mlsanityData to 7 Oct 2026

Runtime Stealthy Perception Attacks against DNN-based Adaptive Cruise Control Systems

arXiv 2307.08939 ↗First posted 18 Jul 2023cs.CR cs.CV cs.LGcited by 1

Not on the map. Why?

Abstract (arXiv)

Adaptive Cruise Control (ACC) is a widely used driver assistance technology for maintaining the desired speed and safe distance to the leading vehicle. This paper evaluates the security of the deep neural network (DNN) based ACC systems under runtime stealthy perception attacks that strategically inject perturbations into camera data to cause forward collisions. We present a context-aware strategy for the selection of the most critical times for triggering the attacks and a novel optimization-based method for the adaptive generation of image perturbations at runtime. We evaluate the effectiveness of the proposed attack using an actual vehicle, a publicly available driving dataset, and a realistic simulation platform with the control software from a production ACC system, a physical-world driving simulator, and interventions by the human driver and safety features such as Advanced Emergency Braking System (AEBS). Experimental results show that the proposed attack achieves 142.9 times higher success rate in causing hazards and 82.6% higher evasion rate than baselines, while being stealthy and robust to real-world factors and dynamic changes in the environment. This study highlights the role of human drivers and basic safety mechanisms in preventing attacks.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 36 of its 106 references that are in the map. First posted on arXiv 18 Jul 2023.

Builds on

36 of 106 references.

References · 36

  1. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  2. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  3. 2015You Only Look Once: Unified, Real-Time Object Detectioncited by 4,829
  4. 2017Axiomatic Attribution for Deep Networkscited by 3,350
  5. 2017CARLA: An Open Urban Driving Simulatorcited by 2,431
  6. 2016Adversarial examples in the physical worldcited by 1,762
  7. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
  8. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
  9. 2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 484
  10. 2016A study of the effect of JPG compression on adversarial imagescited by 196
  11. 2019Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectorscited by 155
  12. 2018DPatch: An Adversarial Patch Attack on Object Detectorscited by 146
24 more
  1. 2019On Physical Adversarial Patches for Object Detectioncited by 93
  2. 2016Towards the Science of Security and Privacy in Machine Learningcited by 89
  3. 2019Adversarial camera stickers: A physical camera-based attack on deep learning systemscited by 69
  4. 2021Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detectioncited by 67
  5. 2020Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attackcited by 64
  6. 2020SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbationscited by 50
  7. 2018Beyond Pixels: Leveraging Geometry and Shape Cues for Online Multi-Object Trackingcited by 40
  8. 2018A Commute in Data: The comma2k19 Datasetcited by 33
  9. 2022PatchZero: Defending against Adversarial Patch Attacks by Detecting and Zeroing the Patchcited by 30
  10. 2019Defending against Whitebox Adversarial Attacks via Randomized Discretizationcited by 29
  11. 2021Security Analysis of Camera-LiDAR Fusion Against Black-Box Attacks on Autonomous Vehiclescited by 26
  12. 2020Drift with Devil: Security of Multi-Sensor Fusion based Localization in High-Level Autonomous Driving under GPS Spoofing (Extended Version)cited by 25
  13. 2020Dynamic Adversarial Patch for Evading Object Detection Modelscited by 20
  14. 2019ML-based Fault Injection for Autonomous Vehicles: A Case for Bayesian Fault Injectioncited by 16
  15. 2021Jujutsu: A Two-stage Defense against Adversarial Patch Attacks on Deep Neural Networkscited by 13
  16. 2019Fooling Detection Alone is Not Enough: First Adversarial Attack against Multiple Object Trackingcited by 9
  17. 2020ML-driven Malware that Targets AV Safetycited by 9
  18. 2018Experimental Resilience Assessment of An Open-Source Driving Agentcited by 6
  19. 2020Panda: Partitioned Data Security on Outsourced Sensitive and Non-sensitive Datacited by 5
  20. 2022Level 2 Autonomous Driving on a Single Device: Diving into the Devils of Openpilotcited by 5
  21. 2022Strategic Safety-Critical Attacks Against an Advanced Driver Assistance Systemcited by 4
  22. 2020Sequential Attacks on Kalman Filter-based Forward Collision Warning Systemscited by 2
  23. 2021Spoofing Attacks Against Vehicular FMCW Radarcited by 2
  24. 2022A Formal Safety Characterization of Advanced Driver Assist Systems in the Car-Following Regime with Scenario-Samplingcited by 2

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.