342","authenticated-orcid":false,"given":"Xingshuo","family":"Han","sequence":"additional","affiliation":[{"name":"College of Computing and Data Science, Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9926-5601","authenticated-orcid":false,"given":"Guanlin","family":"Li","sequence":"additional","affiliation":[{"name":"College of Computing and Data Science, Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2678-8070","authenticated-orcid":false,"given":"Han","family":"Qiu","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6595-6650","authenticated-orcid":false,"given":"Tianwei","family":"Zhang","sequence":"additional","affiliation":[{"name":"College of Computing and Data Science, Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2016. How Teslas autopilot got it wrong in fatal crash. https:\/\/www.afr.com\/te chnology\/how-teslas-autopilot-got-it-wrong-in-fatal-crash-20160704-gpxsje."},{"key":"e_1_3_2_1_2_1","unstructured":"2020. An Open Source Self-Driving Car. https:\/\/www.udacity.com\/self-drivingcar\/."},{"key":"e_1_3_2_1_3_1","unstructured":"2023. Yolo 4. https:\/\/github.com\/AlexeyAB\/darknet."},{"key":"e_1_3_2_1_4_1","volume-title":"Fast Explicit Diffusion for Accelerated Features in Nonlinear Scale Spaces. In British Machine Vision Conference.","author":"Alcantarilla Pablo Fern\u00e1ndez","year":"2013","unstructured":"Pablo Fern\u00e1ndez Alcantarilla, Jes\u00fas Nuevo, and Adrien Bartoli. 2013. Fast Explicit Diffusion for Accelerated Features in Nonlinear Scale Spaces. In British Machine Vision Conference."},{"key":"e_1_3_2_1_5_1","volume-title":"Wagner","author":"Athalye Anish","year":"2018","unstructured":"Anish Athalye, Nicholas Carlini, and David A. Wagner. 2018. Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples. In ICML."},{"key":"e_1_3_2_1_6_1","volume-title":"SURF: Speeded Up Robust Features. In ECCV.","author":"Bay Herbert","year":"2006","unstructured":"Herbert Bay, Tinne Tuytelaars, and Luc Van Gool. 2006. SURF: Speeded Up Robust Features. In ECCV."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/LRA.2018.2860039"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"crossref","unstructured":"Rohit Bhatia Vireshwar Kumar Khaled Serag Z. Berkay Celik Mathias Payer and Dongyan Xu. 2021. Evading Voltage-Based Intrusion Detection on Automotive CAN. In NDSS.","DOI":"10.14722\/ndss.2021.23013"},{"key":"e_1_3_2_1_9_1","volume-title":"WeepingCAN: A Stealthy CAN Bus-off Attack. In NDSS Workshop on Automotive and Autonomous Vehicle Security.","author":"Bloom Gedare","year":"2021","unstructured":"Gedare Bloom. 2021. WeepingCAN: A Stealthy CAN Bus-off Attack. In NDSS Workshop on Automotive and Autonomous Vehicle Security."},{"key":"e_1_3_2_1_10_1","unstructured":"Alessandro Cal\u00f2 Paolo Arcaini Shaukat Ali Florian Hauer and Fuyuki Ishikawa. 2020. Generating Avoidable Collision Scenarios for Testing Autonomous Driving Systems. In ICST."},{"key":"e_1_3_2_1_11_1","volume-title":"Tard\u00f3s","author":"Campos Carlos","year":"2021","unstructured":"Carlos Campos, Richard Elvira, Juan J. G\u00f3mez Rodr\u00edguez, Jos\u00e9 M. M. Montiel, and Juan D. Tard\u00f3s. 2021. ORB-SLAM3: An Accurate Open-Source Library for Visual, Visual-Inertial and Multi-Map SLAM. IEEE Transactions on Robotics (2021)."},{"key":"e_1_3_2_1_12_1","volume-title":"Mingyan Liu, and Bo Li.","author":"Cao Yulong","year":"2021","unstructured":"Yulong Cao, Ningfei Wang, Chaowei Xiao, Dawei Yang, Jin Fang, Ruigang Yang, Qi Alfred Chen, Mingyan Liu, and Bo Li. 2021. Invisible for both camera and lidar: Security of multi-sensor fusion based perception in autonomous driving under physical-world attacks. In IEEE S&P."},{"key":"e_1_3_2_1_13_1","volume-title":"Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving. In CCS","author":"Cao Yulong","year":"2019","unstructured":"Yulong Cao, Chaowei Xiao, Benjamin Cyr, Yimeng Zhou, Won Park, Sara Rampazzi, Qi Alfred Chen, Kevin Fu, and Z. Morley Mao. [n. d.]. Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving. In CCS 2019."},{"key":"e_1_3_2_1_14_1","unstructured":"Shang-Tse Chen Cory Cornelius Jason Martin and Duen Horng (Polo) Chau. 2018. ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector. In ECML\/PKDD."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"crossref","unstructured":"Zhiyuan Cheng James Liang Hongjun Choi Guanhong Tao Zhiwen Cao Dongfang Liu and Xiangyu Zhang. 2022. Physical attack on monocular depth estimation with optimal adversarial patche. In ECCV.","DOI":"10.1007\/978-3-031-19839-7_30"},{"key":"e_1_3_2_1_16_1","volume-title":"An Investigation of Byzantine Threats in Multi-Robot Systems. In International Symposium on Recent Advances in Intrusion Detection.","author":"Deng Gelei","year":"2021","unstructured":"Gelei Deng, Yuan Zhou, Yuan Xu, Tianwei Zhang, and Yang Liu. 2021. An Investigation of Byzantine Threats in Multi-Robot Systems. In International Symposium on Recent Advances in Intrusion Detection."},{"key":"e_1_3_2_1_17_1","volume-title":"Security Vulnerabilities of Unmanned Aerial Vehicles and Countermeasures: An Experimental Study. In International Conference on VLSI Design.","author":"Dey Vishal","year":"2018","unstructured":"Vishal Dey, Vikramkumar Pudi, Anupam Chattopadhyay, and Yuval Elovici. 2018. Security Vulnerabilities of Unmanned Aerial Vehicles and Countermeasures: An Experimental Study. In International Conference on VLSI Design."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","unstructured":"Ranjie Duan Xiaofeng Mao A. Kai Qin Yuefeng Chen Shaokai Ye Yuan He and Yun Yang. 2021. Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink. In CVPR.","DOI":"10.1109\/CVPR46437.2021.01580"},{"key":"e_1_3_2_1_19_1","volume-title":"Chaowei Xiao, Atul Prakash, Tadayoshi Kohno, and Dawn Song.","author":"Eykholt Kevin","year":"2018","unstructured":"Kevin Eykholt, Ivan Evtimov, Earlence Fernandes, Amir Rahmati Bo Li, Chaowei Xiao, Atul Prakash, Tadayoshi Kohno, and Dawn Song. 2018. Robust Physical- World Attacks on Deep Learning Visual Classification. In CVPR."},{"key":"e_1_3_2_1_20_1","volume-title":"14 Lectures on Visual SLAM: From Theory to Practice","author":"Gao Xiang","unstructured":"Xiang Gao, Tao Zhang, Yi Liu, and Qinrui Yan. 2017. 14 Lectures on Visual SLAM: From Theory to Practice. Publishing House of Electronics Industry."},{"key":"e_1_3_2_1_21_1","unstructured":"R. Spencer Hallyburton Yupei Liu Yulong Cao Z. Morley Mao and Miroslav Pajic. 2021. Security Analysis of Camera-LiDAR Fusion Against Black-Box Attacks on Autonomous Vehicles. In CoRR."},{"key":"e_1_3_2_1_22_1","unstructured":"Xingshuo Han Guowen Xu Yuan Zhou Xuehuan Yang Jiwei Li and Tianwei Zhang. 2022. Physical backdoor attacks to lane detection systems in autonomous driving. In ACMMM."},{"key":"e_1_3_2_1_23_1","volume-title":"How to Govern the Non-Cooperative Amateur Drones? IEEE Network","author":"He Daojing","year":"2019","unstructured":"Daojing He, Hong Liu, Sammy Chan, and Mohsen Guizani. 2019. How to Govern the Non-Cooperative Amateur Drones? IEEE Network (2019)."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2018.1800065"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"crossref","unstructured":"Lifeng Huang Chengying Gao Yuyin Zhou Cihang Xie Alan L. Yuille Changqing Zou and Ning Liu. 2020. Universal Physical Camouflage Attacks on Object Detectors. In CVPR.","DOI":"10.1109\/CVPR42600.2020.00080"},{"key":"e_1_3_2_1_26_1","volume-title":"International Conference on Learning Representations.","author":"Jia Yunhan","year":"2020","unstructured":"Yunhan Jia, Yantao Lu, Junjie Shen, Qi Alfred Chen, Hao Chen, Zhenyu Zhong, and Tao Wei. 2020. Fooling Detection Alone is Not Enough: Adversarial Attack against Multiple Object Tracking. In International Conference on Learning Representations."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179458"},{"key":"e_1_3_2_1_28_1","volume-title":"USENIX Security Symposium.","author":"Jing Pengfei","year":"2021","unstructured":"Pengfei Jing, Qiyi Tang, Yuefeng Du, Lei Xue, Xiapu Luo, Ting Wang, Sen Nie, and Shi Wu. 2021. Too Good to Be Safe: Tricking Lane Detection in Autonomous Driving with Crafted Perturbations. In USENIX Security Symposium."},{"key":"e_1_3_2_1_29_1","volume-title":"Antonio Bianchi, Z. Berkay Celik, and Dongyan Xu.","author":"Kim Hyungsub","year":"2021","unstructured":"Hyungsub Kim, Muslum Ozgur Ozmen, Antonio Bianchi, Z. Berkay Celik, and Dongyan Xu. 2021. PGFUZZ: Policy-Guided Fuzzing for Robotic Vehicles. In NDSS."},{"key":"e_1_3_2_1_30_1","volume-title":"Kingma and Jimmy Ba","author":"Diederik","year":"2015","unstructured":"Diederik P. Kingma and Jimmy Ba. 2015. Adam: A Method for Stochastic Optimization. In ICLR Poster."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","unstructured":"Zelun Kong Junfeng Guo Ang Li and Cong Liu. 2020. PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving. In CVPR.","DOI":"10.1109\/CVPR42600.2020.01426"},{"key":"e_1_3_2_1_32_1","volume-title":"CANNON: Reliable and Stealthy Remote Shutdown Attacks via Unaltered Automotive Microcontrollers","author":"Kulandaivel Sekar","year":"2021","unstructured":"Sekar Kulandaivel, Shalabh Jain, Jorge Guajardo, and Vyas Sekar. 2021. CANNON: Reliable and Stealthy Remote Shutdown Attacks via Unaltered Automotive Microcontrollers. In IEEE S&P."},{"key":"e_1_3_2_1_33_1","volume-title":"G2o: A general framework for graph optimization","author":"K\u00fcmmerle Rainer","unstructured":"Rainer K\u00fcmmerle, Giorgio Grisetti, Hauke Strasdat, Kurt Konolige, and Wolfram Burgard. 2011. G2o: A general framework for graph optimization. In IEEE ICRA."},{"key":"e_1_3_2_1_34_1","volume-title":"NeurIPS","author":"Levine Alexander","year":"2020","unstructured":"Alexander Levine and Soheil Feizi. [n. d.]. (De)Randomized Smoothing for Certifiable Defense against Patch Attacks. In NeurIPS 2020."},{"key":"e_1_3_2_1_35_1","volume":"202","author":"Lin Wan-Yi","unstructured":"Wan-Yi Lin, Fatemeh Sheikholeslami, Jinghao Shi, Leslie Rice, and J Zico Kolter. 2021. Certified robustness against physically-realizable patch attack via randomized cropping. ICLR Open Review (2021).","journal-title":"J Zico Kolter."},{"key":"e_1_3_2_1_36_1","volume-title":"USENIX Security Symposium.","author":"Liu Shinan","year":"2020","unstructured":"Shinan Liu, Xiang Cheng, Hanchao Yang, Yuanchao Shu, XiaoranWeng, Kexiong Curtis Zeng Ping Guo, Gang Wang, and Yaling Yang. 2020. Drift with Devil: Security of Multi-Sensor Fusion based Localization in High-Level Autonomous Driving under GPS Spoofing. In USENIX Security Symposium."},{"key":"e_1_3_2_1_37_1","volume-title":"SLAP: Improving Physical Adversarial Examples with Short- Lived Adversarial Perturbations. In USENIX Security Symposium.","author":"Lovisotto Giulio","year":"2021","unstructured":"Giulio Lovisotto, Henry Turner, Ivo Sluganovic, Martin Strohmeier, and Ivan Martinovic. 2021. SLAP: Improving Physical Adversarial Examples with Short- Lived Adversarial Perturbations. In USENIX Security Symposium."},{"key":"e_1_3_2_1_38_1","volume-title":"SLAP: Improving Physical Adversarial Examples with Short- Lived Adversarial Perturbations. In USENIX Security Symposium.","author":"Lovisotto Giulio","year":"2021","unstructured":"Giulio Lovisotto, Henry Turner, Ivo Sluganovic, Martin Strohmeier, and Ivan Martinovic. 2021. SLAP: Improving Physical Adversarial Examples with Short- Lived Adversarial Perturbations. In USENIX Security Symposium."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1023\/B:VISI.0000029664.99615.94"},{"key":"e_1_3_2_1_40_1","volume-title":"Stealthy Tracking of Autonomous Vehicles with Cache Side Channels. In USENIX Security Symposium.","author":"Luo Mulong","unstructured":"Mulong Luo, Andrew C. Myers, and G. Edward Suh. 2020. Stealthy Tracking of Autonomous Vehicles with Cache Side Channels. In USENIX Security Symposium."},{"key":"e_1_3_2_1_41_1","volume-title":"International Symposium on Recent Advances in Intrusion Detection.","author":"Man Yanmao","year":"2020","unstructured":"Yanmao Man and Ming Li. 2020. GhostImage: Remote Perception Attacks against Camera-based Image Classification Systems. In International Symposium on Recent Advances in Intrusion Detection."},{"key":"e_1_3_2_1_42_1","volume-title":"That Person Moves Like A Car: Misclassification Attack Detection for Autonomous Systems Using Spatiotemporal Consistency. In USENIX Security Symposium.","author":"Man Yanmao","year":"2023","unstructured":"Yanmao Man, Raymond Muller, Ming Li, Z. Berkay Celik, and Ryan Gerdes. 2023. That Person Moves Like A Car: Misclassification Attack Detection for Autonomous Systems Using Spatiotemporal Consistency. In USENIX Security Symposium."},{"key":"e_1_3_2_1_43_1","unstructured":"Jan Hendrik Metzen and Maksym Yatsura. 2021. Efficient Certified Defenses Against Patch Attacks on Image Classifiers. In ICLR."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"crossref","unstructured":"Noriyuki Miura Tatsuya Machida Kohei Matsuda Makoto Nagata Shoei Nashimoto and Daisuke Suzuki. 2019. A Low-Cost Replica-Based Distance- Spoofing Attack on mmWave FMCW Rada. In ASHES@CCS.","DOI":"10.1145\/3338508.3359567"},{"key":"e_1_3_2_1_45_1","volume-title":"Tard\u00f3s","author":"Mur-Artal Raul","year":"2015","unstructured":"Raul Mur-Artal, J. M. M. Montiel, and Juan D. Tard\u00f3s. 2015. ORB-SLAM: A Versatile and Accurate Monocular SLAM System. IEEE Trans. Robotics (2015)."},{"key":"e_1_3_2_1_46_1","volume-title":"Tard\u00f3s","author":"Mur-Artal Raul","year":"2017","unstructured":"Raul Mur-Artal and Juan D. Tard\u00f3s. 2017. ORB-SLAM2: An Open-Source SLAM System for Monocular, Stereo, and RGB-D Cameras. IEEE Transactions on Robotics (2017)."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"crossref","unstructured":"Shoei Nashimoto Daisuke Suzuki Takeshi Sugawara and Kazuo Sakiyama. 2018. Sensor CON-Fusion: Defeating Kalman Filter in Signal Injection Attack. In ACM AsiaCCS.","DOI":"10.1145\/3196494.3196506"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"crossref","unstructured":"Ben Nassi Yisroel Mirsky Dudi Nassi Raz Ben-Netanel Oleg Drokin and Yuval Elovici. 2020. Phantom of the ADAS: Securing Advanced Driver-Assistance Systems from Split-Second Phantom Attacks. In ACM CCS.","DOI":"10.1145\/3372297.3423359"},{"key":"e_1_3_2_1_49_1","volume-title":"Phantom of the ADAS: Phantom Attacks on Driver-Assistance Systems. IACR Cryptology ePrint Archive","author":"Nassi Ben","year":"2020","unstructured":"Ben Nassi, Dudi Nassi, Raz Ben-Netanel, Yisroel Mirsky, Oleg Drokin, and Yuval Elovici. 2020. Phantom of the ADAS: Phantom Attacks on Driver-Assistance Systems. IACR Cryptology ePrint Archive (2020)."},{"key":"e_1_3_2_1_50_1","unstructured":"Jonathan Petit Bas Stottelaar Michael Feiri and Frank Kargl. 2015. Remote attacks on automated vehicles sensors: Experiments on camera and lidar. In Black Hat Europe."},{"key":"e_1_3_2_1_51_1","volume-title":"Andrea Maria Zanchettin, and Stefano Zanero","author":"Quarta Davide","year":"2017","unstructured":"Davide Quarta, Marcello Pogliani, Mario Polino, Federico Maggi, Andrea Maria Zanchettin, and Stefano Zanero. 2017. An Experimental Security Analysis of an Industrial Robot Controller. In IEEE S&P."},{"key":"e_1_3_2_1_52_1","volume-title":"SAVIOR: Securing Autonomous Vehicles with Robust Physical Invariants. In USENIX Security Symposium.","author":"Quinonez Raul","year":"2020","unstructured":"Raul Quinonez, Jairo Giraldo, Luis E. Salazar, Erick Bauman, Alvaro A. C\u00e1rdenas, and Zhiqiang Lin. 2020. SAVIOR: Securing Autonomous Vehicles with Robust Physical Invariants. In USENIX Security Symposium."},{"key":"e_1_3_2_1_53_1","volume-title":"Bradski","author":"Rublee Ethan","year":"2011","unstructured":"Ethan Rublee, Vincent Rabaud, Kurt Konolige, and Gary R. Bradski. 2011. ORB: An efficient alternative to SIFT or SURF. In IEEE ICCV."},{"key":"e_1_3_2_1_54_1","volume-title":"An Experimental Study of GPS Spoofing and Takeover Attacks on UAVs. In USENIX Security Symposium.","author":"Sathaye Harshad","year":"2022","unstructured":"Harshad Sathaye, Martin Strohmeier, Vincent Lenders, and Aanjhan Ranganathan. 2022. An Experimental Study of GPS Spoofing and Takeover Attacks on UAVs. In USENIX Security Symposium."},{"key":"e_1_3_2_1_55_1","volume-title":"USENIX Security Symposium.","author":"Sato Takami","year":"2021","unstructured":"Takami Sato, Junjie Shen, Ningfei Wang, Yunhan Jia, Xue Lin, and Qi Alfred Chen. 2021. Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attack. In USENIX Security Symposium."},{"key":"e_1_3_2_1_56_1","volume-title":"A Survey and Analysis of the GNSS Spoofing Threat and Countermeasures. Comput. Surveys","author":"Schmidt Desmond Allan","year":"2016","unstructured":"Desmond Allan Schmidt, Kenneth Radke, Seyit Ahmet \u00c7amtepe, Ernest Foo, and Michal Ren. 2016. A Survey and Analysis of the GNSS Spoofing Threat and Countermeasures. Comput. Surveys (2016)."},{"key":"e_1_3_2_1_57_1","volume-title":"Reinforcement Learning for Autonomous Driving. In NIPS Workshop on Learning, Inference and Control of Multi-Agent Systems.","author":"Shalev-Shwartz Shai","year":"2016","unstructured":"Shai Shalev-Shwartz, Shaked Shammah, and Amnon Shashua. 2016. Reinforcement Learning for Autonomous Driving. In NIPS Workshop on Learning, Inference and Control of Multi-Agent Systems."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"crossref","unstructured":"Hocheol Shin Dohyun Kim Yujin Kwon and Yongdae Kim. 2017. Illusion and Dazzle: Adversarial Optical Channel Exploits Against Lidars for Automotive Applications. In Cryptographic Hardware and Embedded Systems.","DOI":"10.1007\/978-3-319-66787-4_22"},{"key":"e_1_3_2_1_59_1","volume-title":"Springer handbook of robotics","author":"Khatib Oussama","unstructured":"Siciliano, Bruno, and Oussama Khatib. 2016. Springer handbook of robotics. Springer, Secaucus, NJ, USA: Sprinter-Verlag New York, Inc."},{"key":"e_1_3_2_1_60_1","unstructured":"Dawn Song Kevin Eykholt Ivan Evtimov Earlence Fernandes Bo Li Amir Rahmati Florian Tram\u00e8r Atul Prakash and Tadayoshi Kohno. 2018. Physical Adversarial Examples for Object Detectors. InWorkshop on Offensive Technologies."},{"key":"e_1_3_2_1_61_1","volume-title":"Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasures. In USENIX Security Symposium.","author":"Sun Jiachen","unstructured":"Jiachen Sun, Yulong Cao, Qi Alfred Chen, and Z. Morley Mao. 2020. Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasures. In USENIX Security Symposium."},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3076287"},{"key":"e_1_3_2_1_63_1","unstructured":"Sebastian Thrun Wolfram Burgard and Diter Fox. 2005. Probabilistic Robotics. The MIT Press."},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"crossref","unstructured":"Yuchi Tian Kexin Pei Suman Jana and Baishakhi Ray. 2018. DeepTest: automated testing of deep-neural-network-driven autonomous cars. In ICSE.","DOI":"10.1145\/3180155.3180220"},{"key":"e_1_3_2_1_65_1","volume-title":"WALNUT: Waging Doubt on the Integrity of MEMS Accelerometers with Acoustic Injection Attacks. In EuroSP.","author":"Trippel Timothy","year":"2017","unstructured":"Timothy Trippel, Ofir Weisse, Wenyuan Xu, Peter Honeyman, and Kevin Fu. 2017. WALNUT: Waging Doubt on the Integrity of MEMS Accelerometers with Acoustic Injection Attacks. In EuroSP."},{"key":"e_1_3_2_1_66_1","volume-title":"USENIX Security Symposium.","author":"Tu Yazhou","year":"2018","unstructured":"Yazhou Tu, Zhiqiang Lin, Insup Lee, and Xiali Hei. 2018. Injected and Delivered: Fabricating Implicit Control over Actuation Systems by Spoofing Inertial Sensors. In USENIX Security Symposium."},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"crossref","unstructured":"Ziwen Wan Junjie Shen Jalen Chuang Xin Xia Joshua Garcia Jiaqi Ma and Qi Alfred Chen. 2022. Too Afraid to Drive: Systematic Discovery of Semantic DoS Vulnerability in Autonomous Driving Planning under Physical-World Attacks. In NDSS.","DOI":"10.14722\/autosec.2022.23046"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"crossref","unstructured":"Jiakai Wang Aishan Liu Zixin Yin Shunchang Liu Shiyu Tang and Xianglong Liu. 2021. Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World. In CVPR.","DOI":"10.1109\/CVPR46437.2021.00846"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"crossref","unstructured":"Wei Wang Yao Yao Xin Liu Xiang Li Pei Hao and Ting Zhu. 2021. I Can See the Light: Attacks on Autonomous Vehicles Using Invisible Lights. In ACM CCS.","DOI":"10.1145\/3460120.3484766"},{"key":"e_1_3_2_1_70_1","volume-title":"Shangyuan Li, and Aimin Pan.","year":"2017","unstructured":"ZhengboWang, KangWang, Bo yang, Shangyuan Li, and Aimin Pan. 2017. Sonic gun to smart devices. In Black Hat USA."},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58548-8_1"},{"key":"e_1_3_2_1_72_1","volume-title":"USENIX Security Symposium.","author":"Xiang Chong","year":"2021","unstructured":"Chong Xiang, Arjun Nitin Bhagoji, Vikash Sehwag, and Prateek Mittal. 2021. PatchGuard: A Provably Robust Defense against Adversarial Patches via Small Receptive Fields and Masking. In USENIX Security Symposium."},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"crossref","unstructured":"Chong Xiang and Prateek Mittal. 2021. DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attacks. In ACM CCS.","DOI":"10.1145\/3460120.3484757"},{"key":"e_1_3_2_1_74_1","unstructured":"Chong Xiang and Prateek Mittal. 2021. PatchGuard: Efficient Provable Attack Detection against Adversarial Patches. In CoRR abs\/2104.12609."},{"key":"e_1_3_2_1_75_1","volume-title":"Molloy","author":"Xiao Chaowei","year":"2019","unstructured":"Chaowei Xiao, Ruizhi Deng, Bo Li, Taesung Lee, Benjamin Edwards, Jinfeng Yi, Dawn Song, Mingyan Liu, and Ian M. Molloy. 2019. AdvIT: Adversarial Frames Identifier Based on Temporal Consistency in Videos. In IEEE ICCV."},{"key":"e_1_3_2_1_76_1","unstructured":"Kaidi Xu Gaoyuan Zhang Sijia Liu Quanfu Fan Mengshu Sun Hongge Chen Pin-Yu Chen Yanzhi Wang and Xue Lin. 2020. Adversarial T-Shirt! Evading Person Detectors in a Physical World. In ECCV."},{"key":"e_1_3_2_1_77_1","unstructured":"Yuan Xu Xingshuo Han Gelei Deng Guanlin Li Yang Liu Jiwei Li and Tianwei Zhang. 2023. SoK: Rethinking Sensor Spoofing Attacks against Robotic Vehicles from a Systematic View. In EuroSP."},{"key":"e_1_3_2_1_78_1","volume-title":"Analysis and Mitigation of Function Interaction Risks in Robot Apps. In International Symposium on Recent Advances in Intrusion Detection.","author":"Xu Yuan","year":"2021","unstructured":"Yuan Xu, Tianwei Zhang, and Yungang Bao. 2021. Analysis and Mitigation of Function Interaction Risks in Robot Apps. In International Symposium on Recent Advances in Intrusion Detection."},{"key":"e_1_3_2_1_79_1","volume-title":"d.]. SoK: A Minimalist Approach to Formalizing Analog Sensor Security","author":"Yan Chen","year":"2021","unstructured":"Chen Yan, Hocheol Shin, Connor Bolton, Wenyuan Xu, Yongdae Kim, and Kevin Fu. [n. d.]. SoK: A Minimalist Approach to Formalizing Analog Sensor Security. In IEEE S&P 2021."},{"key":"e_1_3_2_1_80_1","unstructured":"Chen Yan Wenyuan Xu and Jianhao Liu. 2016. Can you trust autonomous vehicles: Contactless attacks against sensors of self-driving vehicle. In Def Con."},{"key":"e_1_3_2_1_81_1","volume-title":"Rolling Colors: Adversarial Laser Exploits against Traffic Light Recognition. CoRR","author":"Yan Chen","year":"2022","unstructured":"Chen Yan, Zhijian Xu, Zhanyuan Yin, Xiaoyu Ji, and Wenyuan Xu. 2022. Rolling Colors: Adversarial Laser Exploits against Traffic Light Recognition. CoRR (2022)."},{"key":"e_1_3_2_1_82_1","unstructured":"Ping yeh Chiang Renkun Ni Ahmed Abdelkader Chen Zhu Christoph Studer and Tom Goldstein. 2020. Certified Defenses for Adversarial Patches. In ICLR."},{"key":"e_1_3_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1145\/3469261.3469406"},{"key":"e_1_3_2_1_84_1","volume-title":"All Your GPS Are Belong To Us: Towards Stealthy Manipulation of Road Navigation Systems. In USENIX Security Symposium.","author":"Zeng Kexiong","year":"2018","unstructured":"Kexiong (Curtis) Zeng, Shinan Liu, Yuanchao Shu, DongWang, Haoyu Li, Yanzhi Dou, Gang Wang, and Yaling Yang. 2018. All Your GPS Are Belong To Us: Towards Stealthy Manipulation of Road Navigation Systems. In USENIX Security Symposium."},{"key":"e_1_3_2_1_85_1","doi-asserted-by":"crossref","unstructured":"Mengshi Zhang Yuqun Zhang Lingming Zhang Cong Liu and Sarfraz Khurshid. 2018. DeepRoad: GAN-based metamorphic testing and input validation framework for autonomous driving systems. In ASE.","DOI":"10.1145\/3238147.3238187"},{"key":"e_1_3_2_1_86_1","doi-asserted-by":"crossref","unstructured":"Yue Zhao Hong Zhu Ruigang Liang Qintao Shen Shengzhi Zhang and Kai Chen. 2019. Seeing isn?t Believing: Towards More Robust Adversarial Attack Against Real World Object Detectors. In CCS.","DOI":"10.1145\/3319535.3354259"},{"key":"e_1_3_2_1_87_1","volume-title":"USENIX Security Symposium.","author":"Zhou Ce","year":"2022","unstructured":"Ce Zhou, Qiben Yan, Yan Shi, and Lichao Sun. 2022. DoubleStar: Long-Range Attack Towards Depth Estimation based Obstacle Avoidance in Autonomous Systems. In USENIX Security Symposium."},{"key":"e_1_3_2_1_88_1","doi-asserted-by":"crossref","unstructured":"Yi Zhu Chenglin Miao Tianhang Zheng Foad Hajiaghajani Lu Su and Chunming Qiao. 2021. Can We Use Arbitrary Objects to Attack LiDAR Perception in Autonomous Driving?. In ACM CCS.","DOI":"10.1145\/3460120.3485377"}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670290","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3670290","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:04:17Z","timestamp":1755842657000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670290"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":88,"alternative-id":["10.1145\/3658644.3670290","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3670290","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}