{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:40:06Z","timestamp":1755844806099,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":63,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100006374","name":"U.S. Department of Homeland Security","doi-asserted-by":"publisher","award":["17STQAC00001-07-00"],"award-info":[{"award-number":["17STQAC00001-07-00"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006374","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2343618, 1850725"],"award-info":[{"award-number":["CNS-2343618, 1850725"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006374","name":"U.S. Department of Defense","doi-asserted-by":"publisher","award":["W52P1J2093009"],"award-info":[{"award-number":["W52P1J2093009"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3670291","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"4792-4806","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["<i>Avara:<\/i>\n            A Uniform Evaluation System for Perceptibility Analysis Against Adversarial Object Evasion Attacks"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4760-6072","authenticated-orcid":false,"given":"Xinyao","family":"Ma","sequence":"first","affiliation":[{"name":"Indiana University Bloomington, Bloomington, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5113-7160","authenticated-orcid":false,"given":"Chaoqi","family":"Zhang","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington, Bloomington, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6512-9145","authenticated-orcid":false,"given":"Huadi","family":"Zhu","sequence":"additional","affiliation":[{"name":"The University of Texas at Arlington, Arlington, TX, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8731-7884","authenticated-orcid":false,"given":"L. Jean","family":"Camp","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington, Bloomington, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4303-2438","authenticated-orcid":false,"given":"Ming","family":"Li","sequence":"additional","affiliation":[{"name":"The University of Texas at Arlington, Arlington, TX, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7555-1673","authenticated-orcid":false,"given":"Xiaojing","family":"Liao","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington, Bloomington, Indiana, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Apple. 2024. Apple Vision Pro. https:\/\/www.apple.com\/apple-vision-pro\/."},{"key":"e_1_3_2_1_2_1","volume-title":"Edvin Listo Zec, and Nasser Mohammadiha","author":"Arnelid Henrik","year":"2019","unstructured":"Henrik Arnelid, Edvin Listo Zec, and Nasser Mohammadiha. 2019. Recurrent conditional generative adversarial networks for autonomous driving sensor modelling. In 2019 IEEE Intelligent transportation systems conference (ITSC). IEEE, 1613--1618."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1088\/1757-899X\/252\/1\/012096"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.3390\/s22228810"},{"key":"e_1_3_2_1_5_1","volume-title":"Sus: a 'quick and dirty' usability. Usability evaluation in industry","author":"Brooke John","year":"1996","unstructured":"John Brooke. 1996. Sus: a 'quick and dirty' usability. Usability evaluation in industry, Vol. 189, 3 (1996), 189--194."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00076"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339815"},{"key":"e_1_3_2_1_8_1","volume-title":"Omar Abou Khaled, and Elena Mugellini","author":"Capallera Marine","year":"2022","unstructured":"Marine Capallera, Leonardo Angelini, Quentin Meteier, Omar Abou Khaled, and Elena Mugellini. 2022. Human-Vehicle Interaction to Support Driver's Situation Awareness in Automated Vehicles: A Systematic Review. IEEE Transactions on Intelligent Vehicles (2022)."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"crossref","unstructured":"Nicholas Carlini and David Wagner. 2017. Towards evaluating the robustness of neural networks. In 2017 ieee symposium on security and privacy (sp). Ieee 39--57.","DOI":"10.1109\/SP.2017.49"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijpsycho.2020.05.010"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00033"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.16910\/jemr.12.1.3"},{"key":"e_1_3_2_1_13_1","unstructured":"HTC Corporation. 2024. VIVE Wave XR Plugin. https:\/\/hub.vive.com\/storage\/docs\/en-us\/UnityXR\/UnityXRSdk.html."},{"key":"e_1_3_2_1_14_1","unstructured":"HTC Corporation. 2024. Wave Unity SDK. https:\/\/hub.vive.com\/storage\/docs\/en-us\/UnitySdk.html."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/PerCom45495.2020.9127389"},{"key":"e_1_3_2_1_16_1","unstructured":"Kevin Eykholt. 2018. RP2 Artifacts. https:\/\/github.com\/evtimovi\/robust_physical_perturbations."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"e_1_3_2_1_18_1","volume-title":"Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572","author":"Goodfellow Ian J","year":"2014","unstructured":"Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy. 2014. Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1002\/rob.21918"},{"key":"e_1_3_2_1_20_1","volume-title":"Fooling the eyes of autonomous vehicles: Robust physical adversarial examples against traffic sign recognition systems. arXiv preprint arXiv:2201.06192","author":"Jia Wei","year":"2022","unstructured":"Wei Jia, Zhaojun Lu, Haichun Zhang, Zhenglin Liu, Jie Wang, and Gang Qu. 2022. Fooling the eyes of autonomous vehicles: Robust physical adversarial examples against traffic sign recognition systems. arXiv preprint arXiv:2201.06192 (2022)."},{"key":"e_1_3_2_1_21_1","volume-title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems. arXiv preprint arXiv:2201.06192","author":"Jia Wei","year":"2022","unstructured":"Wei Jia, Zhaojun Lu, Haichun Zhang, Zhenglin Liu, Jie Wang, and Gang Qu. 2022. Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems. arXiv preprint arXiv:2201.06192 (2022)."},{"key":"e_1_3_2_1_22_1","unstructured":"Glenn Jocher. [n. d.]. YOLOv5. https:\/\/github.com\/ ultralytics\/yolov5. Accessed: 2024--1--27."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2021.3054625"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01426"},{"key":"e_1_3_2_1_25_1","volume-title":"5th International Conference on Learning Representations, ICLR 2017, Toulon, France, April 24--26, 2017, Conference Track Proceedings. OpenReview.net. https:\/\/openreview.net\/forum?id=BJm4T4Kgx","author":"Kurakin Alexey","year":"2017","unstructured":"Alexey Kurakin, Ian J. Goodfellow, and Samy Bengio. 2017. Adversarial Machine Learning at Scale. In 5th International Conference on Learning Representations, ICLR 2017, Toulon, France, April 24--26, 2017, Conference Track Proceedings. OpenReview.net. https:\/\/openreview.net\/forum?id=BJm4T4Kgx"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179303"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00783"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.aap.2021.106143"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.3390\/mti2040071"},{"key":"e_1_3_2_1_30_1","unstructured":"Giulio Lovisotto. 2021. SLAP Artifacts. https:\/\/github.com\/ssloxford\/short-lived-adversarial-perturbations."},{"key":"e_1_3_2_1_31_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Lovisotto Giulio","year":"2021","unstructured":"Giulio Lovisotto, Henry Turner, Ivo Sluganovic, Martin Strohmeier, and Ivan Martinovic. 2021. SLAP: Improving physical adversarial examples with Short-Lived adversarial perturbations. In 30th USENIX Security Symposium (USENIX Security 21). 1865--1882."},{"key":"e_1_3_2_1_32_1","unstructured":"CKAS Mechatronics Pty Ltd. 2019. CKAS MiniSim Car Simulators. https:\/\/www.ckas.com.au\/minisim_car_simulators_87.html."},{"key":"e_1_3_2_1_33_1","volume-title":"Take over! A video-clip study measuring attention, situation awareness, and decision-making in the face of an impending hazard. Transportation research part F: traffic psychology and behaviour","author":"Lu Zhenji","year":"2020","unstructured":"Zhenji Lu, Riender Happee, and Joost CF de Winter. 2020. Take over! A video-clip study measuring attention, situation awareness, and decision-making in the face of an impending hazard. Transportation research part F: traffic psychology and behaviour, Vol. 72 (2020), 211--225."},{"key":"e_1_3_2_1_34_1","unstructured":"Bo Luo Yannan Liu Lingxiao Wei and Q. Xu. 2018. Towards Imperceptible and Robust Adversarial Example Attacks against Neural Networks. ArXiv Vol. abs\/1801.04693 (2018). https:\/\/api.semanticscholar.org\/CorpusID:19225543"},{"key":"e_1_3_2_1_35_1","volume-title":"WIP: Towards the Practicality of the Adversarial Attack on Object Tracking in Autonomous Driving. In ISOC Symposium on Vehicle Security and Privacy (VehicleSec).","author":"Ma Chen","year":"2023","unstructured":"Chen Ma, Ningfei Wang, Qi Alfred Chen, and Chao Shen. 2023. WIP: Towards the Practicality of the Adversarial Attack on Object Tracking in Autonomous Driving. In ISOC Symposium on Vehicle Security and Privacy (VehicleSec)."},{"key":"e_1_3_2_1_36_1","volume-title":"Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083","author":"Madry Aleksander","year":"2017","unstructured":"Aleksander Madry, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, and Adrian Vladu. 2017. Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 (2017)."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2012.2209421"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2020.3032227"},{"key":"e_1_3_2_1_39_1","first-page":"4","article-title":"The Tobii I-VT fixation filter","volume":"21","author":"Olsen Anneli","year":"2012","unstructured":"Anneli Olsen. 2012. The Tobii I-VT fixation filter. Tobii Technology, Vol. 21 (2012), 4--19.","journal-title":"Tobii Technology"},{"key":"e_1_3_2_1_40_1","unstructured":"Qualtics. 2024. Qualtics. https:\/\/www.qualtrics.com\/."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.690"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/355017.355028"},{"key":"e_1_3_2_1_43_1","volume-title":"Michael Clifford, Takeshi Sugawara, Qi Alfred Chen, and Sara Rampazzi.","author":"Sato Takami","year":"2024","unstructured":"Takami Sato, Sri Hrushikesh Varma Bhupathiraju, Michael Clifford, Takeshi Sugawara, Qi Alfred Chen, and Sara Rampazzi. 2024. Invisible Reflections: Leveraging Infrared Laser Reflections to Target Traffic Sign Perception. arXiv preprint arXiv:2401.03582 (2024)."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01443"},{"key":"e_1_3_2_1_45_1","volume-title":"Proceedings of the 28th australian conference on computer-human interaction. 25--29","author":"Schroeter Ronald","year":"2016","unstructured":"Ronald Schroeter and Fabius Steinberger. 2016. Pok\u00e9mon DRIVE: towards increased situational awareness in semi-automated driving. In Proceedings of the 28th australian conference on computer-human interaction. 25--29."},{"key":"e_1_3_2_1_46_1","volume-title":"Arsalan Mosenia, Mung Chiang, and Prateek Mittal.","author":"Sitawarin Chawin","year":"2018","unstructured":"Chawin Sitawarin, Arjun Nitin Bhagoji, Arsalan Mosenia, Mung Chiang, and Prateek Mittal. 2018. Darts: Deceiving autonomous cars with toxic signs. arXiv preprint arXiv:1802.06430 (2018)."},{"key":"e_1_3_2_1_47_1","volume-title":"12th USENIX workshop on offensive technologies (WOOT 18)","author":"Song Dawn","year":"2018","unstructured":"Dawn Song, Kevin Eykholt, Ivan Evtimov, Earlence Fernandes, Bo Li, Amir Rahmati, Florian Tramer, Atul Prakash, and Tadayoshi Kohno. 2018. Physical adversarial examples for object detectors. In 12th USENIX workshop on offensive technologies (WOOT 18)."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2012.02.016"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.promfg.2015.07.797"},{"key":"e_1_3_2_1_50_1","unstructured":"Unity Technologies. 2024. Unity. https:\/\/unity.com."},{"key":"e_1_3_2_1_51_1","unstructured":"Unity Technologies. 2024. Unity Asset. https:\/\/assetstore.unity.com\/packages\/tools\/particles-effects\/time-of-day-weather-system-40374."},{"key":"e_1_3_2_1_52_1","unstructured":"Unity Technologies. 2024. Unity Asset Store. https:\/\/assetstore.unity.com\/."},{"key":"e_1_3_2_1_53_1","volume-title":"McDaniel","author":"Tram\u00e8r Florian","year":"2018","unstructured":"Florian Tram\u00e8r, Alexey Kurakin, Nicolas Papernot, Ian J. Goodfellow, Dan Boneh, and Patrick D. McDaniel. 2018. Ensemble Adversarial Training: Attacks and Defenses. In 6th International Conference on Learning Representations, ICLR 2018, Vancouver, BC, Canada, April 30 - May 3, 2018, Conference Track Proceedings. OpenReview.net. https:\/\/openreview.net\/forum?id=rkZvSe-RZ"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00407"},{"key":"e_1_3_2_1_55_1","volume-title":"Proceedings, Part V 16","author":"Xu Kaidi","year":"2020","unstructured":"Kaidi Xu, Gaoyuan Zhang, Sijia Liu, Quanfu Fan, Mengshu Sun, Hongge Chen, Pin-Yu Chen, Yanzhi Wang, and Xue Lin. 2020. Adversarial t-shirt! evading person detectors in a physical world. In Computer Vision--ECCV 2020: 16th European Conference, Glasgow, UK, August 23--28, 2020, Proceedings, Part V 16. Springer, 665--681."},{"key":"e_1_3_2_1_56_1","unstructured":"Vivek Yadav. 2016. GTSRB-CNN. https:\/\/github.com\/vxy10\/p2-TrafficSigns."},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC.2018.8569986"},{"key":"e_1_3_2_1_58_1","volume-title":"A survey of autonomous driving: Common practices and emerging technologies","author":"Yurtsever Ekim","year":"2020","unstructured":"Ekim Yurtsever, Jacob Lambert, Alexander Carballo, and Kazuya Takeda. 2020. A survey of autonomous driving: Common practices and emerging technologies. IEEE access, Vol. 8 (2020), 58443--58469."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.14722\/vehiclesec.2023.23002"},{"key":"e_1_3_2_1_60_1","volume-title":"Physiological measurements of situation awareness: a systematic review. Human factors","author":"Zhang Ting","year":"2020","unstructured":"Ting Zhang, Jing Yang, Nade Liang, Brandon J Pitts, Kwaku O Prakah-Asante, Reates Curry, Bradley S Duerstock, Juan P Wachs, and Denny Yu. 2020. Physiological measurements of situation awareness: a systematic review. Human factors (2020), 0018720820969071."},{"key":"e_1_3_2_1_61_1","unstructured":"Yiqi Zhong. 2022. Shadow Attack Artifacts. https:\/\/github.com\/hncszyq\/ShadowAttack."},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01491"},{"key":"e_1_3_2_1_63_1","volume-title":"Using eye-tracking data to predict situation awareness in real time during takeover transitions in conditionally automated driving","author":"Zhou Feng","year":"2021","unstructured":"Feng Zhou, X Jessie Yang, and Joost CF De Winter. 2021. Using eye-tracking data to predict situation awareness in real time during takeover transitions in conditionally automated driving. IEEE transactions on intelligent transportation systems, Vol. 23, 3 (2021), 2284--2295."}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Salt Lake City UT USA","acronym":"CCS '24"},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670291","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3670291","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:04:28Z","timestamp":1755842668000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670291"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":63,"alternative-id":["10.1145\/3658644.3670291","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3670291","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}