Computer security paper
Paper list
Paper list
275
PoF: Proof-of-Following for Vehicle Platoons
Vehicle
Autonomous Vehicle
Platoon
V2V
284
Privacy in Urban Sensing with Instrumented Fleets, Using Air Pollution Monitoring As A Usecase
Privacy
Cyber-physical
Vehicle
295
What You See is Not What the Network Infers: Detecting Adversarial Examples Based on Semantic Contradiction
Adversarial examples
ML
DNN
AE detection
Autonomous Vehicle
310
Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems
Autonomous Vehicle
Object detection
Traffic sign recognition
Camera
318
Systematic Discovery of Denial-of-Service Vulnerability in Autonomous Driving Planning under Physical-World Attacks
Autonomous Vehicle
Planning
Apollo
LGSVL
352
Stealthy Tracking of Autonomous Vehicles with Cache Side Channels
Autonomous Vehicle
Localization
365
SAVIOR: Securing Autonomous Vehicles with Robust Physical Invariants
Autonomous Vehicle
432
Automated Discovery of Denial-of-Service Vulnerabilities in Connected Vehicle Protocols
Vehicle
552
SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations
Adversarial Examples
Autonomous Vehicle
Object detection
Camera
Projector
578
Too Good to Be Safe: Tricking Lane Detection in Autonomous Driving with Crafted Perturbations
Autonomous Vehicle
Adversarial Examples
Lane detection
Camera
676
SAID: State-aware Defense Against Injection Attacks on In-vehicle Network
Vehicle
701
Towards Automatically Reverse Engineering Vehicle Diagnostic Protocols
Vehicle
702
Rolling Colors: Adversarial Laser Exploits against Traffic Light Recognition
Autonomous Vehicle
Traffic light detection
LGSVL
Apollo
Physical-World
747
Security Analysis of Camera-LiDAR Fusion Against Black-Box Attacks on Autonomous Vehicles
Autonomous Vehicle
MSF
Camera
LiDAR
LGSVL
Apollo
880
Phantom of the ADAS: Securing Advanced Driver-Assistance Systems from Split-Second Phantom Attacks
Autonomous Vehicle
Camera
Tesla
Mobileye
1016
I Can See the Light: Attacks on Autonomous Vehicles Using Invisible Lights
Autonomous Vehicle
Object detection
Traffic light detection
Localization
IR lights
Camera
Tesla
SLAM
1051
Can We Use Arbitrary Objects to Attack LiDAR Perception in Autonomous Driving?
Autonomous Vehicle
Object detection
LiDAR
PIXOR
VoxelNet
PointPillars
F-PointNet
KITTI dataset
1522
Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks
Autonomous Vehicle
MSF
Camera
LiDAR
Physical-World
Apollo
LGSVL
1543
Poltergeist: Acoustic Adversarial Machine Learning against Cameras and Computer Vision
Autonomous Vehicle
Object detection
Camera
YOLO
Faster R-CNN
Apollo
BDD100K
KITTI
Physical-World
1726
NO Need to Worry about Adversarial Examples in Object Detection in Autonomous Vehicles
Autonomous Vehicle
manualSet
Object detection
YOLO
Physical-World
1727
Physical Adversarial Examples for Object Detectors
Autonomous Vehicle
Object detection
manualSet
YOLO
YOLOv2
Faster-RCNN
1728
ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector
Autonomous Vehicle
Object detection
manualSet
Faster R-CNN
Physical-World
Camera
1729
Seeing isn't Believing: Towards More Robust Adversarial Attack Against Real World Object Detectors
Autonomous Vehicle
Object detection
manualSet
YOLO
YOLOv3
Faster R-CNN
1730
MeshAdv: Adversarial Meshes for Visual Recognition
Autonomous Vehicle
Object detection
manualSet
DenseNet
Inception-v3
YOLOv3
3D meshes
Adversarial mesh
1731
CAMOU: Learning A Vehicle Camouflage For Physical Adversarial Attack On Object Detections In The Wild
Autonomous Vehicle
Object detection
manualSet
Camera
Mask R-CNN
YOLO
Unreal Engine
1732
GhostImage: Remote Perception Attacks against Camera-based Image Classification Systems
Autonomous Vehicle
Object detection
manualSet
Projector
Camera
1733
AVGuardian: Detecting and Mitigating Publish-Subscribe Overprivilege for Autonomous Vehicle Systems
Autonomous Vehicle
Object detection
Camera
LiDAR
Chassis
ROS
Apollo
1734
Universal Physical Camouflage Attacks on Object Detectors
Autonomous Vehicle
Object detection
manualSet
Camera
Physical-World
1735
Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectors
Autonomous Vehicle
Object detection
manualSet
YOLOv2
YOLOv3
YOLO
Faster R-CNN
Physical-World
Camera
1736
Adversarial T-shirt! Evading Person Detectors in A Physical World
Autonomous Vehicle
Object detection
manualSet
Physical-World
YOLOv2
Faster R-CNN
Camera
1737
CCA: Exploring the Possibility of Contextual Camouflage Attack on Object Detection
Autonomous Vehicle
Object detection
manualSet
YOLOv3
Mask-RCNN
Grad-CAM
Camera
1738
SADA: Semantic Adversarial Diagnostic Attacks for Autonomous Applications
Autonomous Vehicle
Object detection
manualSet
EndToEnd driving
YOLOv3
YOLO
CARLA
CARLA driving simulator
wWather setting
Sim4CV
1739
They See Me Rollin’: Inherent Vulnerability of the Rolling Shutter in CMOS Image Sensors
Autonomous Vehicle
Object detection
manualSet
CMOS
Camera
Laser
BDD100K
VIRAT
SSD
Faster R-CNN
1740
Daedalus: Breaking Non-Maximum Suppression in Object Detection via Adversarial Examples
Autonomous Vehicle
Object detection
manualSet
YOLO
YOLOv3
RetinaNet-ResNet-50
SSD
1741
The Translucent Patch: A Physical and Universal Attack on Object Detectors
Autonomous Vehicle
Object detection
manualSet
Camera
Physical-World
YOLO
YOLOv4
Faster R-CNN
BDD
MTSD
C930
1742
Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World
Autonomous Vehicle
Object detection
manualSet
CARLA
User study
YOLOv5
SSD
Faster R-CNN
Mask-RCNN
1743
Fooling thermal infrared pedestrian detectors in real world using small bulbs
Autonomous Vehicle
Object detection
manualSet
Thermal infrared detection systems
YOLOv3
FLIR ADAS
Physical-World
1744
Indirect Local Attacks for Context-aware Semantic Segmentation Networks
Autonomous Vehicle
Semantic segmentation
manualSet
FCN
PSPNet
PSANet
DANet
DRN
Cityscapes
Pascal VOC
1745
Evaluating the Robustness of Semantic Segmentation for Autonomous Driving against Real-World Adversarial Patch Attacks
Autonomous Vehicle
Semantic segmentation
manualSet
CARLA
Cityscapes dataset
DDRNet
BiSeNet
ICNet
PSPNet
1746
ML-driven Malware that Targets AV Safety
Autonomous Vehicle
Object tracking
manualSet
LGSVL
Apollo
Camera
LiDAR
GPS
1747
Fooling Detection Alone is Not Enough: Adversarial Attack against Multiple Object Tracking
Autonomous Vehicle
Object tracking
manualSet
YOLOv3
1748
Towards Universal Physical Attacks on Single Object Tracking
Autonomous Vehicle
Object tracking
manualSet
1749
A Unified Multi-Scenario Attacking Network for Visual Object Tracking
Autonomous Vehicle
Object tracking
manualSet
OTB100
UAV123
GOT10K
DiMP
SiamRPN
1750
Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attack
Autonomous Vehicle
Lane detection
manualSet
ALC
Camera
User study
OpenPilot
LGSVL
Physical-World
1751
Fooling Perception via Location: A Case of Region-of-Interest Attacks on Traffic Light Detection in Autonomous Driving
Autonomous Vehicle
Traffic light detection
manualSet
GPS spoofing
GPS
LGSVL
Apollo
Traffic light recognition
MSF
Level 2
1752
Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving
Autonomous Vehicle
Object detection
LiDAR
manualSet
Spoofing
LiDAR Spoofing
VLP-16
Apollo
1753
Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasures
Autonomous Vehicle
Object detection
LiDAR
manualSet
VLP-16
Apollo
CARLO
MV3D-PointPillars
MVF-PointPillars
1754
Physically Realizable Adversarial Examples for LiDAR Object Detection
Autonomous Vehicle
Object detection
LiDAR
manualSet
KITTI dataset
PIXOR
PointRCNN
PointPillar
HDL-64E
Adversarial object
1755
Robust Roadside Physical Adversarial Attack Against Deep Learning in Lidar Perception Modules
Autonomous Vehicle
Object detection
LiDAR
manualSet
Apollo
LGSVL
1756
Object Removal Attacks on LiDAR-based 3D Object Detectors
Autonomous Vehicle
Object detection
LiDAR
manualSet
KITTI
Point-GNN
PointRCNN
1757
Fooling LiDAR Perception via Adversarial Trajectory Perturbation
Autonomous Vehicle
Object detection
LiDAR
manualSet
PointRCNN
PointPillar++
nuScenes
1758
Adversarial Attacks against LiDAR Semantic Segmentation in Autonomous Driving
Autonomous Vehicle
Object detection
LiDAR
manualSet
Semantic segmentation
SemanticKITTI
PointNet
SqueezeSeg
Cylinder3D
PointNet++
PointASNL
Physical-World
Attack Moving Victim Vehicle
1759
Robust Adversarial Objects against Deep Learning Models
Autonomous Vehicle
Semantic segmentation
LiDAR
manualSet
Adversarial object
ModelNet40
PointNet++
SSG-1024
SSG-2048
1760
Who is in Control? Practical Physical Layer Attack and Defense for mmWave based Sensing in Autonomous Vehicles
Autonomous Vehicle
RADAR
Object detection
manualSet
mmWave
SDR
Lincoln MKZ
Physical-Worldm
Apollo
1761
Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving
Autonomous Vehicle
MSF
manualSet
KITTI
XENITH
LiDAR
Camera
1762
Drift with Devil: Security of Multi-Sensor Fusion based Localization in High-Level Autonomous Driving under GPS Spoofing
Autonomous Vehicle
Localization
manualSet
GPS
GPS Spoofing
Spoofing
MSF
Apollo
LGSVL
1763
Trojaning Attack on Neural Networks
Autonomous Vehicle
manualSet
EndToEnd driving
Udacity
1764
PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving
Autonomous Vehicle
manualSet
EndToEnd driving
NVIDIA Dave-2
Udacity Cg23
Udacity Rambo
1765
Attacking Vision-based Perception in End-to-End Autonomous Driving Models
Autonomous Vehicle
EndToEnd driving
manualSet
CARLA
1766
Adversarial Attacks on Camera-LiDAR Models for 3D Car Detection
Autonomous Vehicle
manualSet
Camera
LiDAR
MSF
KITTI
YOLOv3
EPNet
PointRCNN
Module-level
Virtual evaluation
1767
Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches
Autonomous Vehicle
manualSet
Depth Estimation
Physical-World
Monocular Depth Estimation
Camera
Module-level
1768
PASS: A System-Driven Evaluation Platform for Autonomous Driving Safety and Security
Autonomous Vehicle
manualSet
System-level
LGSVL
Short paper
1816
DriveFuzz: Discovering Autonomous Driving Bugs through Driving Quality-Guided Fuzzing
Autonomous Vehicle
fuzzing
CARLA
Planning
Autoware
1986
Extending Adversarial Attacks and Defenses to Deep 3D Point Cloud Classifiers
Autonomous Vehicle
manualSet
LiDAR
PointNet
PointNet++
Adversarial example
3D
LiDAR
1987
Self-Robust 3D Point Recognition via Gather-Vector Guidance
Autonomous Vehicle
manualSet
LiDAR
Adversarial attack
3D
Object detection
1988
PointCloud Saliency Maps
Autonomous Vehicle
manualSet
LiDAR
Point Dropping
Object detection
3D
PointNet
PointNet++
DGCNN
1989
Isometric 3D Adversarial Examples in the Physical World
Autonomous Vehicle
3D
PointNet
PointNet++
DGCNN
Physical-World
3D-scanner
1990
PV-RCNN: Point-Voxel Feature Set Abstraction for 3D Object Detection
Autonomous Vehicle
LiDAR
PV-RCNN
1992
Don't Watch Me: A Spatio-Temporal Trojan Attack on Deep-Reinforcement-Learning-Augment Autonomous Driving
Autonomous Vehicle
Reinforcement learning
1993
Adversarial Attack on Radar-based Environment Perception Systems
Autonomous Vehicle
Radar
UWB
1994
Spatial-Temporal Anomaly Detection for Sensor Attacks in Autonomous Vehicles
Autonomous Vehicle
LiDAR
2087
Exorcising ''Wraith'': Protecting LiDAR-based Object Detector in Automated Driving System from Appearing Attacks
Autonomous Vehicle
LiDAR
LGSVL
PointPillars
PointRCNN
PV-RCNN