{"total":101,"rows":[{"id":"2306.13213","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","created":"2023-06-22","cited_by_count":328,"area":"mllm"},{"id":"2206.09474","title":"3D Object Detection for Autonomous Driving: A Comprehensive Survey","created":"2022-06-19","cited_by_count":132,"area":null},{"id":"2303.17597","title":"Robo3D: Towards Robust and Reliable 3D Perception against Corruptions","created":"2023-03-30","cited_by_count":129,"area":null},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2206.09682","title":"SafeBench: A Benchmarking Platform for Safety Evaluation of Autonomous Vehicles","created":"2022-06-20","cited_by_count":66,"area":"driving"},{"id":"2302.09491","title":"X-Adv: Physical Adversarial Object Attacks against X-ray Prohibited Item Detection","created":"2023-02-19","cited_by_count":59,"area":null},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57,"area":null},{"id":"2203.04041","title":"Shape-invariant 3D Adversarial Point Clouds","created":"2022-03-08","cited_by_count":50,"area":null},{"id":"2112.04764","title":"3D-VField: Adversarial Augmentation of Point Clouds for Domain Generalization in 3D Object Detection","created":"2021-12-09","cited_by_count":43,"area":null},{"id":"2205.05909","title":"Infrared Invisible Clothing:Hiding from Infrared Detectors at Multiple Angles in Real World","created":"2022-05-12","cited_by_count":42,"area":null},{"id":"2304.06719","title":"RoboBEV: Towards Robust Bird's Eye View Perception under Corruptions","created":"2023-04-13","cited_by_count":42,"area":null},{"id":"2405.17426","title":"Benchmarking and Improving Bird's Eye View Perception Robustness in Autonomous Driving","created":"2024-05-27","cited_by_count":41,"area":null},{"id":"2308.11894","title":"Does Physical Adversarial Example Really Matter to Autonomous Driving? Towards System-Level Effect of Adversarial Object Evasion Attack","created":"2023-08-23","cited_by_count":37,"area":null},{"id":"2311.16124","title":"DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purification","created":"2023-10-27","cited_by_count":36,"area":"diffusion"},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2203.05314","title":"SoK: On the Semantic AI Security in Autonomous Driving","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2401.00148","title":"TPatch: A Triggered Physical Adversarial Patch","created":"2023-12-30","cited_by_count":22,"area":null},{"id":"2308.14333","title":"DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local Smoothing","created":"2023-08-28","cited_by_count":20,"area":"diffusion"},{"id":"2301.13487","title":"Adversarial Training of Self-supervised Monocular Depth Estimation against Physical-World Attacks","created":"2023-01-31","cited_by_count":17,"area":null},{"id":"2109.01183","title":"roadscene2vec: A Tool for Extracting and Embedding Road Scene-Graphs","created":"2021-09-02","cited_by_count":15,"area":null},{"id":"2301.10766","title":"On the Adversarial Robustness of Camera-based 3D Object Detection","created":"2023-01-25","cited_by_count":15,"area":null},{"id":"2312.09520","title":"SlowTrack: Increasing the Latency of Camera-based Perception in Autonomous Driving Using Adversarial Examples","created":"2023-12-15","cited_by_count":15,"area":null},{"id":"2112.06658","title":"Learning to Learn Transferable Attack","created":"2021-12-10","cited_by_count":13,"area":null},{"id":"2207.10170","title":"Illusory Attacks: Information-Theoretic Detectability Matters in Adversarial Attacks","created":"2022-07-20","cited_by_count":12,"area":null},{"id":"2503.10809","title":"MIP against Agent: Malicious Image Patches Hijacking Multimodal OS Agents","created":"2025-03-13","cited_by_count":12,"area":"agents"},{"id":"2304.14614","title":"Fusion is Not Enough: Single Modal Attacks on Fusion Models for 3D Object Detection","created":"2023-04-28","cited_by_count":11,"area":null},{"id":"2309.12955","title":"On Data Fabrication in Collaborative Vehicular Perception: Attacks and Countermeasures","created":"2023-09-22","cited_by_count":11,"area":null},{"id":"2201.12733","title":"TPC: Transformation-Specific Smoothing for Point Cloud Models","created":"2022-01-30","cited_by_count":10,"area":null},{"id":"2209.05055","title":"CARE: Certifiably Robust Learning with Reasoning via Variational Inference","created":"2022-09-12","cited_by_count":10,"area":null},{"id":"2209.07788","title":"PointCAT: Contrastive Adversarial Training for Robust Point Cloud Recognition","created":"2022-09-16","cited_by_count":10,"area":null},{"id":"2309.01351","title":"Adv3D: Generating 3D Adversarial Examples for 3D Object Detection in Driving Scenarios with NeRF","created":"2023-09-04","cited_by_count":10,"area":null},{"id":"2303.10555","title":"LiDAR Spoofing Meets the New-Gen: Capability Improvements, Broken Assumptions, and New Attack Strategies","created":"2023-03-19","cited_by_count":9,"area":null},{"id":"2310.08565","title":"Security Considerations in AI-Robotics: A Survey of Current Methods, Challenges, and Opportunities","created":"2023-10-12","cited_by_count":9,"area":null},{"id":"2403.11348","title":"COLEP: Certifiably Robust Learning-Reasoning Conformal Prediction via Probabilistic Circuits","created":"2024-03-17","cited_by_count":9,"area":null},{"id":"2406.10427","title":"Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defences","created":"2024-06-14","cited_by_count":9,"area":null},{"id":"2410.19872","title":"Radar and Camera Fusion for Object Detection and Tracking: A Comprehensive Survey","created":"2024-10-24","cited_by_count":9,"area":null},{"id":"2109.06404","title":"Detecting Multi-Sensor Fusion Errors in Advanced Driver-Assistance Systems","created":"2021-09-14","cited_by_count":8,"area":null},{"id":"2312.04902","title":"BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Lifting","created":"2023-12-08","cited_by_count":7,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2406.05810","title":"ControlLoc: Physical-World Hijacking Attack on Visual Perception in Autonomous Driving","created":"2024-06-09","cited_by_count":6,"area":null},{"id":"2409.09860","title":"Revisiting Physical-World Adversarial Attack on Traffic Sign Recognition: A Commercial Systems Perspective","created":"2024-09-15","cited_by_count":6,"area":null},{"id":"2409.14488","title":"Enhancing LLM-based Autonomous Driving Agents to Mitigate Perception Attacks","created":"2024-09-22","cited_by_count":6,"area":"driving"},{"id":"2204.13973","title":"Using 3D Shadows to Detect Object Hiding Attacks on Autonomous Vehicle Perception","created":"2022-04-29","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2406.05857","title":"Self-supervised Adversarial Training of Monocular Depth Estimation against Physical-World Attacks","created":"2024-06-09","cited_by_count":5,"area":null},{"id":"2407.07510","title":"Invisible Optical Adversarial Stripes on Traffic Sign against Autonomous Vehicles","created":"2024-07-10","cited_by_count":5,"area":null},{"id":"2308.15479","title":"3D Adversarial Augmentations for Robust Out-of-Domain Predictions","created":"2023-08-29","cited_by_count":4,"area":null},{"id":"2308.15692","title":"Intriguing Properties of Diffusion Models: An Empirical Study of the Natural Attack Capability in Text-to-Image Generative Models","created":"2023-08-30","cited_by_count":4,"area":"diffusion"},{"id":"2112.05871","title":"On Adversarial Robustness of Point Cloud Semantic Segmentation","created":"2021-12-11","cited_by_count":3,"area":null},{"id":"2203.16130","title":"Sensor Data Validation and Driving Safety in Autonomous Driving Systems","created":"2022-03-30","cited_by_count":3,"area":null},{"id":"2210.11237","title":"Emerging Threats in Deep Learning-Based Autonomous Driving: A Comprehensive Survey","created":"2022-10-19","cited_by_count":3,"area":null},{"id":"2303.09731","title":"Exorcising ''Wraith'': Protecting LiDAR-based Object Detector in Automated Driving System from Appearing Attacks","created":"2023-03-17","cited_by_count":3,"area":null},{"id":"2306.03454","title":"Benchmarking Robustness of AI-Enabled Multi-sensor Fusion Systems: Challenges and Opportunities","created":"2023-06-06","cited_by_count":3,"area":null},{"id":"2308.01840","title":"URET: Universal Robustness Evaluation Toolkit (for Evasion)","created":"2023-08-03","cited_by_count":3,"area":null},{"id":"2406.05800","title":"SlowPerception: Physical-World Latency Attack against Visual Perception in Autonomous Driving","created":"2024-06-09","cited_by_count":3,"area":null},{"id":"2406.11707","title":"A First Physical-World Trajectory Prediction Attack via LiDAR-induced Deceptions in Autonomous Driving","created":"2024-06-17","cited_by_count":3,"area":null},{"id":"2409.20426","title":"Navigating Threats: A Survey of Physical Adversarial Attacks on LiDAR Perception Systems in Autonomous Vehicles","created":"2024-09-30","cited_by_count":3,"area":null},{"id":"2503.02169","title":"One Stone, Two Birds: Enhancing Adversarial Defense Through the Lens of Distributional Discrepancy","created":"2025-03-04","cited_by_count":3,"area":null},{"id":"2602.19596","title":"Learning Mutual View Information Graph for Adaptive Adversarial Collaborative Perception","created":"2026-02-23","cited_by_count":3,"area":null},{"id":"2403.02329","title":"COMMIT: Certifying Robustness of Multi-Sensor Fusion Systems against Semantic Attacks","created":"2024-03-04","cited_by_count":2,"area":null},{"id":"2506.06027","title":"Sample-Specific Noise Injection For Diffusion-Based Adversarial Purification","created":"2025-06-06","cited_by_count":2,"area":null},{"id":"2207.08556","title":"A Certifiable Security Patch for Object Tracking in Self-Driving Systems via Historical Deviation Modeling","created":"2022-07-18","cited_by_count":1,"area":null},{"id":"2309.05810","title":"SHIFT3D: Synthesizing Hard Inputs For Tricking 3D Detectors","created":"2023-09-11","cited_by_count":1,"area":null},{"id":"2310.19038","title":"Boosting Decision-Based Black-Box Adversarial Attack with Gradient Priors","created":"2023-10-29","cited_by_count":1,"area":null},{"id":"2312.01468","title":"Exploring Adversarial Robustness of LiDAR-Camera Fusion Model in Autonomous Driving","created":"2023-12-03","cited_by_count":1,"area":null},{"id":"2411.01889","title":"LiDAttack: Robust Black-box Attack on LiDAR-based Object Detection","created":"2024-11-04","cited_by_count":1,"area":null},{"id":"2503.23708","title":"Towards Benchmarking and Assessing the Safety and Robustness of Autonomous Driving on Safety-critical Scenarios","created":"2025-03-31","cited_by_count":1,"area":"driving"},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2506.11472","title":"Toward Inherently Robust VLMs Against Visual Perception Attacks","created":"2025-06-13","cited_by_count":1,"area":"mllm"},{"id":"2507.09095","title":"Temporal Misalignment Attacks against Multimodal Perception in Autonomous Driving","created":"2025-07-12","cited_by_count":1,"area":"driving"},{"id":"2507.21163","title":"Generating Adversarial Point Clouds Using Diffusion Model","created":"2025-07-25","cited_by_count":1,"area":"diffusion"},{"id":"2511.01079","title":"T-MLA: A targeted multiscale log-exponential attack framework for neural image compression","created":"2025-11-02","cited_by_count":1,"area":null},{"id":"2511.14876","title":"Attacking Autonomous Driving Agents with Adversarial Machine Learning: A Holistic Evaluation with the CARLA Leaderboard","created":"2025-11-18","cited_by_count":1,"area":null},{"id":"2512.11887","title":"Advancing Autonomous Driving System Testing: Demands, Challenges, and Future Directions","created":"2025-12-09","cited_by_count":1,"area":"driving"},{"id":"2602.04236","title":"Cascading Robustness Verification: Toward Efficient Model-Agnostic Certification","created":"2026-02-04","cited_by_count":1,"area":null},{"id":"2602.07249","title":"Beyond Crash: Hijacking Your Autonomous Vehicle for Fun and Profit","created":"2026-02-06","cited_by_count":1,"area":"driving"},{"id":"2605.01519","title":"Certified vs. Empirical Adversarial Robust-ness via Hybrid Convolutions with Attention Stochasticity","created":"2026-05-02","cited_by_count":1,"area":null},{"id":"2303.06641","title":"Adaptive Local Adversarial Attacks on 3D Point Clouds for Augmented Reality","created":"2023-03-12","cited_by_count":0,"area":null},{"id":"2402.04660","title":"Redesigning Traffic Signs to Mitigate Machine-Learning Patch Attacks","created":"2024-02-07","cited_by_count":0,"area":null},{"id":"2406.03458","title":"Distributional Adversarial Loss","created":"2024-06-05","cited_by_count":0,"area":null},{"id":"2409.00340","title":"LightPure: Realtime Adversarial Image Purification for Mobile Devices Using Diffusion Models","created":"2024-08-31","cited_by_count":0,"area":"diffusion"},{"id":"2409.10562","title":"Natural Adversaries: Fuzzing Autonomous Vehicles with Realistic Roadside Object Placements","created":"2024-09-13","cited_by_count":0,"area":null},{"id":"2501.07133","title":"Robust Single Object Tracking in LiDAR Point Clouds under Adverse Weather Conditions","created":"2025-01-13","cited_by_count":0,"area":null},{"id":"2503.07020","title":"Driving Through Uncertainty: Risk-Averse Control with LLM Commonsense for Autonomous Driving under Perception Deficits","created":"2025-03-10","cited_by_count":0,"area":"driving"},{"id":"2505.03850","title":"Impact Analysis of Inference Time Attack of Perception Sensors on Autonomous Vehicles","created":"2025-05-05","cited_by_count":0,"area":null},{"id":"2505.05183","title":"PaniCar: Securing the Perception of Advanced Driving Assistance Systems Against Emergency Vehicle Lighting","created":"2025-05-08","cited_by_count":0,"area":null},{"id":"2506.06906","title":"KNN-Defense: Defense against 3D Adversarial Point Clouds using Nearest-Neighbor Search","created":"2025-06-07","cited_by_count":0,"area":null},{"id":"2506.17378","title":"A workflow for generating synthetic LiDAR datasets in simulation environments","created":"2025-06-20","cited_by_count":0,"area":null},{"id":"2511.12956","title":"T2I-Based Physical-World Appearance Attack against Traffic Sign Recognition Systems in Autonomous Driving","created":"2025-11-17","cited_by_count":0,"area":null},{"id":"2511.14386","title":"Cheating Stereo Matching in Full-scale: Physical Adversarial Attack against Binocular Depth Estimation in Autonomous Driving","created":"2025-11-18","cited_by_count":0,"area":null},{"id":"2602.09740","title":"Robust Vision Systems for Connected and Autonomous Vehicles: Security Challenges and Attack Vectors","created":"2026-02-10","cited_by_count":0,"area":null},{"id":"2603.06576","title":"BEVLM: Distilling Semantic Knowledge from LLMs into Bird's-Eye View Representations","created":"2026-03-06","cited_by_count":0,"area":null},{"id":"2604.00371","title":"Neural Reconstruction of LiDAR Point Clouds under Jamming Attacks via Full-Waveform Representation and Simultaneous Laser Sensing","created":"2026-04-01","cited_by_count":0,"area":null},{"id":"2605.12743","title":"Still Camouflage, Moving Illusion: View-Induced Trajectory Manipulation in Autonomous Driving","created":"2026-05-12","cited_by_count":0,"area":"driving"},{"id":"2605.22122","title":"Adversarial Trust Poisoning in Vehicular Collaborative Perception","created":"2026-05-21","cited_by_count":0,"area":null},{"id":"2606.14504","title":"Scratched Lenses, Shifted Depth: Passive Camera-Side Optical Attacks","created":"2026-06-12","cited_by_count":0,"area":null},{"id":"2606.14533","title":"The Risk Shadow of Principal Component Analysis: When 99.9999% Variance Preservation Causes Catastrophic Decision Errors","created":"2026-06-12","cited_by_count":0,"area":null},{"id":"2606.14658","title":"Giving AI a Headache: Acoustic Adversarial Attacks to Computer Vision Applications","created":"2026-06-12","cited_by_count":0,"area":null},{"id":"2608.04453","title":"TwinIR: Coordinated Invisible Dual-Point Attacks on Online HD Map Construction","created":"2026-08-05","cited_by_count":0,"area":null},{"id":"2608.28778","title":"Adversarial Calibration Attack on Autonomous Vehicles","created":"2026-08-28","cited_by_count":0,"area":null}],"next_cursor":"100"}