{"total":36,"rows":[{"id":"2101.06549","title":"AdvSim: Generating Safety-Critical Scenarios for Self-Driving Vehicles","created":"2021-01-16","cited_by_count":137,"area":null},{"id":"2109.07193","title":"FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attack","created":"2021-09-15","cited_by_count":74,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2108.06179","title":"Evaluating the Robustness of Semantic Segmentation for Autonomous Driving against Real-World Adversarial Patch Attacks","created":"2021-08-13","cited_by_count":55,"area":null},{"id":"2203.09831","title":"DTA: Physical Camouflage Attacks using Differentiable Transformation Network","created":"2022-03-18","cited_by_count":51,"area":null},{"id":"2403.17301","title":"Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Driving","created":"2024-03-26","cited_by_count":32,"area":null},{"id":"2308.07009","title":"ACTIVE: Towards Highly Transferable 3D Physical Camouflage for Universal and Robust Vehicle Evasion","created":"2023-08-14","cited_by_count":31,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2201.01850","title":"On the Real-World Adversarial Robustness of Real-Time Semantic Segmentation Models for Autonomous Driving","created":"2022-01-05","cited_by_count":30,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2402.15853","title":"RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generation","created":"2024-02-24","cited_by_count":18,"area":null},{"id":"2107.00996","title":"DeformRS: Certifying Input Deformations with Randomized Smoothing","created":"2021-07-02","cited_by_count":17,"area":null},{"id":"2403.16271","title":"Object Detectors in the Open Environment: Challenges, Solutions, and Outlook","created":"2024-03-24","cited_by_count":13,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2309.01351","title":"Adv3D: Generating 3D Adversarial Examples for 3D Object Detection in Driving Scenarios with NeRF","created":"2023-09-04","cited_by_count":10,"area":null},{"id":"2311.01446","title":"Adv3D: Generating Safety-Critical 3D Objects through Closed-Loop Simulation","created":"2023-11-02","cited_by_count":10,"area":null},{"id":"2206.04365","title":"CARLA-GeAR: a Dataset Generator for a Systematic Evaluation of Adversarial Robustness of Vision Models","created":"2022-06-09","cited_by_count":8,"area":null},{"id":"2108.07229","title":"Patch Attack Invariance: How Sensitive are Patch Attacks to 3D Pose?","created":"2021-08-16","cited_by_count":7,"area":null},{"id":"2402.13575","title":"Flexible Physical Camouflage Generation Based on a Differential Approach","created":"2024-02-21","cited_by_count":7,"area":null},{"id":"2507.01367","title":"3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation","created":"2025-07-02","cited_by_count":7,"area":null},{"id":"2308.03476","title":"Exploring the Physical World Adversarial Robustness of Vehicle Detection","created":"2023-08-07","cited_by_count":5,"area":null},{"id":"2312.09554","title":"Embodied Laser Attack:Leveraging Scene Priors to Achieve Agent-based Robust Non-contact Attacks","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2409.17963","title":"CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectors","created":"2024-09-26","cited_by_count":4,"area":null},{"id":"2210.11237","title":"Emerging Threats in Deep Learning-Based Autonomous Driving: A Comprehensive Survey","created":"2022-10-19","cited_by_count":3,"area":null},{"id":"2311.11191","title":"Attention-Based Real-Time Defenses for Physical Adversarial Attacks in Vision Applications","created":"2023-11-19","cited_by_count":3,"area":null},{"id":"2507.09993","title":"3DGAA: Realistic and Robust 3D Gaussian-based Adversarial Attack for Autonomous Driving","created":"2025-07-14","cited_by_count":2,"area":null},{"id":"2411.10029","title":"Toward Robust and Accurate Adversarial Camouflage Generation against Vehicle Detectors","created":"2024-11-15","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2507.10265","title":"Kaleidoscopic Background Attack: Disrupting Pose Estimation with Multi-Fold Radial Symmetry Textures","created":"2025-07-14","cited_by_count":1,"area":null},{"id":"2510.16923","title":"UNDREAM: Bridging Differentiable Rendering and Photorealistic Simulation for End-to-end Adversarial Attacks","created":"2025-10-19","cited_by_count":1,"area":null},{"id":"2511.14876","title":"Attacking Autonomous Driving Agents with Adversarial Machine Learning: A Holistic Evaluation with the CARLA Leaderboard","created":"2025-11-18","cited_by_count":1,"area":null},{"id":"2407.06688","title":"Universal Multi-view Black-box Attack against Object Detectors via Layout Optimization","created":"2024-07-09","cited_by_count":0,"area":null},{"id":"2603.26067","title":"R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting","created":"2026-03-27","cited_by_count":0,"area":null},{"id":"2607.17077","title":"ALLUDE: A Unified Evaluation System for Configurable Attacks in Differentiable Environments","created":"2026-07-19","cited_by_count":0,"area":null}],"next_cursor":null}