Using 3D Shadows to Detect Object Hiding Attacks on Autonomous Vehicle Perception
Not on the map. Why?
Abstract (arXiv)
Autonomous Vehicles (AVs) are mostly reliant on LiDAR sensors which enable spatial perception of their surroundings and help make driving decisions. Recent works demonstrated attacks that aim to hide objects from AV perception, which can result in severe consequences. 3D shadows, are regions void of measurements in 3D point clouds which arise from occlusions of objects in a scene. 3D shadows were proposed as a physical invariant valuable for detecting spoofed or fake objects. In this work, we leverage 3D shadows to locate obstacles that are hidden from object detectors. We achieve this by searching for void regions and locating the obstacles that cause these shadows. Our proposed methodology can be used to detect an object that has been hidden by an adversary as these objects, while hidden from 3D object detectors, still induce shadow artifacts in 3D point clouds, which we use for obstacle detection. We show that using 3D shadows for obstacle detection can achieve high accuracy in matching shadows to their object and provide precise prediction of an obstacle's distance from the ego-vehicle.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 6 of its 12 references that are in the map. First posted on arXiv 29 Apr 2022.
Builds on
6 of 12 references.
References · 6
- 2019Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Drivingcited by 152
- 2020Physically Realizable Adversarial Examples for LiDAR Object Detectioncited by 137
- 2021Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attackscited by 101
- 2020Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasurescited by 95
- 2019Adversarial Objects Against LiDAR-Based Autonomous Driving Systemscited by 63
- 2021Object Removal Attacks on LiDAR-based 3D Object Detectorscited by 16
Built on by
Citing papers per year: 2023: 1; 2024: 2; 2025: 0; 2026: 2.
5 papers.
- 2024A First Physical-World Trajectory Prediction Attack via LiDAR-induced Deceptions in Autonomous Drivingcited by 3
- 2024Navigating Threats: A Survey of Physical Adversarial Attacks on LiDAR Perception Systems in Autonomous Vehiclescited by 3
- 2023Fight Fire with Fire: Combating Adversarial Patch Attacks using Pattern-randomized Defensive Patchescited by 1
- 2026Explainability-Aware Frustum Attack: Exposing Structural Vulnerabilities in LiDAR-Based 3D Object Detectorscited by 0
- 2026Adversarial Calibration Attack on Autonomous Vehiclescited by 0
- 2026Adversarial Calibration Attack on Autonomous Vehicles28 Aug 2026
- 2026Explainability-Aware Frustum Attack: Exposing Structural Vulnerabilities in LiDAR-Based 3D Object Detectors29 Jun 2026
- 2024Navigating Threats: A Survey of Physical Adversarial Attacks on LiDAR Perception Systems in Autonomous Vehicles30 Sep 2024
- 2024A First Physical-World Trajectory Prediction Attack via LiDAR-induced Deceptions in Autonomous Driving17 Jun 2024
- 2023Fight Fire with Fire: Combating Adversarial Patch Attacks using Pattern-randomized Defensive Patches10 Nov 2023