{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T08:01:23Z","timestamp":1780473683263,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":56,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,9,25]],"date-time":"2025-09-25T00:00:00Z","timestamp":1758758400000},"content-version":"vor","delay-in-days":94,"URL":"http:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Research Foundation, Singapore and DSO National Laboratories","award":["AI Singapore Programme (AISG Award No: AISG2-GC-2023-006)"],"award-info":[{"award-number":["AI Singapore Programme (AISG Award No: AISG2-GC-2023-006)"]}]},{"name":"Ministry of Education, Singapore","award":["MOE AcRF Tier 1"],"award-info":[{"award-number":["MOE AcRF Tier 1"]}]},{"name":"SUTD","award":["SUTD Kickstarter Initiative (SKI) 2021_06_11"],"award-info":[{"award-number":["SUTD Kickstarter Initiative (SKI) 2021_06_11"]}]},{"name":"Hong Kong Research Grant Council","award":["GRF 11210622"],"award-info":[{"award-number":["GRF 11210622"]}]},{"DOI":"10.13039\/100000001","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["CNS 2413876"],"award-info":[{"award-number":["CNS 2413876"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,6,23]]},"DOI":"10.1145\/3711875.3729157","type":"proceedings-article","created":{"date-parts":[[2025,10,2]],"date-time":"2025-10-02T19:30:22Z","timestamp":1759433422000},"page":"431-444","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Dynamic Defense for Car-Borne LiDAR Vehicle Detection"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-8934-194X","authenticated-orcid":false,"given":"Yihan","family":"Xu","sequence":"first","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7464-0823","authenticated-orcid":false,"given":"Dongfang","family":"Guo","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3611-9404","authenticated-orcid":false,"given":"Qun","family":"Song","sequence":"additional","affiliation":[{"name":"Singapore University of Technology and Design, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9932-5299","authenticated-orcid":false,"given":"Yang","family":"Lou","sequence":"additional","affiliation":[{"name":"City University of Hong Kong, Hong Kong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3000-3918","authenticated-orcid":false,"given":"Yi","family":"Zhu","sequence":"additional","affiliation":[{"name":"Wayne State University, Detroit, Michigan, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9318-1482","authenticated-orcid":false,"given":"Jianping","family":"Wang","sequence":"additional","affiliation":[{"name":"City University of Hong Kong, Hong Kong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4679-6572","authenticated-orcid":false,"given":"Chunming","family":"Qiao","sequence":"additional","affiliation":[{"name":"University at Buffalo, Buffalo, New York, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8441-9973","authenticated-orcid":false,"given":"Rui","family":"Tan","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,9,25]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2025. Apollo Auto: perception-lidar-detection. https:\/\/github.com\/ApolloAuto\/apollo\/tree\/master\/modules\/perception\/lidar_detection."},{"key":"e_1_3_2_1_2_1","unstructured":"2025. Autoware Universe. https:\/\/github.com\/autowarefoundation\/autoware.universe."},{"key":"e_1_3_2_1_3_1","unstructured":"2025. Lixiang L9. https:\/\/www.lixiang.com\/configuration.html?carModel=L9."},{"key":"e_1_3_2_1_4_1","unstructured":"2025. VueOne. https:\/\/www.vueron.com\/vueone\/."},{"key":"e_1_3_2_1_5_1","unstructured":"2025. Waymo Driver. https:\/\/waymo.com\/waymo-driver\/."},{"key":"e_1_3_2_1_6_1","unstructured":"2025. Xiaomi Unveils Five Core Automotive Technologies and Debuts Xiaomi SU7 Completing the Human x Car x Home Smart Ecosystem. https:\/\/www.mi.com\/global\/discover\/article?id=3095"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP42928.2021.9506016"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00076"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339815"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2963791"},{"key":"e_1_3_2_1_12_1","volume-title":"ADoPT: LiDAR Spoofing Attack Detection Based on Point-Level Temporal Consistency. In British Machine Vision Conference (BMVC).","author":"Cho Minkyoung","year":"2023","unstructured":"Minkyoung Cho, Yulong Cao, Zixiang Zhou, and Z.Morley Mao. 2023. ADoPT: LiDAR Spoofing Attack Detection Based on Point-Level Temporal Consistency. In British Machine Vision Conference (BMVC)."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/WACV51458.2022.00385"},{"key":"e_1_3_2_1_14_1","first-page":"226","article-title":"A density-based algorithm for discovering clusters in large spatial databases with noise","volume":"96","author":"Ester Martin","year":"1996","unstructured":"Martin Ester, Hans-Peter Kriegel, J\u00f6rg Sander, and Xiaowei Xu. 1996. A density-based algorithm for discovering clusters in large spatial databases with noise. In KDD, Vol. 96. 226\u2013231.","journal-title":"KDD"},{"key":"e_1_3_2_1_15_1","volume-title":"The kitti vision benchmark suite. URL http:\/\/www.cvlibs.net\/datasets\/kitti 2, 5","author":"Geiger Andreas","year":"2015","unstructured":"Andreas Geiger, Philip Lenz, Christoph Stiller, and Raquel Urtasun. 2015. The kitti vision benchmark suite. URL http:\/\/www.cvlibs.net\/datasets\/kitti 2, 5 (2015), 1\u201313."},{"key":"e_1_3_2_1_16_1","volume-title":"International Conference on Learning Representations (ICLR).","author":"Goodfellow Ian J","year":"2015","unstructured":"Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy. 2015. Explaining and harnessing adversarial examples. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_1_17_1","volume-title":"HyperNetworks. In International Conference on Learning Representations (ICLR).","author":"Ha David","unstructured":"David Ha, Andrew M. Dai, and Quoc V. Le. 2017. HyperNetworks. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.14722\/autosec.2021.23016"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW54247.2022.9833890"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-88418-5_33"},{"key":"e_1_3_2_1_21_1","volume-title":"IEEE Symposium on Security and Privacy (SP).","author":"Jin Zizhi","year":"2023","unstructured":"Zizhi Jin, Xiaoyu Ji, Yushi Cheng, Bo Yang, Chen Yan, and Wenyuan Xu. 2023. Plalidar: Physical laser attacks against lidar-based 3d object detection in autonomous vehicle. In IEEE Symposium on Security and Privacy (SP)."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01298"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179303"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3193449"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8803770"},{"key":"e_1_3_2_1_27_1","volume-title":"Dpatch: An adversarial patch attack on object detectors. arXiv preprint arXiv:1806.02299","author":"Liu Xin","year":"2018","unstructured":"Xin Liu, Huanrui Yang, Ziwei Liu, Linghao Song, Hai Li, and Yiran Chen. 2018. Dpatch: An adversarial patch attack on object detectors. arXiv preprint arXiv:1806.02299 (2018)."},{"key":"e_1_3_2_1_28_1","volume-title":"International Conference on Learning Representations (ICLR).","author":"Madry Aleksander","year":"2018","unstructured":"Aleksander Madry, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, and Adrian Vladu. 2018. Towards deep learning models resistant to adversarial attacks. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_1_29_1","volume-title":"USENIX Security Symposium.","author":"Man Yanmao","year":"2023","unstructured":"Yanmao Man, Raymond Muller, Ming Li, Z Berkay Celik, and Ryan Gerdes. 2023. That person moves like a car: Misclassification attack detection for autonomous systems using spatiotemporal consistency. In USENIX Security Symposium."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2022.108796"},{"key":"e_1_3_2_1_31_1","volume-title":"Performant Neural Networks. In International Conference on Machine Learning (ICML).","author":"Ratzlaff Neale","year":"2019","unstructured":"Neale Ratzlaff and Fuxin Li. 2019. HyperGAN: A Generative Model for Diverse, Performant Neural Networks. In International Conference on Machine Learning (ICML)."},{"key":"e_1_3_2_1_32_1","volume-title":"Nico Blodow, Mihai Dolha, and Michael Beetz.","author":"Rusu Radu Bogdan","year":"2008","unstructured":"Radu Bogdan Rusu, Zoltan Csaba Marton, Nico Blodow, Mihai Dolha, and Michael Beetz. 2008. Towards 3D Point cloud based object maps for household environments. Robotics and Autonomous Systems (Nov 2008), 927\u2013941."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"crossref","unstructured":"Hocheol Shin Dohyun Kim Yujin Kwon and Yongdae Kim. 2017. Illusion and dazzle: Adversarial optical channel exploits against lidars for automotive applications. In Cryptographic Hardware and Embedded Systems (CHES).","DOI":"10.1007\/978-3-319-66787-4_22"},{"key":"e_1_3_2_1_34_1","volume-title":"12th USENIX workshop on offensive technologies (WOOT 18)","author":"Song Dawn","year":"2018","unstructured":"Dawn Song, Kevin Eykholt, Ivan Evtimov, Earlence Fernandes, Bo Li, Amir Rahmati, Florian Tramer, Atul Prakash, and Tadayoshi Kohno. 2018. Physical adversarial examples for object detectors. In 12th USENIX workshop on offensive technologies (WOOT 18)."},{"key":"e_1_3_2_1_35_1","volume-title":"International Conference on Embedded Wireless Systems and Networks (EWSN).","author":"Song Qun","year":"2022","unstructured":"Qun Song, Zhenyu Yan, Wenjie Luo, and Rui Tan. 2022. Sardino: Ultra-Fast Dynamic Ensemble for Secure Visual Sensing at Mobile Edge. In International Conference on Embedded Wireless Systems and Networks (EWSN)."},{"key":"e_1_3_2_1_36_1","volume-title":"USENIX Security Symposium.","author":"Sun Jiachen","year":"2020","unstructured":"Jiachen Sun, Yulong Cao, Qi Alfred Chen, and Z Morley Mao. 2020. Towards robust LiDAR-based perception in autonomous driving: General black-box adversarial sensor attack and countermeasures. In USENIX Security Symposium."},{"key":"e_1_3_2_1_37_1","volume-title":"International Conference on Machine Learning. PMLR, 33100\u201333114","author":"Sun Jiachen","year":"2023","unstructured":"Jiachen Sun, Jiongxiao Wang, Weili Nie, Zhiding Yu, Zhuoqing Mao, and Chaowei Xiao. 2023. A critical revisit of adversarial robustness in 3D point cloud recognition with diffusion-driven purification. In International Conference on Machine Learning. PMLR, 33100\u201333114."},{"key":"e_1_3_2_1_38_1","volume-title":"Adversarial training and robustness for multiple perturbations. Advances in neural information processing systems 32","author":"Tramer Florian","year":"2019","unstructured":"Florian Tramer and Dan Boneh. 2019. Adversarial training and robustness for multiple perturbations. Advances in neural information processing systems 32 (2019)."},{"key":"e_1_3_2_1_39_1","volume-title":"Conference on Robot Learning (CoRL).","author":"Tu James","year":"2022","unstructured":"James Tu, Huichen Li, Xinchen Yan, Mengye Ren, Yun Chen, Ming Liang, Eilyan Bitar, Ersin Yumer, and Raquel Urtasun. 2022. Exploring adversarial robustness of multi-sensor perception systems in self driving. In Conference on Robot Learning (CoRL)."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01373"},{"key":"e_1_3_2_1_41_1","volume-title":"Neural network diffusion. arXiv preprint arXiv:2402.13144","author":"Wang Kai","year":"2024","unstructured":"Kai Wang, Zhaopan Xu, Yukun Zhou, Zelin Zang, Trevor Darrell, Zhuang Liu, and Yang You. 2024. Neural network diffusion. arXiv preprint arXiv:2402.13144 (2024)."},{"key":"e_1_3_2_1_42_1","volume-title":"Transferable adversarial attacks for image and video object detection. arXiv preprint arXiv:1811.12641","author":"Wei Xingxing","year":"2018","unstructured":"Xingxing Wei, Siyuan Liang, Ning Chen, and Xiaochun Cao. 2018. Transferable adversarial attacks for image and video object detection. arXiv preprint arXiv:1811.12641 (2018)."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00935"},{"key":"e_1_3_2_1_44_1","volume-title":"USENIX Security Symposium.","author":"Xiao Qifan","year":"2023","unstructured":"Qifan Xiao, Xudong Pan, Yifan Lu, Mi Zhang, Jiarun Dai, and Min Yang. 2023. Exorcising \"Wraith\": Protecting LiDAR-based Object Detector in Automated Driving System from Appearing Attacks. In USENIX Security Symposium."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3453106"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3469261.3469406"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2023.03.084"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3612018"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/3666025.3699345"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00168"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.dcan.2021.07.006"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00205"},{"key":"e_1_3_2_1_53_1","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Zhu Shenchen","year":"2024","unstructured":"Shenchen Zhu, Yue Zhao, Kai Chen, Bo Wang, Hualong Ma, et al. 2024. AE-Morpher: Improve Physical Robustness of Adversarial Objects against {LiDAR-based} Detectors via Object Reconstruction. In 33rd USENIX Security Symposium (USENIX Security 24). 7339\u20137356."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485730.3485935"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/3636534.3649372"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485377"}],"event":{"name":"MobiSys '25: 23rd Annual International Conference on Mobile Systems, Applications and Services","location":"Hilton Anaheim Anaheim CA USA","acronym":"MobiSys '25","sponsor":["SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing","SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the 23rd Annual International Conference on Mobile Systems, Applications and Services"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3711875.3729157","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3711875.3729157","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,2]],"date-time":"2025-10-02T19:33:31Z","timestamp":1759433611000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3711875.3729157"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,23]]},"references-count":56,"alternative-id":["10.1145\/3711875.3729157","10.1145\/3711875"],"URL":"https:\/\/doi.org\/10.1145\/3711875.3729157","relation":{},"subject":[],"published":{"date-parts":[[2025,6,23]]},"assertion":[{"value":"2025-09-25","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}