{"total":52,"rows":[{"id":"2201.05057","title":"On Adversarial Robustness of Trajectory Prediction for Autonomous Vehicles","created":"2022-01-13","cited_by_count":90,"area":null},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2112.03909","title":"Vehicle trajectory prediction works, but not everywhere","created":"2021-12-07","cited_by_count":39,"area":null},{"id":"2308.11894","title":"Does Physical Adversarial Example Really Matter to Autonomous Driving? Towards System-Level Effect of Adversarial Object Evasion Attack","created":"2023-08-23","cited_by_count":37,"area":null},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2203.00858","title":"Physical Backdoor Attacks to Lane Detection Systems in Autonomous Driving","created":"2022-03-02","cited_by_count":31,"area":null},{"id":"2308.05731","title":"The Integration of Prediction and Planning in Deep Learning Automated Driving Systems: A Review","created":"2023-08-10","cited_by_count":29,"area":null},{"id":"2405.05553","title":"Towards Robust Physical-world Backdoor Attacks on Lane Detection","created":"2024-05-09","cited_by_count":26,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2203.05314","title":"SoK: On the Semantic AI Security in Autonomous Driving","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2401.00148","title":"TPatch: A Triggered Physical Adversarial Patch","created":"2023-12-30","cited_by_count":22,"area":null},{"id":"2112.00964","title":"A Survey on Scenario-Based Testing for Automated Driving Systems in High-Fidelity Simulation","created":"2021-12-02","cited_by_count":21,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2212.05680","title":"REAP: A Large-Scale Realistic Adversarial Patch Benchmark","created":"2022-12-12","cited_by_count":18,"area":null},{"id":"2302.06279","title":"Sneaky Spikes: Uncovering Stealthy Backdoor Attacks in Spiking Neural Networks with Neuromorphic Data","created":"2023-02-13","cited_by_count":18,"area":null},{"id":"2406.00934","title":"LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions","created":"2024-06-03","cited_by_count":18,"area":null},{"id":"2312.09520","title":"SlowTrack: Increasing the Latency of Camera-based Perception in Autonomous Driving Using Adversarial Examples","created":"2023-12-15","cited_by_count":15,"area":null},{"id":"2111.10481","title":"PatchCensor: Patch Robustness Certification for Transformers via Exhaustive Testing","created":"2021-11-19","cited_by_count":12,"area":null},{"id":"2205.14230","title":"Semi-supervised Semantics-guided Adversarial Training for Trajectory Prediction","created":"2022-05-27","cited_by_count":12,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2304.14614","title":"Fusion is Not Enough: Single Modal Attacks on Fusion Models for 3D Object Detection","created":"2023-04-28","cited_by_count":11,"area":null},{"id":"2510.00181","title":"CHAI: Command Hijacking against embodied AI","created":"2025-09-30","cited_by_count":11,"area":null},{"id":"2110.03154","title":"DoubleStar: Long-Range Attack Towards Depth Estimation based Obstacle Avoidance in Autonomous Systems","created":"2021-10-07","cited_by_count":10,"area":null},{"id":"2406.05810","title":"ControlLoc: Physical-World Hijacking Attack on Visual Perception in Autonomous Driving","created":"2024-06-09","cited_by_count":6,"area":null},{"id":"2409.09860","title":"Revisiting Physical-World Adversarial Attack on Traffic Sign Recognition: A Commercial Systems Perspective","created":"2024-09-15","cited_by_count":6,"area":null},{"id":"2103.00345","title":"End-to-end Uncertainty-based Mitigation of Adversarial Attacks to Automated Lane Centering","created":"2021-02-27","cited_by_count":5,"area":null},{"id":"2308.03476","title":"Exploring the Physical World Adversarial Robustness of Vehicle Detection","created":"2023-08-07","cited_by_count":5,"area":null},{"id":"2407.07510","title":"Invisible Optical Adversarial Stripes on Traffic Sign against Autonomous Vehicles","created":"2024-07-10","cited_by_count":5,"area":null},{"id":"2406.05800","title":"SlowPerception: Physical-World Latency Attack against Visual Perception in Autonomous Driving","created":"2024-06-09","cited_by_count":3,"area":null},{"id":"2409.17376","title":"Optical Lens Attack on Deep Learning Based Monocular Depth Estimation","created":"2024-09-25","cited_by_count":3,"area":null},{"id":"2511.08015","title":"Invisible Triggers, Visible Threats! Road-Style Adversarial Creation Attack for Visual 3D Detection in Autonomous Driving","created":"2025-11-11","cited_by_count":3,"area":null},{"id":"2401.01750","title":"Towards Robust Semantic Segmentation against Patch-based Attack via Attention Refinement","created":"2024-01-03","cited_by_count":2,"area":null},{"id":"2112.01956","title":"Provably Valid and Diverse Mutations of Real-World Media Data for DNN Testing","created":"2021-12-03","cited_by_count":1,"area":null},{"id":"2207.08556","title":"A Certifiable Security Patch for Object Tracking in Self-Driving Systems via Historical Deviation Modeling","created":"2022-07-18","cited_by_count":1,"area":null},{"id":"2307.08939","title":"Runtime Stealthy Perception Attacks against DNN-based Adaptive Cruise Control Systems","created":"2023-07-18","cited_by_count":1,"area":null},{"id":"2311.00207","title":"Magmaw: Modality-Agnostic Adversarial Attacks on Machine Learning-Based Wireless Communication Systems","created":"2023-11-01","cited_by_count":1,"area":null},{"id":"2312.01468","title":"Exploring Adversarial Robustness of LiDAR-Camera Fusion Model in Autonomous Driving","created":"2023-12-03","cited_by_count":1,"area":null},{"id":"2404.12612","title":"SA-Attack: Speed-adaptive stealthy adversarial attack on trajectory prediction","created":"2024-04-19","cited_by_count":1,"area":null},{"id":"2411.00192","title":"Optical Lens Attack on Monocular Depth Estimation for Autonomous Driving","created":"2024-10-31","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2511.14876","title":"Attacking Autonomous Driving Agents with Adversarial Machine Learning: A Holistic Evaluation with the CARLA Leaderboard","created":"2025-11-18","cited_by_count":1,"area":null},{"id":"2603.28224","title":"Ghost-FWL: A Large-Scale Full-Waveform LiDAR Dataset for Ghost Detection and Removal","created":"2026-03-30","cited_by_count":1,"area":null},{"id":"2409.10562","title":"Natural Adversaries: Fuzzing Autonomous Vehicles with Realistic Roadside Object Placements","created":"2024-09-13","cited_by_count":0,"area":null},{"id":"2501.15653","title":"A Privacy Enhancing Technique to Evade Detection by Street Video Cameras Without Using Adversarial Accessories","created":"2025-01-26","cited_by_count":0,"area":null},{"id":"2505.05183","title":"PaniCar: Securing the Perception of Advanced Driving Assistance Systems Against Emergency Vehicle Lighting","created":"2025-05-08","cited_by_count":0,"area":null},{"id":"2511.12956","title":"T2I-Based Physical-World Appearance Attack against Traffic Sign Recognition Systems in Autonomous Driving","created":"2025-11-17","cited_by_count":0,"area":null},{"id":"2603.06576","title":"BEVLM: Distilling Semantic Knowledge from LLMs into Bird's-Eye View Representations","created":"2026-03-06","cited_by_count":0,"area":null},{"id":"2603.18120","title":"MAED: Mathematical Activation Error Detection for Mitigating Physical Fault Attacks in DNN Inference","created":"2026-03-18","cited_by_count":0,"area":null},{"id":"2608.04453","title":"TwinIR: Coordinated Invisible Dual-Point Attacks on Online HD Map Construction","created":"2026-08-05","cited_by_count":0,"area":null},{"id":"2608.13450","title":"LLM-Assisted Dynamic Threat Analysis for Attacker-Reachable Software Weaknesses in Autonomous Vehicles","created":"2026-08-13","cited_by_count":0,"area":null},{"id":"2608.28778","title":"Adversarial Calibration Attack on Autonomous Vehicles","created":"2026-08-28","cited_by_count":0,"area":null}],"next_cursor":null}