{"total":95,"rows":[{"id":"2101.06549","title":"AdvSim: Generating Safety-Critical Scenarios for Self-Driving Vehicles","created":"2021-01-16","cited_by_count":137,"area":null},{"id":"2206.09474","title":"3D Object Detection for Autonomous Driving: A Comprehensive Survey","created":"2022-06-19","cited_by_count":132,"area":null},{"id":"2106.09249","title":"Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks","created":"2021-06-17","cited_by_count":101,"area":"driving"},{"id":"2201.05057","title":"On Adversarial Robustness of Trajectory Prediction for Autonomous Vehicles","created":"2022-01-13","cited_by_count":90,"area":null},{"id":"2201.12296","title":"Benchmarking Robustness of 3D Point Cloud Recognition Against Common Corruptions","created":"2022-01-28","cited_by_count":80,"area":null},{"id":"2201.09538","title":"Backdoor Defense with Machine Unlearning","created":"2022-01-24","cited_by_count":65,"area":null},{"id":"2203.04041","title":"Shape-invariant 3D Adversarial Point Clouds","created":"2022-03-08","cited_by_count":50,"area":null},{"id":"2205.14951","title":"Benchmarking the Robustness of LiDAR-Camera Fusion for 3D Object Detection","created":"2022-05-30","cited_by_count":50,"area":null},{"id":"2101.06560","title":"Adversarial Attacks On Multi-Agent Communication","created":"2021-01-17","cited_by_count":49,"area":null},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45,"area":null},{"id":"2112.03909","title":"Vehicle trajectory prediction works, but not everywhere","created":"2021-12-07","cited_by_count":39,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2107.00228","title":"Scalable Certified Segmentation via Randomized Smoothing","created":"2021-07-01","cited_by_count":35,"area":null},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2307.07859","title":"Unified Adversarial Patch for Cross-modal Attacks in the Physical World","created":"2023-07-15","cited_by_count":27,"area":null},{"id":"2106.07098","title":"Security Analysis of Camera-LiDAR Fusion Against Black-Box Attacks on Autonomous Vehicles","created":"2021-06-13","cited_by_count":26,"area":null},{"id":"2103.15326","title":"Fooling LiDAR Perception via Adversarial Trajectory Perturbation","created":"2021-03-29","cited_by_count":25,"area":null},{"id":"2208.08052","title":"Imperceptible and Robust Backdoor Attack in 3D Point Cloud","created":"2022-08-17","cited_by_count":25,"area":null},{"id":"2210.15291","title":"Isometric 3D Adversarial Examples in the Physical World","created":"2022-10-27","cited_by_count":25,"area":null},{"id":"2203.05314","title":"SoK: On the Semantic AI Security in Autonomous Driving","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2212.10230","title":"A Comprehensive Study of the Robustness for LiDAR-based 3D Object Detectors against Adversarial Attacks","created":"2022-12-20","cited_by_count":22,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2101.10011","title":"They See Me Rollin': Inherent Vulnerability of the Rolling Shutter in CMOS Image Sensors","created":"2021-01-25","cited_by_count":17,"area":null},{"id":"2402.11677","title":"MultiCorrupt: A Multi-Modal Robustness Dataset and Benchmark of LiDAR-Camera Fusion for 3D Object Detection","created":"2024-02-18","cited_by_count":17,"area":null},{"id":"2102.03722","title":"Object Removal Attacks on LiDAR-based 3D Object Detectors","created":"2021-02-07","cited_by_count":16,"area":null},{"id":"2208.09801","title":"PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognition","created":"2022-08-21","cited_by_count":16,"area":null},{"id":"2306.00349","title":"CALICO: Self-Supervised Camera-LiDAR Contrastive Pre-training for BEV Perception","created":"2023-06-01","cited_by_count":14,"area":null},{"id":"2207.10170","title":"Illusory Attacks: Information-Theoretic Detectability Matters in Adversarial Attacks","created":"2022-07-20","cited_by_count":12,"area":null},{"id":"2508.16408","title":"SAMFusion: Sensor-Adaptive Multimodal Fusion for 3D Object Detection in Adverse Weather","created":"2025-08-22","cited_by_count":12,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2304.14614","title":"Fusion is Not Enough: Single Modal Attacks on Fusion Models for 3D Object Detection","created":"2023-04-28","cited_by_count":11,"area":null},{"id":"2309.12955","title":"On Data Fabrication in Collaborative Vehicular Perception: Attacks and Countermeasures","created":"2023-09-22","cited_by_count":11,"area":null},{"id":"2309.15251","title":"VPA: Fully Test-Time Visual Prompt Adaptation","created":"2023-09-26","cited_by_count":11,"area":null},{"id":"2110.03154","title":"DoubleStar: Long-Range Attack Towards Depth Estimation based Obstacle Avoidance in Autonomous Systems","created":"2021-10-07","cited_by_count":10,"area":null},{"id":"2201.12733","title":"TPC: Transformation-Specific Smoothing for Point Cloud Models","created":"2022-01-30","cited_by_count":10,"area":null},{"id":"2209.07788","title":"PointCAT: Contrastive Adversarial Training for Robust Point Cloud Recognition","created":"2022-09-16","cited_by_count":10,"area":null},{"id":"2311.01446","title":"Adv3D: Generating Safety-Critical 3D Objects through Closed-Loop Simulation","created":"2023-11-02","cited_by_count":10,"area":null},{"id":"2303.10555","title":"LiDAR Spoofing Meets the New-Gen: Capability Improvements, Broken Assumptions, and New Attack Strategies","created":"2023-03-19","cited_by_count":9,"area":null},{"id":"2310.08565","title":"Security Considerations in AI-Robotics: A Survey of Current Methods, Challenges, and Opportunities","created":"2023-10-12","cited_by_count":9,"area":null},{"id":"2410.12592","title":"Cocoon: Robust Multi-Modal Perception with Uncertainty-Aware Sensor Fusion","created":"2024-10-16","cited_by_count":9,"area":null},{"id":"2106.07833","title":"Temporal Consistency Checks to Detect LiDAR Spoofing Attacks on Autonomous Vehicle Perception","created":"2021-06-15","cited_by_count":8,"area":null},{"id":"2303.12249","title":"State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems","created":"2023-03-22","cited_by_count":8,"area":null},{"id":"2106.05261","title":"We Can Always Catch You: Detecting Adversarial Patched Objects WITH or WITHOUT Signature","created":"2021-06-09","cited_by_count":6,"area":null},{"id":"2207.05327","title":"Certified Adversarial Robustness via Anisotropic Randomized Smoothing","created":"2022-07-12","cited_by_count":6,"area":null},{"id":"2310.14504","title":"ADoPT: LiDAR Spoofing Attack Detection Based on Point-Level Temporal Consistency","created":"2023-10-23","cited_by_count":6,"area":null},{"id":"2409.14488","title":"Enhancing LLM-based Autonomous Driving Agents to Mitigate Perception Attacks","created":"2024-09-22","cited_by_count":6,"area":"driving"},{"id":"2109.06363","title":"Sensor Adversarial Traits: Analyzing Robustness of 3D Object Detection Sensor Fusion Models","created":"2021-09-13","cited_by_count":5,"area":null},{"id":"2204.13973","title":"Using 3D Shadows to Detect Object Hiding Attacks on Autonomous Vehicle Perception","created":"2022-04-29","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2103.10651","title":"SoK: A Modularized Approach to Study the Security of Automatic Speech Recognition Systems","created":"2021-03-19","cited_by_count":4,"area":null},{"id":"2105.10101","title":"Anomaly Detection of Adversarial Examples using Class-conditional Generative Adversarial Networks","created":"2021-05-21","cited_by_count":3,"area":null},{"id":"2303.09731","title":"Exorcising ''Wraith'': Protecting LiDAR-based Object Detector in Automated Driving System from Appearing Attacks","created":"2023-03-17","cited_by_count":3,"area":null},{"id":"2406.11707","title":"A First Physical-World Trajectory Prediction Attack via LiDAR-induced Deceptions in Autonomous Driving","created":"2024-06-17","cited_by_count":3,"area":null},{"id":"2409.17907","title":"PhantomLiDAR: Cross-modality Signal Injection Attacks against LiDAR","created":"2024-09-26","cited_by_count":3,"area":null},{"id":"2409.20426","title":"Navigating Threats: A Survey of Physical Adversarial Attacks on LiDAR Perception Systems in Autonomous Vehicles","created":"2024-09-30","cited_by_count":3,"area":null},{"id":"2511.08015","title":"Invisible Triggers, Visible Threats! Road-Style Adversarial Creation Attack for Visual 3D Detection in Autonomous Driving","created":"2025-11-11","cited_by_count":3,"area":null},{"id":"2403.02329","title":"COMMIT: Certifying Robustness of Multi-Sensor Fusion Systems against Semantic Attacks","created":"2024-03-04","cited_by_count":2,"area":null},{"id":"2103.06271","title":"Learning-Based Vulnerability Analysis of Cyber-Physical Systems","created":"2021-03-10","cited_by_count":1,"area":null},{"id":"2106.04066","title":"Semantically Adversarial Scenario Generation with Explicit Knowledge Guidance","created":"2021-06-08","cited_by_count":1,"area":null},{"id":"2207.08556","title":"A Certifiable Security Patch for Object Tracking in Self-Driving Systems via Historical Deviation Modeling","created":"2022-07-18","cited_by_count":1,"area":null},{"id":"2209.01710","title":"Perception Simplex: Verifiable Collision Avoidance in Autonomous Vehicles Amidst Obstacle Detection Faults","created":"2022-09-04","cited_by_count":1,"area":null},{"id":"2305.19194","title":"FakeSwarm: Improving Fake News Detection with Swarming Characteristics","created":"2023-05-30","cited_by_count":1,"area":null},{"id":"2312.01468","title":"Exploring Adversarial Robustness of LiDAR-Camera Fusion Model in Autonomous Driving","created":"2023-12-03","cited_by_count":1,"area":null},{"id":"2312.03085","title":"ScAR: Scaling Adversarial Robustness for LiDAR Object Detection","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2312.11213","title":"FAKEPCD: Fake Point Cloud Detection via Source Attribution","created":"2023-12-18","cited_by_count":1,"area":null},{"id":"2406.00282","title":"Adversarial 3D Virtual Patches using Integrated Gradients","created":"2024-06-01","cited_by_count":1,"area":null},{"id":"2410.20893","title":"Adversarial Attacks on LiDAR-Based Tracking Across Road Users: Robustness Evaluation and Target-Aware Black-Box Method","created":"2024-10-28","cited_by_count":1,"area":null},{"id":"2411.01889","title":"LiDAttack: Robust Black-box Attack on LiDAR-based Object Detection","created":"2024-11-04","cited_by_count":1,"area":null},{"id":"2503.04853","title":"From Pixels to Trajectory: Universal Adversarial Example Detection via Temporal Imprints","created":"2025-03-06","cited_by_count":1,"area":null},{"id":"2503.07375","title":"Probabilistic Segmentation for Robust Field of View Estimation","created":"2025-03-10","cited_by_count":1,"area":null},{"id":"2504.03089","title":"SLACK: Attacking LiDAR-based SLAM with Adversarial Point Injections","created":"2025-04-03","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2507.21163","title":"Generating Adversarial Point Clouds Using Diffusion Model","created":"2025-07-25","cited_by_count":1,"area":"diffusion"},{"id":"2510.19977","title":"Towards Strong Certified Defense with Universal Asymmetric Randomization","created":"2025-10-22","cited_by_count":1,"area":null},{"id":"2512.11887","title":"Advancing Autonomous Driving System Testing: Demands, Challenges, and Future Directions","created":"2025-12-09","cited_by_count":1,"area":"driving"},{"id":"2605.14396","title":"Systematic Discovery of Semantic Attacks in Online Map Construction through Conditional Diffusion","created":"2026-05-14","cited_by_count":1,"area":null},{"id":"2212.06431","title":"Object-fabrication Targeted Attack for Object Detection","created":"2022-12-13","cited_by_count":0,"area":null},{"id":"2212.07757","title":"Spatial-Temporal Anomaly Detection for Sensor Attacks in Autonomous Vehicles","created":"2022-12-15","cited_by_count":0,"area":null},{"id":"2405.20556","title":"Certifying Global Robustness for Deep Neural Networks","created":"2024-05-31","cited_by_count":0,"area":null},{"id":"2503.17168","title":"Hi-ALPS -- An Experimental Robustness Quantification of Six LiDAR-based Object Detection Systems for Autonomous Driving","created":"2025-03-21","cited_by_count":0,"area":null},{"id":"2505.05183","title":"PaniCar: Securing the Perception of Advanced Driving Assistance Systems Against Emergency Vehicle Lighting","created":"2025-05-08","cited_by_count":0,"area":null},{"id":"2506.17378","title":"A workflow for generating synthetic LiDAR datasets in simulation environments","created":"2025-06-20","cited_by_count":0,"area":null},{"id":"2507.18457","title":"Revisiting Physically Realizable Adversarial Object Attack against LiDAR-based Detection: Clarifying Problem Formulation and Experimental Protocols","created":"2025-07-24","cited_by_count":0,"area":null},{"id":"2508.19290","title":"Efficient Model-Based Purification Against Adversarial Attacks for LiDAR Segmentation","created":"2025-08-25","cited_by_count":0,"area":null},{"id":"2510.06952","title":"OBJVanish: Physically Realizable Text-to-3D Adv. Generation of LiDAR-Invisible Objects","created":"2025-10-08","cited_by_count":0,"area":null},{"id":"2602.08170","title":"Evasion of IoT Malware Detection via Dummy Code Injection","created":"2026-02-09","cited_by_count":0,"area":null},{"id":"2603.07493","title":"RayD3D: Distilling Depth Knowledge Along the Ray for Robust Multi-View 3D Object Detection","created":"2026-03-08","cited_by_count":0,"area":null},{"id":"2604.00371","title":"Neural Reconstruction of LiDAR Point Clouds under Jamming Attacks via Full-Waveform Representation and Simultaneous Laser Sensing","created":"2026-04-01","cited_by_count":0,"area":null},{"id":"2605.00880","title":"Adversarial Flow Matching for Imperceptible Attacks on End-to-End Autonomous Driving","created":"2026-04-26","cited_by_count":0,"area":"diffusion"},{"id":"2606.02924","title":"ATLAS: A Large-Scale Evaluation Benchmark for Adversarial LiDAR Perception","created":"2026-06-01","cited_by_count":0,"area":null},{"id":"2606.29963","title":"Explainability-Aware Frustum Attack: Exposing Structural Vulnerabilities in LiDAR-Based 3D Object Detectors","created":"2026-06-29","cited_by_count":0,"area":null},{"id":"2608.04453","title":"TwinIR: Coordinated Invisible Dual-Point Attacks on Online HD Map Construction","created":"2026-08-05","cited_by_count":0,"area":null},{"id":"2608.28778","title":"Adversarial Calibration Attack on Autonomous Vehicles","created":"2026-08-28","cited_by_count":0,"area":null},{"id":"2609.39969","title":"TACTIC: Temporal and Context-Aware LLM Tactical Planning for Roadside LiDAR Attacks","created":"2026-09-30","cited_by_count":0,"area":null}],"next_cursor":null}