{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,17]],"date-time":"2026-05-17T09:09:49Z","timestamp":1779008989528,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":59,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,5,10]],"date-time":"2026-05-10T00:00:00Z","timestamp":1778371200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2154059"],"award-info":[{"award-number":["CNS-2154059"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2120369"],"award-info":[{"award-number":["CNS-2120369"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2413876"],"award-info":[{"award-number":["CNS-2413876"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,5,11]]},"DOI":"10.1145\/3774906.3800480","type":"proceedings-article","created":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T14:20:14Z","timestamp":1778250014000},"page":"833-846","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Defending Autonomous Driving Perception against Adversarial Object-Based Attacks via Motion Planning"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6956-8126","authenticated-orcid":false,"given":"Zihao","family":"Liu","sequence":"first","affiliation":[{"name":"Iowa State University, Ames, Iowa, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5562-8001","authenticated-orcid":false,"given":"Yan","family":"Zhang","sequence":"additional","affiliation":[{"name":"Iowa State University, Ames, Iowa, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3000-3918","authenticated-orcid":false,"given":"Yi","family":"Zhu","sequence":"additional","affiliation":[{"name":"Wayne State University, Detroit, Michigan, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7223-543X","authenticated-orcid":false,"given":"Lu","family":"Su","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, Indiana, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4679-6572","authenticated-orcid":false,"given":"Chunming","family":"Qiao","sequence":"additional","affiliation":[{"name":"SUNY at Buffalo, Buffalo, New York, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9646-7099","authenticated-orcid":false,"given":"Chenglin","family":"Miao","sequence":"additional","affiliation":[{"name":"Iowa State University, Ames, Iowa, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2026,5,10]]},"reference":[{"key":"e_1_3_3_1_2_2","unstructured":"[n. d.]. Autoware Foundation. https:\/\/www.autoware.org\/"},{"key":"e_1_3_3_1_3_2","unstructured":"[n. d.]. Baidu Apollo. https:\/\/developer.apollo.auto\/"},{"key":"e_1_3_3_1_4_2","unstructured":"[n. d.]. Braking distance. https:\/\/en.wikipedia.org\/wiki\/Braking_distance"},{"key":"e_1_3_3_1_5_2","unstructured":"Il Bae Jaeyoung Moon Junekyo Jhung Ho Suk Taewoo Kim Hyungbin Park Jaekwang Cha Jinhyuk Kim Dohyun Kim and Shiho Kim. 2020. Self-driving like a human driver instead of a robocar: Personalized comfortable driving experience for autonomous vehicles. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2001.03908 (2020)."},{"key":"e_1_3_3_1_6_2","doi-asserted-by":"crossref","unstructured":"Stefania Bartoletti Henk Wymeersch Tomasz Mach Oliver Brunneg\u00e5rd Domenico Giustiniano Peter Hammarberg Musa\u00a0Furkan Keskin Jesus\u00a0O Lacruz Sara\u00a0Modarres Razavi Joakim R\u00f6nnblom et\u00a0al. 2021. Positioning and sensing for vehicular safety applications in 5G and beyond. IEEE Communications Magazine 59 11 (2021) 15\u201321.","DOI":"10.1109\/MCOM.011.2100339"},{"key":"e_1_3_3_1_7_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00076"},{"key":"e_1_3_3_1_8_2","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339815"},{"key":"e_1_3_3_1_9_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-10925-7_4"},{"key":"e_1_3_3_1_10_2","unstructured":"Zhiyuan Cheng Hongjun Choi James Liang Shiwei Feng Guanhong Tao Dongfang Liu Michael Zuzak and Xiangyu Zhang. 2023. Fusion is Not Enough: Single Modal Attacks on Fusion Models for 3D Object Detection. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2304.14614 (2023)."},{"key":"e_1_3_3_1_11_2","unstructured":"Pranav\u00a0Singh Chib and Pravendra Singh. 2023. Recent advancements in end-to-end autonomous driving using deep learning: A survey. IEEE Transactions on Intelligent Vehicles (2023)."},{"key":"e_1_3_3_1_12_2","first-page":"1","volume-title":"Conference on robot learning","author":"Dosovitskiy Alexey","year":"2017","unstructured":"Alexey Dosovitskiy, German Ros, Felipe Codevilla, Antonio Lopez, and Vladlen Koltun. 2017. CARLA: An open urban driving simulator. In Conference on robot learning. PMLR, 1\u201316."},{"key":"e_1_3_3_1_13_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"e_1_3_3_1_14_2","unstructured":"Ross Girshick. 2015. Fast r-cnn. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1504.08083 (2015)."},{"key":"e_1_3_3_1_15_2","unstructured":"Ian\u00a0J Goodfellow Jonathon Shlens and Christian Szegedy. 2014. Explaining and harnessing adversarial examples. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1412.6572 (2014)."},{"key":"e_1_3_3_1_16_2","doi-asserted-by":"crossref","unstructured":"Sorin Grigorescu Bogdan Trasnea Tiberiu Cocias and Gigel Macesanu. 2020. A survey of deep learning techniques for autonomous driving. Journal of field robotics 37 3 (2020) 362\u2013386.","DOI":"10.1002\/rob.21918"},{"key":"e_1_3_3_1_17_2","doi-asserted-by":"crossref","unstructured":"Tianyu Gu Kang Liu Brendan Dolan-Gavitt and Siddharth Garg. 2019. Badnets: Evaluating backdooring attacks on deep neural networks. IEEE Access 7 (2019) 47230\u201347244.","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"e_1_3_3_1_18_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP59255.2023.10355609"},{"key":"e_1_3_3_1_19_2","unstructured":"Junfeng Guan Sohrab Madani Suraj Jog and Haitham Hassanieh. 2019. High resolution millimeter wave imaging for self-driving cars. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1912.09579 (2019)."},{"key":"e_1_3_3_1_20_2","first-page":"1861","volume-title":"International conference on machine learning","author":"Haarnoja Tuomas","year":"2018","unstructured":"Tuomas Haarnoja, Aurick Zhou, Pieter Abbeel, and Sergey Levine. 2018. Soft actor-critic: Off-policy maximum entropy deep reinforcement learning with a stochastic actor. In International conference on machine learning. Pmlr, 1861\u20131870."},{"key":"e_1_3_3_1_21_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00041"},{"key":"e_1_3_3_1_22_2","doi-asserted-by":"crossref","unstructured":"Sepp Hochreiter and J\u00fcrgen Schmidhuber. 1997. Long short-term memory. Neural computation 9 8 (1997) 1735\u20131780.","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"e_1_3_3_1_23_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179458"},{"key":"e_1_3_3_1_24_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00744"},{"key":"e_1_3_3_1_25_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01298"},{"key":"e_1_3_3_1_26_2","doi-asserted-by":"crossref","unstructured":"Yiming Li Yong Jiang Zhifeng Li and Shu-Tao Xia. 2022. Backdoor learning: A survey. IEEE transactions on neural networks and learning systems 35 1 (2022) 5\u201322.","DOI":"10.1109\/TNNLS.2022.3182979"},{"key":"e_1_3_3_1_27_2","doi-asserted-by":"publisher","DOI":"10.1145\/3666025.3699343"},{"key":"e_1_3_3_1_28_2","doi-asserted-by":"crossref","unstructured":"Yongsen Ma Gang Zhou and Shuangquan Wang. 2019. WiFi sensing with channel state information: A survey. ACM Computing Surveys (CSUR) 52 3 (2019) 1\u201336.","DOI":"10.1145\/3310194"},{"key":"e_1_3_3_1_29_2","unstructured":"Aleksander Madry. 2017. Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1706.06083 (2017)."},{"key":"e_1_3_3_1_30_2","doi-asserted-by":"publisher","DOI":"10.18260\/1-2--3800"},{"key":"e_1_3_3_1_31_2","doi-asserted-by":"publisher","DOI":"10.1145\/3452296.3472896"},{"key":"e_1_3_3_1_32_2","doi-asserted-by":"publisher","DOI":"10.1145\/3581791.3596844"},{"key":"e_1_3_3_1_33_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICRA48891.2023.10161429"},{"key":"e_1_3_3_1_34_2","doi-asserted-by":"publisher","DOI":"10.1109\/IROS47612.2022.9982080"},{"key":"e_1_3_3_1_35_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00051"},{"key":"e_1_3_3_1_36_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.91"},{"key":"e_1_3_3_1_37_2","unstructured":"Sergio\u00a0Alberto Salguero-Luna Kelsey\u00a0Alejandra Ram\u00edrez-Guti\u00e9rrez and Alfonso Mart\u00ednez-Cruz. 2024. A State-of-the-Art Review on Attacks and Defense Mechanisms for LiDAR on Autonomous Vehicles. IEEE Transactions on Intelligent Transportation Systems (2024)."},{"key":"e_1_3_3_1_38_2","unstructured":"Louis\u00a0L Scharf and C\u00e9dric Demeure. 1991. Statistical signal processing: detection estimation and time series analysis. (No Title) (1991)."},{"key":"e_1_3_3_1_39_2","unstructured":"Glenn Shafer and Vladimir Vovk. 2008. A tutorial on conformal prediction. Journal of Machine Learning Research 9 3 (2008)."},{"key":"e_1_3_3_1_40_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00086"},{"key":"e_1_3_3_1_41_2","doi-asserted-by":"crossref","unstructured":"Roman Solovyev Weimin Wang and Tatiana Gabruseva. 2021. Weighted boxes fusion: Ensembling boxes from different object detection models. Image and Vision Computing 107 (2021) 104117.","DOI":"10.1016\/j.imavis.2021.104117"},{"key":"e_1_3_3_1_42_2","first-page":"877","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Sun Jiachen","year":"2020","unstructured":"Jiachen Sun, Yulong Cao, Qi\u00a0Alfred Chen, and Z\u00a0Morley Mao. 2020. Towards robust { LiDAR-based} perception in autonomous driving: General black-box adversarial sensor attack and countermeasures. In 29th USENIX Security Symposium (USENIX Security 20). 877\u2013894."},{"key":"e_1_3_3_1_43_2","doi-asserted-by":"crossref","unstructured":"Siyu Teng Xuemin Hu Peng Deng Bai Li Yuchen Li Yunfeng Ai Dongsheng Yang Lingxi Li Zhe Xuanyuan Fenghua Zhu et\u00a0al. 2023. Motion planning for autonomous driving: The state of the art and future perspectives. IEEE Transactions on Intelligent Vehicles 8 6 (2023) 3692\u20133711.","DOI":"10.1109\/TIV.2023.3274536"},{"key":"e_1_3_3_1_44_2","unstructured":"Florian Tram\u00e8r Alexey Kurakin Nicolas Papernot Ian Goodfellow Dan Boneh and Patrick McDaniel. 2017. Ensemble adversarial training: Attacks and defenses. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1705.07204 (2017)."},{"key":"e_1_3_3_1_45_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01373"},{"key":"e_1_3_3_1_46_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00407"},{"key":"e_1_3_3_1_47_2","doi-asserted-by":"crossref","unstructured":"Xuan Wang Kaiqiang Li and Abdellah Chehri. 2023. Multi-sensor fusion technology for 3D object detection in autonomous driving: A review. IEEE Transactions on Intelligent Transportation Systems (2023).","DOI":"10.1109\/TITS.2023.3317372"},{"key":"e_1_3_3_1_48_2","doi-asserted-by":"crossref","unstructured":"Hui Wei Hao Tang Xuemei Jia Zhixiang Wang Hanxun Yu Zhubo Li Shin\u2019ichi Satoh Luc Van\u00a0Gool and Zheng Wang. 2024. Physical adversarial attack meets computer vision: A decade survey. IEEE Transactions on Pattern Analysis and Machine Intelligence (2024).","DOI":"10.1109\/TPAMI.2024.3430860"},{"key":"e_1_3_3_1_49_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.153"},{"key":"e_1_3_3_1_50_2","doi-asserted-by":"crossref","unstructured":"Chejian Xu Wenhao Ding Weijie Lyu Zuxin Liu Shuai Wang Yihan He Hanjiang Hu Ding Zhao and Bo Li. 2022. Safebench: A benchmarking platform for safety evaluation of autonomous vehicles. Advances in Neural Information Processing Systems 35 (2022) 25667\u201325682.","DOI":"10.52202\/068431-1861"},{"key":"e_1_3_3_1_51_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00798"},{"key":"e_1_3_3_1_52_2","doi-asserted-by":"crossref","unstructured":"Jiadi Yu Hongzi Zhu Haofu Han Yingying\u00a0Jennifer Chen Jie Yang Yanmin Zhu Zhongyang Chen Guangtao Xue and Minglu Li. 2015. Senspeed: Sensing driving conditions to estimate vehicle speed in urban environments. IEEE Transactions on Mobile Computing 15 1 (2015) 202\u2013216.","DOI":"10.1109\/TMC.2015.2411270"},{"key":"e_1_3_3_1_53_2","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690284"},{"key":"e_1_3_3_1_54_2","doi-asserted-by":"publisher","DOI":"10.1145\/3666025.3699345"},{"key":"e_1_3_3_1_55_2","doi-asserted-by":"publisher","DOI":"10.1145\/3719027.3765227"},{"key":"e_1_3_3_1_56_2","doi-asserted-by":"publisher","DOI":"10.1145\/3560905.3568539"},{"key":"e_1_3_3_1_57_2","first-page":"7339","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Zhu Shenchen","year":"2024","unstructured":"Shenchen Zhu, Yue Zhao, Kai Chen, Bo Wang, Hualong Ma, et\u00a0al. 2024. AE-Morpher: Improve Physical Robustness of Adversarial Objects against LiDAR-based Detectors via Object Reconstruction. In 33rd USENIX Security Symposium (USENIX Security 24). 7339\u20137356."},{"key":"e_1_3_3_1_58_2","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616661"},{"key":"e_1_3_3_1_59_2","doi-asserted-by":"publisher","DOI":"10.1145\/3636534.3649372"},{"key":"e_1_3_3_1_60_2","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485377"}],"event":{"name":"SenSys '26: ACM\/IEEE International Conference on Embedded Artificial Intelligence and Sensing Systems","location":"Saint Malo France","acronym":"SenSys '26","sponsor":["SIGBED ACM Special Interest Group on Embedded Systems","SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing","IEEE CS"]},"container-title":["Proceedings of the 2026 ACM\/IEEE International Conference on Embedded Artificial Intelligence and Sensing Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/abs\/10.1145\/3774906.3800480","content-type":"text\/html","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3774906.3800480","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3774906.3800480","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,17]],"date-time":"2026-05-17T08:36:41Z","timestamp":1779007001000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3774906.3800480"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,10]]},"references-count":59,"alternative-id":["10.1145\/3774906.3800480","10.1145\/3774906"],"URL":"https:\/\/doi.org\/10.1145\/3774906.3800480","relation":{},"subject":[],"published":{"date-parts":[[2026,5,10]]},"assertion":[{"value":"2026-05-10","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}