Navigating Threats: A Survey of Physical Adversarial Attacks on LiDAR Perception Systems in Autonomous Vehicles
Not on the map. Why?
Abstract (arXiv)
Autonomous vehicles (AVs) rely heavily on LiDAR (Light Detection and Ranging) systems for accurate perception and navigation, providing high-resolution 3D environmental data that is crucial for object detection and classification. However, LiDAR systems are vulnerable to adversarial attacks, which pose significant challenges to the safety and robustness of AVs. This survey presents a thorough review of the current research landscape on physical adversarial attacks targeting LiDAR-based perception systems, covering both single-modality and multi-modality contexts. We categorize and analyze various attack types, including spoofing and physical adversarial object attacks, detailing their methodologies, impacts, and potential real-world implications. Through detailed case studies and analyses, we identify critical challenges and highlight gaps in existing attacks for LiDAR-based systems. Additionally, we propose future research directions to enhance the security and resilience of these systems, ultimately contributing to the safer deployment of autonomous vehicles.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 69 of its 118 references that are in the map. First posted on arXiv 30 Sep 2024.
Builds on
69 of 118 references.
References · 69
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016PointNet: Deep Learning on Point Sets for 3D Classification and Segmentationcited by 5,223
- 2013Intriguing properties of neural networkscited by 5,114
- 2017PointNet++: Deep Hierarchical Feature Learning on Point Sets in a Metric Spacecited by 4,384
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2017CARLA: An Open Urban Driving Simulatorcited by 2,431
- 2018PointPillars: Fast Encoders for Object Detection from Point Cloudscited by 1,707
- 2017VoxelNet: End-to-End Learning for Point Cloud Based 3D Object Detectioncited by 1,323
- 2018PointRCNN: 3D Object Proposal Generation and Detection from Point Cloudcited by 939
- 2019PV-RCNN: Point-Voxel Feature Set Abstraction for 3D Object Detectioncited by 890
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
- 2015The Limitations of Deep Learning in Adversarial Settingscited by 784
38 more
- 2020Accelerating 3D Deep Learning with PyTorch3Dcited by 781
- 2016Multi-View 3D Object Detection Network for Autonomous Drivingcited by 721
- 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
- 2017Frustum PointNets for 3D Object Detection from RGB-D Datacited by 640
- 2019RandLA-Net: Efficient Semantic Segmentation of Large-Scale Point Cloudscited by 584
- 2018Pseudo-LiDAR from Visual Depth Estimation: Bridging the Gap in 3D Object Detection for Autonomous Drivingcited by 455
- 2019PointPainting: Sequential Fusion for 3D Object Detectioncited by 449
- 20203DSSD: Point-based 3D Single Stage Object Detectorcited by 440
- 2019PIXOR: Real-time 3D Object Detection from Point Cloudscited by 358
- 2017Joint 3D Proposal Generation and Object Detection from View Aggregationcited by 325
- 2020PointGroup: Dual-Set Point Grouping for 3D Instance Segmentationcited by 318
- 2020Deep Continuous Fusion for Multi-Sensor 3D Object Detectioncited by 263
- 2021End-to-end Interpretable Neural Motion Plannercited by 240
- 2020Fast and Furious: Real Time End-to-End 3D Detection, Tracking and Motion Forecasting with a Single Convolutional Netcited by 228
- 2020Multi-Task Multi-Sensor Fusion for 3D Object Detectioncited by 203
- 2020A2D2: Audi Autonomous Driving Datasetcited by 189
- 2020EPNet: Enhancing Point Features with Image Semantics for 3D Object Detectioncited by 164
- 2019MVX-Net: Multimodal VoxelNet for 3D Object Detectioncited by 162
- 2019Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Drivingcited by 151
- 2020CLOCs: Camera-LiDAR Object Candidates Fusion for 3D Object Detectioncited by 147
- 2018Generating 3D Adversarial Point Cloudscited by 144
- 2020Physically Realizable Adversarial Examples for LiDAR Object Detectioncited by 137
- 2020Pillar-based Object Detection for Autonomous Drivingcited by 137
- 2020LGSVL Simulator: A High Fidelity Simulator for Autonomous Drivingcited by 119
- 2020GNN3DMOT: Graph Neural Network for 3D Multi-Object Tracking with Multi-Feature Learningcited by 113
- 2021Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attackscited by 101
- 2020Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasurescited by 95
- 2019Extending Adversarial Attacks and Defenses to Deep 3D Point Cloud Classifierscited by 92
- 2016Vote3Deep: Fast Object Detection in 3D Point Clouds Using Efficient Convolutional Neural Networkscited by 72
- 2019Adversarial Objects Against LiDAR-Based Autonomous Driving Systemscited by 62
- 2023DAP: A Dynamic Adversarial Patch for Evading Person Detectorscited by 40
- 2018BirdNet: a 3D Object Detection Framework from LiDAR informationcited by 33
- 2022You Can't See Me: Physical Removal Attacks on LiDAR-based Autonomous Vehicles Driving Frameworkscited by 32
- 2021Security Analysis of Camera-LiDAR Fusion Against Black-Box Attacks on Autonomous Vehiclescited by 26
- 2018End-to-end Learning of Multi-sensor 3D Tracking by Detectioncited by 25
- 2023Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlookcited by 20
- 2023A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attackscited by 19
- 2021Adversarial Attacks on Camera-LiDAR Models for 3D Car Detectioncited by 16
50 most cited of 69 All 69 (JSON)
Built on by
Citing papers per year: 2025: 2; 2026: 1.
3 papers.
- 2025A workflow for generating synthetic LiDAR datasets in simulation environmentscited by 0
- 20253D Human Pose and Shape Estimation from LiDAR Point Clouds: A Reviewcited by 0
- 2026AD2: Analysis and Detection of Adversarial Threats in Visual Perception for End-to-End Autonomous Driving Systemscited by 0
- 2026AD2: Analysis and Detection of Adversarial Threats in Visual Perception for End-to-End Autonomous Driving Systems10 Feb 2026
- 20253D Human Pose and Shape Estimation from LiDAR Point Clouds: A Review15 Sep 2025
- 2025A workflow for generating synthetic LiDAR datasets in simulation environments20 Jun 2025