{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,13]],"date-time":"2025-11-13T07:25:27Z","timestamp":1763018727062,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":150,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,11,20]],"date-time":"2023-11-20T00:00:00Z","timestamp":1700438400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,11,20]]},"DOI":"10.1145\/3689936.3694694","type":"proceedings-article","created":{"date-parts":[[2024,11,20]],"date-time":"2024-11-20T18:21:08Z","timestamp":1732126868000},"page":"13-24","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["Achieving the Safety and Security of the End-to-End AV Pipeline"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-8339-9297","authenticated-orcid":false,"given":"Noah T.","family":"Curran","sequence":"first","affiliation":[{"name":"University of Michigan, Ann Arbor, MI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-6979-0303","authenticated-orcid":false,"given":"Minkyoung","family":"Cho","sequence":"additional","affiliation":[{"name":"University of Michigan, Ann Arbor, MI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4767-274X","authenticated-orcid":false,"given":"Ryan","family":"Feng","sequence":"additional","affiliation":[{"name":"University of Michigan, Ann Arbor, MI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6149-9859","authenticated-orcid":false,"given":"Liangkai","family":"Liu","sequence":"additional","affiliation":[{"name":"University of Michigan, Ann Arbor, MI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6140-922X","authenticated-orcid":false,"given":"Brian Jay","family":"Tang","sequence":"additional","affiliation":[{"name":"University of Michigan, Ann Arbor, MI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-6033-6759","authenticated-orcid":false,"given":"Pedram","family":"MohajerAnsari","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-2714-2011","authenticated-orcid":false,"given":"Alkim","family":"Domeke","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9192-5823","authenticated-orcid":false,"given":"Mert D.","family":"Pes\u00e9","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0086-8777","authenticated-orcid":false,"given":"Kang G.","family":"Shin","sequence":"additional","affiliation":[{"name":"University of Michigan, Ann Arbor, MI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,11,20]]},"reference":[{"volume-title":"Road vehicles - Cybersecurity engineering. Standard","author":"ISO","key":"e_1_3_2_1_1_1","unstructured":"ISO 21434. 2021. Road vehicles - Cybersecurity engineering. Standard. International Organization for Standardization."},{"volume-title":"Road vehicles -- Safety of the intended functionality. Standard","author":"ISO","key":"e_1_3_2_1_2_1","unstructured":"ISO 21448. 2022. Road vehicles -- Safety of the intended functionality. Standard. International Organization for Standardization."},{"volume-title":"Road vehicles -- Functional safety. Standard","author":"ISO","key":"e_1_3_2_1_3_1","unstructured":"ISO 26262. 2018. Road vehicles -- Functional safety. Standard. International Organization for Standardization."},{"volume-title":"Security techniques - Information security management systems. Standard","author":"ISO","key":"e_1_3_2_1_4_1","unstructured":"ISO 27000. 2018. Security techniques - Information security management systems. Standard. International Organization for Standardization."},{"volume-title":"Standard for Safety for the Evaluation of Autonomous Products. Standard","author":"UL","key":"e_1_3_2_1_5_1","unstructured":"ANSI\/UL 4600. 2023. Standard for Safety for the Evaluation of Autonomous Products. Standard. American National Standards Institute."},{"volume-title":"Road vehicles - Guidelines for auditing cybersecurity engineering. Standard","author":"PAS","key":"e_1_3_2_1_6_1","unstructured":"ISO\/PAS 5112. 2022. Road vehicles - Guidelines for auditing cybersecurity engineering. Standard. International Organization for Standardization."},{"volume-title":"Security of Industrial Automation and Control Systems. Standard","author":"IEC","key":"e_1_3_2_1_7_1","unstructured":"ISA\/IEC 62443. 2020. Security of Industrial Automation and Control Systems. Standard. American National Standards Institute."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2020.3048878"},{"volume-title":"https:\/\/ardupilot.org\/ardupilot\/index.html. [Online","year":"2023","key":"e_1_3_2_1_9_1","unstructured":"ArduPilot. 2023. ArduPilot. https:\/\/ardupilot.org\/ardupilot\/index.html. [Online; accessed 23-Dec-2023]."},{"volume-title":"Autoware High-level architecture design. https:\/\/autowarefoundation.github.io\/autoware-documentation\/main\/design\/autoware-architecture\/. [Online","year":"2023","key":"e_1_3_2_1_10_1","unstructured":"Autoware. 2023. Autoware High-level architecture design. https:\/\/autowarefoundation.github.io\/autoware-documentation\/main\/design\/autoware-architecture\/. [Online; accessed 23-July-2023]."},{"key":"e_1_3_2_1_11_1","volume-title":"Autoware High-level architecture design. https:\/\/autoware.org\/about\/why-autoware\/. [Online","author":"Autoware Why","year":"2023","unstructured":"Why Autoware. 2023. Autoware High-level architecture design. https:\/\/autoware.org\/about\/why-autoware\/. [Online; accessed 26-July-2023]."},{"volume-title":"Apollo Cyber RT. https:\/\/cyber-rt.readthedocs.io\/en\/latest\/. [Online","year":"2023","key":"e_1_3_2_1_12_1","unstructured":"Baidu. 2023. Apollo Cyber RT. https:\/\/cyber-rt.readthedocs.io\/en\/latest\/. [Online; accessed 23-Dec-2023]."},{"volume-title":"Apollo Open Platform. https:\/\/developer.apollo.auto\/. [Online","year":"2023","key":"e_1_3_2_1_13_1","unstructured":"Baidu. 2023. Apollo Open Platform. https:\/\/developer.apollo.auto\/. [Online; accessed 17-Dec-2023]."},{"key":"e_1_3_2_1_14_1","unstructured":"Pesala Bandara. 2023. This Clothing Line Tricks AI Cameras Without Covering Your Face. PetaPixel. https:\/\/web.archive.org\/web\/20231206174711\/https:\/\/petapixel.com\/2023\/01\/20\/this-clothing-line-tricks-ai-cameras-without-covering-your-face\/"},{"key":"e_1_3_2_1_15_1","volume-title":"Proceedings of the Thirteenth Symposium on Usable Privacy and Security (SOUPS '17)","author":"Bloom Cara","year":"2017","unstructured":"Cara Bloom, Joshua Tan, Javed Ramjohn, and Lujo Bauer. 2017. Self-driving cars and data collection: Privacy perceptions of networked autonomous vehicles. In Proceedings of the Thirteenth Symposium on Usable Privacy and Security (SOUPS '17). USENIX, Berkeley, CA, USA, 357--375."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01164"},{"key":"e_1_3_2_1_17_1","first-page":"513","article-title":"Robotics and the Lessons of Cyberlaw","volume":"103","author":"Calo Ryan","year":"2015","unstructured":"Ryan Calo. 2015. Robotics and the Lessons of Cyberlaw. California Law Review, Vol. 103, 3 (2015), 513--563.","journal-title":"California Law Review"},{"key":"e_1_3_2_1_18_1","volume-title":"The Proceedings of the 32nd USENIX Security Symposium (USENIX Security '23)","author":"Cao Yulong","year":"2023","unstructured":"Yulong Cao, S. Hrushikesh Bhupathiraju, Pirouz Naghavi, Takeshi Sugawara, Z. Morley Mao, and Sara Rampazzi. 2023. You Can't See Me: Physical Removal Attacks on LiDAR-based Autonomous Vehicles Driving Frameworks. In The Proceedings of the 32nd USENIX Security Symposium (USENIX Security '23). USENIX, Berkeley, CA, USA, 2993--3010."},{"key":"e_1_3_2_1_19_1","volume-title":"Demo: Automated Tracking System For LiDAR Spoofing Attacks On Moving Targets. In Workshop on Automotive and Autonomous Vehicle Security 2021 (AutoSec '21)","author":"Cao Yulong","year":"2021","unstructured":"Yulong Cao, Jiaxiang Ma, Kevin Fu, Rampazzi Sara, and Morley Mao. 2021. Demo: Automated Tracking System For LiDAR Spoofing Attacks On Moving Targets. In Workshop on Automotive and Autonomous Vehicle Security 2021 (AutoSec '21). ISOC, Reston, VA, USA, 1 pages."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00076"},{"volume-title":"Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving. In The Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security (CCS '19)","author":"Cao Yulong","key":"e_1_3_2_1_21_1","unstructured":"Yulong Cao, Chaowei Wiao, Benjamin Cyr, Yimeng Zhou, Won Park, Sara Rampazzi, Qi Alfred Chen, Kevin Fu, and Z. Morley Mao. 2019. Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving. In The Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security (CCS '19). ACM, New York, NY, USA, 2267--2281."},{"volume-title":"Rearchitecting Classification Frameworks For Increased Robustness","author":"Chandrasekaran Varun","key":"e_1_3_2_1_22_1","unstructured":"Varun Chandrasekaran, Brian Tang, Nicolas Papernot, Kassem Fawaz, Somesh Jha, and Xi Wu. 2019. Rearchitecting Classification Frameworks For Increased Robustness. University of Wisconsin-Madison.showeprint[arXiv]1905.10900 [cs.LG]"},{"key":"e_1_3_2_1_23_1","volume-title":"Domain Adaptive Faster R-CNN for Object Detection in the Wild. In The Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE","author":"Chen Yuhua","year":"2018","unstructured":"Yuhua Chen, Wen Li, Christos Sakaridis, Dengxin Dai, and Luc Van Gool. 2018. Domain Adaptive Faster R-CNN for Object Detection in the Wild. In The Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, New York, NY, USA, 3339--3348."},{"volume-title":"ADoPT: LiDAR Spoofing Attack Detection Based on Point-Level Temporal Consistency. In The Proceedings of the 34th British Machine Vision Conference (BMVC '23)","author":"Cho Minkyoung","key":"e_1_3_2_1_24_1","unstructured":"Minkyoung Cho, Yulong Cao, Zixiang Zhou, and Z. Morley Mao. 2023. ADoPT: LiDAR Spoofing Attack Detection Based on Point-Level Temporal Consistency. In The Proceedings of the 34th British Machine Vision Conference (BMVC '23). BMVA, Durham, U.K., 13 pages."},{"key":"e_1_3_2_1_25_1","volume-title":"Shin","author":"Cho Minkyoung","year":"2023","unstructured":"Minkyoung Cho and Kang G. Shin. 2023. DynaMIX: Resource Optimization for DNN-Based Real-Time Applications on a Multi-Tasking System. University of Michigan.showeprint[arXiv]2302.01568 [cs.LG]"},{"key":"e_1_3_2_1_26_1","volume-title":"The Proceedings of the 36th International Conference on Machine Learning (ICML '19)","author":"Cohen Jeremy","year":"2019","unstructured":"Jeremy Cohen, Elan Rosenfeld, and Zico Kolter. 2019. Certified Adversarial Robustness via Randomized Smoothing. In The Proceedings of the 36th International Conference on Machine Learning (ICML '19). PMLR, New York, NY, USA, 1310--1320."},{"key":"e_1_3_2_1_27_1","volume-title":"The Cityscapes Dataset for Semantic Urban Scene Understanding. In The Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE","author":"Cordts Marius","year":"2015","unstructured":"Marius Cordts, Mohamed Omran, Sebastian Ramos, Timo Rehfeld, Markus Enzweiler, Rodrigo Benenson, Uwe Franke, Stefan Roth, and Bernt Schiele. 2015. The Cityscapes Dataset for Semantic Urban Scene Understanding. In The Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, New York, NY, USA, 3213--3223."},{"volume-title":"Adaptive Stress Testing with Reward Augmentation for Autonomous Vehicle Validation. In The Proceedings of the IEEE 22nd International Conference on Intelligent Transportation Systems (ITSC '19)","author":"Corso Anthony","key":"e_1_3_2_1_28_1","unstructured":"Anthony Corso, Peter Du, Katherine Driggs-Campbell, and Mykel J. Kochenderfer. 2019. Adaptive Stress Testing with Reward Augmentation for Autonomous Vehicle Validation. In The Proceedings of the IEEE 22nd International Conference on Intelligent Transportation Systems (ITSC '19). IEEE, New York, NY, USA, 163--168."},{"key":"e_1_3_2_1_29_1","unstructured":"Cruise. 2022. Cruise Safety Report. Cruise. https:\/\/assets.ctfassets.net\/95kuvdv8zn1v\/zKJHD7X22fNzpAJztpd5K\/ac6cd2419f2665000e4eac3b7d16ad1c\/Cruise_Safety_Report_2022_sm-optimized.pdf"},{"key":"e_1_3_2_1_30_1","unstructured":"Cruise. 2023. Cruise Safety. Cruise. https:\/\/getcruise.com\/safety\/"},{"key":"e_1_3_2_1_31_1","unstructured":"Cruise. 2023. Important Updates from Cruise. Cruise. https:\/\/getcruise.com\/news\/blog\/2023\/important-updates-from-cruise\/"},{"volume-title":"The Proceedings of the 2023 IEEE Conference on Communications and Network Security (CNS '23)","author":"Curran Noah T.","key":"e_1_3_2_1_32_1","unstructured":"Noah T. Curran, Arun Ganesan, Mert D. Pes\u00e9, and Kang G. Shin. 2023. Using Phone Sensors to Augment Vehicle Reliability. In The Proceedings of the 2023 IEEE Conference on Communications and Network Security (CNS '23). IEEE, New York, NY, USA, 9 pages."},{"volume-title":"Analysis and Prevention of MCAS-Induced Crashes. In The Proceedings of the 2024 ACM SIGBED International Conference on Embedded Software (EMSOFT '24)","author":"Curran Noah T.","key":"e_1_3_2_1_33_1","unstructured":"Noah T. Curran, Thomas W. Kennings, and Kang G. Shin. 2024. Analysis and Prevention of MCAS-Induced Crashes. In The Proceedings of the 2024 ACM SIGBED International Conference on Embedded Software (EMSOFT '24). IEEE, New York, NY, USA, 12 pages."},{"key":"e_1_3_2_1_34_1","volume-title":"WIP: Augmenting Vehicle Safety With Passive BLE. In The Proceedings of the Inaugural Symposium on Vehicle Security and Privacy (VehicleSec '23)","author":"Curran Noah T.","year":"2023","unstructured":"Noah T. Curran, Kang G. Shin, William Hass, Lars Wolleschensky, Rekha Singoria, Isaac Snellgrove, and Ran Tao. 2023. WIP: Augmenting Vehicle Safety With Passive BLE. In The Proceedings of the Inaugural Symposium on Vehicle Security and Privacy (VehicleSec '23). ISOC, Reston, VA, USA, 5 pages."},{"key":"e_1_3_2_1_35_1","volume-title":"Jitter Control in On-line Scheduling of Dependent Real-Time Tasks. In The Proceedings 22nd IEEE Real-Time Systems Symposium (RTSS '01)","author":"David Laurent","year":"2001","unstructured":"Laurent David, Francis Cottet, and Nimal Nissanke. 2001. Jitter Control in On-line Scheduling of Dependent Real-Time Tasks. In The Proceedings 22nd IEEE Real-Time Systems Symposium (RTSS '01). IEEE, New York, NY, USA, 49--58."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-022-04148-1"},{"key":"e_1_3_2_1_37_1","volume-title":"On the Scheduling of Mixed-Criticality Real-Time Task Sets. In The Proceedings of the 2009 30th IEEE Real-Time Systems Symposium (RTSS '09)","author":"de Niz Dionisio","year":"2009","unstructured":"Dionisio de Niz, Karthik Lakshmanan, and Ragunathan Rajkumar. 2009. On the Scheduling of Mixed-Criticality Real-Time Task Sets. In The Proceedings of the 2009 30th IEEE Real-Time Systems Symposium (RTSS '09). IEEE, New York, NY, USA, 291--300."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560681"},{"key":"e_1_3_2_1_39_1","volume-title":"Resource Sharing in Global Fixed-Priority Preemptive Multiprocessor Scheduling. In The Proceedings of the 2009 30th IEEE Real-Time Systems Symposium (RTSS '09)","author":"Easwaran Arvind","year":"2009","unstructured":"Arvind Easwaran and Bjorn Andersson. 2009. Resource Sharing in Global Fixed-Priority Preemptive Multiprocessor Scheduling. In The Proceedings of the 2009 30th IEEE Real-Time Systems Symposium (RTSS '09). IEEE, New York, NY, USA, 377--386."},{"key":"e_1_3_2_1_40_1","article-title":"The HACMS program: using formal methods to eliminate exploitable bugs","volume":"375","author":"Fisher Kathleen","year":"2017","unstructured":"Kathleen Fisher, John Launchbury, and Raymond Richards. 2017. The HACMS program: using formal methods to eliminate exploitable bugs. Philosophical Transactions of the Royal Society A, Vol. 375 (2017), 18 pages.Issue 2104.","journal-title":"Philosophical Transactions of the Royal Society A"},{"volume-title":"RADAR, and Cameras. https:\/\/www.foresightauto.com\/an-overview-of-autonomous-sensors-lidar-radar-and-cameras\/. [Online","year":"2023","key":"e_1_3_2_1_41_1","unstructured":"Foresight. 2023. An Overview of Autonomous Sensors -- LIDAR, RADAR, and Cameras. https:\/\/www.foresightauto.com\/an-overview-of-autonomous-sensors-lidar-radar-and-cameras\/. [Online; accessed 27-Dec-2023]."},{"volume-title":"Privacy Nightmare on Wheels: Every Car Brand Reviewed By Mozilla - Including Ford, Volkswagen and Toyota - Flunks Privacy Test","author":"Foundation Mozilla","key":"e_1_3_2_1_42_1","unstructured":"Mozilla Foundation. 2023. Privacy Nightmare on Wheels: Every Car Brand Reviewed By Mozilla - Including Ford, Volkswagen and Toyota - Flunks Privacy Test. Mozilla Foundation. https:\/\/foundation.mozilla.org\/en\/blog\/privacy-nightmare-on-wheels-every-car-brand-reviewed-by-mozilla-including-ford-volkswagen-and-toyota-flunks-privacy-test"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC45102.2020.9294368"},{"key":"e_1_3_2_1_44_1","first-page":"1","article-title":"Domain-Adversarial Training of Neural Networks","volume":"17","author":"Ganin Yaroslav","year":"2016","unstructured":"Yaroslav Ganin, Evgeniya Ustinova, Hana Ajakan, Pascal Germain, Hugo Larochelle, Franccois Laviolette, Mario March, and Victor Lempitsky. 2016. Domain-Adversarial Training of Neural Networks. Journal of Machine Learning Research, Vol. 17, 59 (2016), 1--35.","journal-title":"Journal of Machine Learning Research"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380397"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00058"},{"key":"e_1_3_2_1_47_1","volume-title":"The KITTI Vision Benchmark Suite. In 2012 IEEE Conference on Computer Vision and Pattern Recognition (CVPR '12)","author":"Geiger Andreas","year":"2012","unstructured":"Andreas Geiger, Philip Lenz, and Raquel Urtasun. 2012. Are we ready for Autonomous Driving? The KITTI Vision Benchmark Suite. In 2012 IEEE Conference on Computer Vision and Pattern Recognition (CVPR '12). IEEE, New York, NY, USA, 3354--3361."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2020.2964410"},{"key":"e_1_3_2_1_49_1","first-page":"1171","article-title":"Privacy in Autonomous Vehicles","volume":"52","author":"Glancy Dorothy J.","year":"2012","unstructured":"Dorothy J. Glancy. 2012. Privacy in Autonomous Vehicles. Santa Clara Law Review, Vol. 52 (2012), 1171--1239.","journal-title":"Santa Clara Law Review"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00795"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/PST52912.2021.9647842"},{"key":"e_1_3_2_1_52_1","volume-title":"Security Analysis of Camera-LiDAR Fusion Against Black-Box Attacks on Autonomous Vehicles. In The Proceedings of the 31st USENIX Security Symposium (USENIX Security '22)","author":"Hallyburton R. Spencer","year":"2022","unstructured":"R. Spencer Hallyburton, Yupei Liu, Yulong Cao, Z. Morley Mao, and Miroslav Pajic. 2022. Security Analysis of Camera-LiDAR Fusion Against Black-Box Attacks on Autonomous Vehicles. In The Proceedings of the 31st USENIX Security Symposium (USENIX Security '22). USENIX, Berkeley, CA, USA, 1903--1920."},{"volume-title":"Longitudinal Cyber Attacks on Sensing in Autonomy","author":"Hallyburton R. Spencer","key":"e_1_3_2_1_53_1","unstructured":"R. Spencer Hallyburton, Qingzhao Zhang, Z. Morley Mao, and Miroslav Pajic. 2023. Partial-Information, Longitudinal Cyber Attacks on Sensing in Autonomy. Duke University.showeprint[arXiv]2303.03470 [cs.CR]"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/12.477249"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2944748"},{"volume-title":"Workshop on Automotive and Autonomous Vehicle Security 2021 (AutoSec '21)","author":"Hau Zhongyuan","key":"e_1_3_2_1_56_1","unstructured":"Zhongyuan Hau, Kenneth T. Co, Soteris Demetriou, and Emil C. Lupu. 2021. Object Removal Attacks on LiDAR-based 3D Object Detectors. In Workshop on Automotive and Autonomous Vehicle Security 2021 (AutoSec '21). ISOC, Reston, VA, USA, 4 pages."},{"volume-title":"2022 IEEE Security and Privacy Workshops (SPW '22)","author":"Hau Zhongyuan","key":"e_1_3_2_1_57_1","unstructured":"Zhongyuan Hau, Soteris Demetriou, and Emil C. Lupu. 2022. Using 3D Shadows to Detect Object Hiding Attacks on Autonomous Vehicle Perception. In 2022 IEEE Security and Privacy Workshops (SPW '22). IEEE, New York, NY, USA, 229--235."},{"key":"e_1_3_2_1_58_1","unstructured":"Andrew J. Hawkins. 2023. Robotaxis are driving on thin ice. The Verge. https:\/\/www.theverge.com\/2023\/8\/15\/23831170\/robotaxi-cpuc-sf-waymo-cruise-traffic-halt"},{"key":"e_1_3_2_1_59_1","first-page":"77","article-title":"Toward Trustworthy Decision-Making for Autonomous Vehicles","volume":"33","author":"He Xiangkun","year":"2024","unstructured":"Xiangkun He, Wenhui Huang, and Chen Lv. 2024. Toward Trustworthy Decision-Making for Autonomous Vehicles: A Robust Reinforcement Learning Approach with Safety Guarantees. Engineering, Vol. 33 (2024), 77--89.","journal-title":"A Robust Reinforcement Learning Approach with Safety Guarantees. Engineering"},{"volume-title":"AVGuardian: Detecting and Mitigating Publish-Subscribe Overprivilege for Autonomous Vehicle Systems. In 2020 IEEE European Symposium on Security and Privacy (EuroS&P). IEEE","author":"Hong David Ke","key":"e_1_3_2_1_60_1","unstructured":"David Ke Hong, John Kloosterman, Yuqi Jin, Yulong Cao, Qi Alfred Chen, Scott Mahlke, and Z. Morley Mao. 2020. AVGuardian: Detecting and Mitigating Publish-Subscribe Overprivilege for Autonomous Vehicle Systems. In 2020 IEEE European Symposium on Security and Privacy (EuroS&P). IEEE, New York, NY, USA, 445--459."},{"key":"e_1_3_2_1_61_1","volume-title":"Proceedings, Part IX 16","author":"Hsu Cheng-Chun","year":"2020","unstructured":"Cheng-Chun Hsu, Yi-Hsuan Tsai, Yen-Yu Lin, and Ming-Hsuan Yang. 2020. Every Pixel Matters: Center-aware Feature Alignment for Domain Adaptive Object Detector. In Computer Vision--ECCV 2020: 16th European Conference, Glasgow, UK, August 23--28, 2020, Proceedings, Part IX 16. Springer, New York, NY, USA, 733--748."},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1109\/WACV45572.2020.9093358"},{"key":"e_1_3_2_1_63_1","volume-title":"Depth-Attentional Features for Single-Image Rain Removal. In The Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE","author":"Hu Xiaowei","year":"2019","unstructured":"Xiaowei Hu, Chi-Wing Fu, Lei Zhu, and Pheng-Ann Heng. 2019. Depth-Attentional Features for Single-Image Rain Removal. In The Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, New York, NY, USA, 8022--8031."},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01295"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2021.12.315"},{"key":"e_1_3_2_1_66_1","volume-title":"Federated Learning for Object Detection in Autonomous Vehicles. In 2021 IEEE Seventh International Conference on Big Data Computing Service and Applications (BigDataService). IEEE","author":"Jallepalli Deepthi","year":"2021","unstructured":"Deepthi Jallepalli, Navya Chennagiri Ravikumar, Poojitha Vurtur Badarinath, Shravya Uchil, and Mahima Agumbe Suresh. 2021. Federated Learning for Object Detection in Autonomous Vehicles. In 2021 IEEE Seventh International Conference on Big Data Computing Service and Applications (BigDataService). IEEE, New York, NY, USA, 107--114."},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/3029798.3038437"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00091"},{"key":"e_1_3_2_1_69_1","volume-title":"Proceedings, Part XIX 16","author":"Jia Shuai","year":"2020","unstructured":"Shuai Jia, Chao Ma, Yibing Song, and Xiaokang Yang. 2020. Robust Tracking against Adversarial Attacks. In Computer Vision--ECCV 2020: 16th European Conference, Glasgow, UK, August 23--28, 2020, Proceedings, Part XIX 16. Springer, New York, NY, USA, 69--84."},{"key":"e_1_3_2_1_70_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Jing Pengfei","year":"2021","unstructured":"Pengfei Jing, Qiyi Tang, Yuefeng Du, Lei Xue, Xiapu Luo, Ting Wang, Sen Nie, and Shi Wu. 2021. Too Good to Be Safe: Tricking Lane Detection in Autonomous Driving with Crafted Perturbations. In 30th USENIX Security Symposium (USENIX Security 21). USENIX, Berkeley, CA, USA, 3237--3254."},{"key":"e_1_3_2_1_71_1","volume-title":"Autoware on Board: Enabling Autonomous Vehicles with Embedded Systems. In 2018 ACM\/IEEE 9th International Conference on Cyber-Physical Systems (ICCPS). IEEE","author":"Kato Shinpei","year":"2018","unstructured":"Shinpei Kato, Shota Tokunaga, Yuya Maruyama, Seiya Maeda, Manato Hirabayashi, Yuki Kitsukawa, Abraham Monrroy, Tomohito Ando, Yusuke Fujii, and Takuya Azumi. 2018. Autoware on Board: Enabling Autonomous Vehicles with Embedded Systems. In 2018 ACM\/IEEE 9th International Conference on Cyber-Physical Systems (ICCPS). IEEE, New York, NY, USA, 287--296."},{"volume-title":"Norms of Computer Trespass. In 116 Columbia Law Review 1143","author":"Kerr Orin S","key":"e_1_3_2_1_72_1","unstructured":"Orin S Kerr. 2016. Norms of Computer Trespass. In 116 Columbia Law Review 1143, Vol. 116. HeinOnline, Buffalo, NY, USA, 42 pages."},{"volume-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV). IEEE","author":"Khodabandeh Mehran","key":"e_1_3_2_1_73_1","unstructured":"Mehran Khodabandeh, Arash Vahdat, Mani Ranjbar, and William G. Macready. 2019. A Robust Learning Approach to Domain Adaptive Object Detection. In Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV). IEEE, New York, NY, USA, 480--490."},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560558"},{"key":"e_1_3_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3497771"},{"key":"e_1_3_2_1_76_1","unstructured":"Philip Koopman. 2023. The Cruise Safety Stand-Down -- What Happens Next? Safe Autonomy. https:\/\/safeautonomy.blogspot.com\/2023\/10\/the-cruise-safety-stand-down-and-what.html"},{"key":"e_1_3_2_1_77_1","unstructured":"Philip Koopman. 2023. Safety Analysis of Two Cruise Robotaxi Pedestrian Injuries. Safe Autonomy. https:\/\/safeautonomy.blogspot.com\/2023\/10\/safety-analysis-of-two-cruise-robotaxi.html"},{"key":"e_1_3_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.24908\/ss.v17i1\/2.12932"},{"key":"e_1_3_2_1_79_1","volume-title":"Francisco Martin Rico, and Vicente Matell\u00e1n","author":"Rodriguez Lera Francisco Javier","year":"2016","unstructured":"Francisco Javier Rodriguez Lera, Jes\u00fas Balsa, Fernando Casado, Camino Fern\u00e1ndez, Francisco Martin Rico, and Vicente Matell\u00e1n. 2016. Cybersecurity in Autonomous Systems: Evaluating the performance of hardening ROS. M\u00e1laga, Spain, Vol. 47 (2016), 7 pages."},{"key":"e_1_3_2_1_80_1","volume-title":"Unsupervised Monocular Depth Learning in Dynamic Scenes. In Conference on Robot Learning (CoRL). PMLR","author":"Li Hanhan","year":"2021","unstructured":"Hanhan Li, Ariel Gordon, Hang Zhao, Vincent Casser, and Anelia Angelova. 2021. Unsupervised Monocular Depth Learning in Dynamic Scenes. In Conference on Robot Learning (CoRL). PMLR, New York, NY, USA, 1908--1917."},{"key":"e_1_3_2_1_81_1","volume-title":"Proceedings of the IEEE\/CVF Winter Conference on Applications of Computer Vision (WACV). IEEE","author":"Li Jinlong","year":"2023","unstructured":"Jinlong Li, Runsheng Xu, Jin Ma, Qin Zou, Jiaqi Ma, and Hongkai Yu. 2023. Domain Adaptive Object Detection for Autonomous Driving under Foggy Weathe. In Proceedings of the IEEE\/CVF Winter Conference on Applications of Computer Vision (WACV). IEEE, New York, NY, USA, 612--622."},{"key":"e_1_3_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2022.3209926"},{"key":"e_1_3_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3043716"},{"key":"e_1_3_2_1_84_1","volume-title":"Self-Driving Car Footage Gives Police Controversial New Tool. https:\/\/news.bloomberglaw.com\/white-collar-and-criminal-law\/as-googles-waymo-expands-so-does-a-police-surveillance-tool [Online","author":"Love Julia","year":"2023","unstructured":"Julia Love. 2023. Self-Driving Car Footage Gives Police Controversial New Tool. https:\/\/news.bloomberglaw.com\/white-collar-and-criminal-law\/as-googles-waymo-expands-so-does-a-police-surveillance-tool [Online; accessed 19. Dec. 2023]."},{"key":"e_1_3_2_1_85_1","volume-title":"SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations. In 30th USENIX Security Symposium (USENIX Security). USENIX","author":"Lovisotto Giulio","year":"2021","unstructured":"Giulio Lovisotto, Henry Turner, Ivo Sluganovic, Martin Strohmeier, and Ivan Martinovic. 2021. SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations. In 30th USENIX Security Symposium (USENIX Security). USENIX, Berkeley, CA, USA, 1865--1882."},{"key":"e_1_3_2_1_86_1","volume-title":"Stealthy Tracking of Autonomous Vehicles with Cache Side Channels. In 29th USENIX Security Symposium (USENIX Security). USENIX","author":"Luo Mulong","year":"2020","unstructured":"Mulong Luo, Andrew C Myers, and G Edward Suh. 2020. Stealthy Tracking of Autonomous Vehicles with Cache Side Channels. In 29th USENIX Security Symposium (USENIX Security). USENIX, Berkeley, CA, USA, 859--876."},{"key":"e_1_3_2_1_87_1","doi-asserted-by":"publisher","DOI":"10.1126\/scirobotics.abm6074"},{"key":"e_1_3_2_1_88_1","volume-title":"32nd USENIX Security Symposium (USENIX Security). USENIX","author":"Man Yanmao","year":"2023","unstructured":"Yanmao Man, Raymond Muller, Ming Li, Z. Berkay Celik, and Ryan Gerdes. 2023. That Person Moves Like a Car: Misclassification Attack Detection for Autonomous Systems Using Spatiotemporal Consistency. In 32nd USENIX Security Symposium (USENIX Security). USENIX, Berkeley, CA, USA, 6929--6946."},{"volume-title":"Unmanned Systems Technology XV","author":"McClean Jarrod R.","key":"e_1_3_2_1_89_1","unstructured":"Jarrod R. McClean, Christopher Stull, Charles Farrar, and David Mascare nas. 2013. A Preliminary Cyber-Physical Security Assessment of the Robot Operating System (ROS). In Unmanned Systems Technology XV, Vol. 8741. SPIE, Bellingham, WA, USA, 874110."},{"key":"e_1_3_2_1_90_1","unstructured":"Tripp Mickle Cade Metz and Yiwen Lu. 2023. G.M.s Cruise Moved Fast in the Driverless Race. It Got Ugly. The New York Times. https:\/\/www.nytimes.com\/2023\/11\/03\/technology\/cruise-general-motors-self-driving-cars.html"},{"key":"e_1_3_2_1_91_1","volume-title":"Robustness of Object Detectors in Degrading Weather Conditions. In 2021 IEEE International Intelligent Transportation Systems Conference (ITSC). IEEE","author":"Mirza Muhammad Jehanzeb","year":"2021","unstructured":"Muhammad Jehanzeb Mirza, Cornelius Buerkle, Julio Jarquin, Michael Opitz, Fabian Oboril, Kay-Ulrich Scholl, and Horst Bischof. 2021. Robustness of Object Detectors in Degrading Weather Conditions. In 2021 IEEE International Intelligent Transportation Systems Conference (ITSC). IEEE, New York, NY, USA, 2719--2724."},{"key":"e_1_3_2_1_92_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2021.3061627"},{"key":"e_1_3_2_1_93_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559390"},{"volume-title":"https:\/\/www.openrtm.org\/openrtm\/. [Online","year":"2023","key":"e_1_3_2_1_94_1","unstructured":"OpenRTM-aist. 2023. OpenRTM-aist. https:\/\/www.openrtm.org\/openrtm\/. [Online; accessed 28-Dec-2023]."},{"key":"e_1_3_2_1_95_1","unstructured":"NHTSA Standing General Order. 2021. Standing General Order on Crash Reporting. Standard. National Highway Traffic Safety Administration."},{"key":"e_1_3_2_1_96_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3217046"},{"key":"e_1_3_2_1_97_1","volume-title":"Proceedings of the 32nd Conference on Neural Information Processing Systems (NeurIPS). Neural Information Processing Systems Foundation","author":"O'Kelly Matthew","year":"2018","unstructured":"Matthew O'Kelly, Aman Sinha, Hongseok Namkoong, John Duchi, and Russ Tedrake. 2018. Scalable End-to-End Autonomous Vehicle Testing via Rare-event Simulation. In Proceedings of the 32nd Conference on Neural Information Processing Systems (NeurIPS). Neural Information Processing Systems Foundation, San Diego, CA, USA, 12 pages."},{"volume-title":"The Laws of Robots Crimes, Contracts, and Torts","author":"Pagallo Ugo","key":"e_1_3_2_1_98_1","unstructured":"Ugo Pagallo. 2013. The Laws of Robots Crimes, Contracts, and Torts. Vol. 10. Springer, New York, NY, USA."},{"key":"e_1_3_2_1_99_1","volume-title":"ML-BPM: Multi-teacher Learning with Bidirectional Photometric Mixing for Open Compound Domain Adaptation in Semantic Segmentation. In European Conference on Computer Vision (ECCV)","author":"Pan Fei","year":"2022","unstructured":"Fei Pan, Sungsu Hur, Seokju Lee, Junsik Kim, and In So Kweon. 2022. ML-BPM: Multi-teacher Learning with Bidirectional Photometric Mixing for Open Compound Domain Adaptation in Semantic Segmentation. In European Conference on Computer Vision (ECCV). Springer, New York, NY, USA, 236--251."},{"key":"e_1_3_2_1_100_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00382"},{"key":"e_1_3_2_1_101_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW63382.2024.00271"},{"key":"e_1_3_2_1_102_1","volume-title":"https:\/\/www.yarp.it\/latest\/ Retrieved","author":"Robot Platform Yet Another","year":"2023","unstructured":"Yet Another Robot Platform. 2023. YARP. YARP. https:\/\/www.yarp.it\/latest\/ Retrieved December 28, 2023 from"},{"key":"e_1_3_2_1_103_1","doi-asserted-by":"publisher","DOI":"10.1109\/WCNCW48565.2020.9124733"},{"volume-title":"https:\/\/px4.io\/ Retrieved","year":"2023","key":"e_1_3_2_1_104_1","unstructured":"PX4. 2023. PX4. PX4. https:\/\/px4.io\/ Retrieved December 28, 2023 from"},{"volume-title":"Proceedings of the IEEE International Conference on Robotics and Automation (ICRA) Workshop on Open Source Software. IEEE","author":"Quigley Morgan","key":"e_1_3_2_1_105_1","unstructured":"Morgan Quigley, Ken Conley, Brian Gerkey, Josh Faust, Tully Foote, Jeremy Leibs, Rob Wheeler, and Andrew Y. Ng. 2009. ROS: an Open-Source Robot Operating System. In Proceedings of the IEEE International Conference on Robotics and Automation (ICRA) Workshop on Open Source Software. IEEE, New York, NY, USA, 5."},{"key":"e_1_3_2_1_106_1","unstructured":"UN R155. 2021. Uniform Provisions Concerning the Approval of Vehicles with Regards to Cyber Security and Cyber Security Management System. Standard. United Nations."},{"key":"e_1_3_2_1_107_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00087"},{"key":"e_1_3_2_1_108_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"e_1_3_2_1_109_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00712"},{"key":"e_1_3_2_1_110_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-018-1072-8"},{"key":"e_1_3_2_1_111_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3126658"},{"key":"e_1_3_2_1_112_1","doi-asserted-by":"publisher","DOI":"10.14722\/vehiclesec.2023.23055"},{"key":"e_1_3_2_1_113_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.241053"},{"key":"e_1_3_2_1_114_1","volume-title":"Proceedings of the 30th USENIX Security Symposium (USENIX Security 21)","author":"Sato Takami","year":"2021","unstructured":"Takami Sato, Junjie Shen, Ningfei Wang, Yunhan Jia, Xue Lin, and Qi Alfred Chen. 2021. Dirty Road Can Attack: Security of Deep Learning Based Automated Lane Centering Under Physical-World Attack. In Proceedings of the 30th USENIX Security Symposium (USENIX Security 21). USENIX, Berkeley, CA, USA, 3309--3326."},{"volume-title":"https:\/\/scale.com\/blog\/afm1 Retrieved","year":"2023","key":"e_1_3_2_1_115_1","unstructured":"Scale. 2023. Scale. Scale. https:\/\/scale.com\/blog\/afm1 Retrieved December 28, 2023 from"},{"key":"e_1_3_2_1_116_1","volume-title":"Robotaxis are Driving on Thin Ice. The Verge. https:\/\/www.theverge.com\/2023\/8\/18\/23837217\/cruise-robotaxi-driverless-crash-fire-truck-san-francisco Retrieved","author":"Shakir Umar","year":"2023","unstructured":"Umar Shakir. 2023. Robotaxis are Driving on Thin Ice. The Verge. https:\/\/www.theverge.com\/2023\/8\/18\/23837217\/cruise-robotaxi-driverless-crash-fire-truck-san-francisco Retrieved December 22, 2023 from"},{"key":"e_1_3_2_1_117_1","unstructured":"Shai Shalev-Shwartz Shaked Shammah and Amnon Shashua. 2017. On a Formal Model of Safe and Scalable Self-Driving Cars. Mobileye.showeprint[arXiv]1708.06374 [cs.RO]"},{"key":"e_1_3_2_1_118_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66787-4_22"},{"volume-title":"Proceedings of the European Conference on Computer Vision (ECCV)","author":"Sindagi Vishwanath A.","key":"e_1_3_2_1_119_1","unstructured":"Vishwanath A. Sindagi, Poojan Oza, Rajeev Yasarla, and Vishal M. Patel. 2020. Prior-Based Domain Adaptive Object Detection for Hazy and Rainy Conditions. In Proceedings of the European Conference on Computer Vision (ECCV). Springer, New York, NY, USA, 763--780."},{"key":"e_1_3_2_1_120_1","unstructured":"IEEE Vehicular Technology Society. 2022. Assumptions in Safety-Related Models for Automated Driving Systems. Standard. Institute of Electrical and Electronics Engineers. 1--59 pages."},{"key":"e_1_3_2_1_121_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10506-016-9192-3"},{"key":"e_1_3_2_1_122_1","doi-asserted-by":"publisher","DOI":"10.5555\/3620237.3620403"},{"key":"e_1_3_2_1_123_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (USENIX Security 20)","author":"Sugawara Takeshi","year":"2020","unstructured":"Takeshi Sugawara, Benjamin Cyr, Sara Rampazzi, Daniel Genkin, and Kevin Fu. 2020. Light Commands: Laser-Based Audio Injection Attacks on Voice-Controllable Systems. In Proceedings of the 29th USENIX Security Symposium (USENIX Security 20). USENIX, Berkeley, CA, USA, 2631--2648."},{"volume-title":"Proceedings of the 29th USENIX Security Symposium (USENIX Security 20)","author":"Sun Jiachen","key":"e_1_3_2_1_124_1","unstructured":"Jiachen Sun, Yulong Cao, Qi Alfred Chen, and Z. Morley Mao. 2020. Towards Robust LiDAR-Based Perception in Autonomous Driving: General Black-Box Adversarial Sensor Attack and Countermeasures. In Proceedings of the 29th USENIX Security Symposium (USENIX Security 20). USENIX, Berkeley, CA, USA, 877--894."},{"key":"e_1_3_2_1_125_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.procir.2022.05.251"},{"key":"e_1_3_2_1_126_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.42"},{"key":"e_1_3_2_1_127_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01373"},{"key":"e_1_3_2_1_128_1","first-page":"117","article-title":"Machines Without Principals: Liability Rules and Artificial Intelligence","volume":"89","author":"Vladeck David C","year":"2014","unstructured":"David C Vladeck. 2014. Machines Without Principals: Liability Rules and Artificial Intelligence. Wash. L. Rev., Vol. 89 (2014), 117.","journal-title":"Wash. L. Rev."},{"key":"e_1_3_2_1_129_1","volume-title":"Proceedings of the International Conference on Learning Representations (ICLR). ICLR","author":"Wang Dequan","year":"2020","unstructured":"Dequan Wang, Evan Shelhamer, Shaoteng Liu, Bruno Olshausen, and Trevor Darrell. 2020. Tent: Fully Test-Time Adaptation by Entropy Minimization. In Proceedings of the International Conference on Learning Representations (ICLR). ICLR, Appleton, WI, USA, 15 pages."},{"key":"e_1_3_2_1_130_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484766"},{"key":"e_1_3_2_1_131_1","volume-title":"https:\/\/waymo.com\/safety\/ Retrieved","author":"Safety Waymo","year":"2023","unstructured":"Waymo. 2023. Waymo Safety. Waymo. https:\/\/waymo.com\/safety\/ Retrieved December 22, 2023 from"},{"volume-title":"https:\/\/wayve.ai\/thinking\/lingo-natural-language-autonomous-driving\/ Retrieved","year":"2023","key":"e_1_3_2_1_132_1","unstructured":"Wayve. 2023. Wayve. Wayve. https:\/\/wayve.ai\/thinking\/lingo-natural-language-autonomous-driving\/ Retrieved December 28, 2023 from"},{"key":"e_1_3_2_1_133_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00646"},{"key":"e_1_3_2_1_134_1","first-page":"169","article-title":"Autonomous Vehicle Regulation & Trust: The Impact of Failures to Comply with Standards","volume":"27","author":"Widen William H.","year":"2022","unstructured":"William H. Widen and Philip Koopman. 2022. Autonomous Vehicle Regulation & Trust: The Impact of Failures to Comply with Standards. UCLA JL & Tech., Vol. 27 (2022), 169.","journal-title":"UCLA JL & Tech."},{"key":"e_1_3_2_1_135_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2021.3055616"},{"key":"e_1_3_2_1_136_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58548-8_1"},{"key":"e_1_3_2_1_137_1","volume-title":"Proceedings of the 32nd USENIX Security Symposium (USENIX Security 23)","author":"Xiao Qifan","year":"2023","unstructured":"Qifan Xiao, Xudong Pan, Yifan Lu, Mi Zhang, Jiarun Dai, and Min Yang. 2023. Exorcising \"Wraith\": Protecting LiDAR-based Object Detector in Automated Driving System from Appearing Attacks. In Proceedings of the 32nd USENIX Security Symposium (USENIX Security 23). USENIX, Berkeley, CA, USA, 2939--2956."},{"volume-title":"Protection Methods, and Future Directions","author":"Xie Chulin","key":"e_1_3_2_1_138_1","unstructured":"Chulin Xie, Zhong Cao, Yunhui Long, Diange Yang, Ding Zhao, and Bo Li. 2019. Privacy of Autonomous Vehicles: Risks, Protection Methods, and Future Directions. University of Illinois Urbana-Champaign.showeprint[arXiv]2209.04022 [cs.AI]"},{"key":"e_1_3_2_1_139_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20056-4_36"},{"key":"e_1_3_2_1_140_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58558-7_39"},{"key":"e_1_3_2_1_141_1","first-page":"109","article-title":"Can You Trust Autonomous Vehicles: Contactless Attacks Against Sensors of Self-Driving Vehicle","volume":"24","author":"Yan Chen","year":"2016","unstructured":"Chen Yan, Wenyuan Xu, and Jianhao Liu. 2016. Can You Trust Autonomous Vehicles: Contactless Attacks Against Sensors of Self-Driving Vehicle. Def Con, Vol. 24, 8 (2016), 109.","journal-title":"Def Con"},{"key":"e_1_3_2_1_142_1","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3453106"},{"key":"e_1_3_2_1_143_1","doi-asserted-by":"publisher","DOI":"10.1145\/3469261.3469406"},{"key":"e_1_3_2_1_144_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00271"},{"key":"e_1_3_2_1_145_1","doi-asserted-by":"publisher","DOI":"10.1109\/JAS.2021.1004261"},{"key":"e_1_3_2_1_146_1","volume-title":"Cruise's Safety Record Over 1 Million Driverless Miles. Cruise. https:\/\/getcruise.com\/news\/blog\/2023\/cruises-safety-record-over-one-million-driverless-miles\/ Retrieved","author":"Zhang Louise","year":"2023","unstructured":"Louise Zhang. 2023. Cruise's Safety Record Over 1 Million Driverless Miles. Cruise. https:\/\/getcruise.com\/news\/blog\/2023\/cruises-safety-record-over-one-million-driverless-miles\/ Retrieved December 22, 2023 from"},{"key":"e_1_3_2_1_147_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58523-5_6"},{"key":"e_1_3_2_1_148_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01296"},{"key":"e_1_3_2_1_149_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485730.3485935"},{"key":"e_1_3_2_1_150_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485377"}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Salt Lake City UT USA","acronym":"CCS '24"},"container-title":["Proceedings of the 2024 Cyber Security in CarS Workshop"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3689936.3694694","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3689936.3694694","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T18:36:02Z","timestamp":1755974162000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3689936.3694694"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,11,20]]},"references-count":150,"alternative-id":["10.1145\/3689936.3694694","10.1145\/3689936"],"URL":"https:\/\/doi.org\/10.1145\/3689936.3694694","relation":{},"subject":[],"published":{"date-parts":[[2023,11,20]]},"assertion":[{"value":"2024-11-20","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}