{"id":"https://openalex.org/W4414836799","doi":"https://doi.org/10.48550/arxiv.2502.16012","title":"Cross-Model Transferability of Adversarial Patches in Real-time Segmentation for Autonomous Driving","display_name":"Cross-Model Transferability of Adversarial Patches in Real-time Segmentation for Autonomous Driving","publication_year":2025,"publication_date":"2025-02-22","ids":{"openalex":"https://openalex.org/W4414836799","doi":"https://doi.org/10.48550/arxiv.2502.16012"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2502.16012","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2502.16012","pdf_url":"https://arxiv.org/pdf/2502.16012","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"parent_works":[],"lineage":["https://openalex.org/W4414836799"],"child_works_count":0,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2502.16012","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091752871","display_name":"Prashant Shekhar","orcid":"https://orcid.org/0000-0003-2353-6740","observed_orcids":["https://orcid.org/0000-0003-2353-6740"]},"institutions":[{"id":"https://openalex.org/I4405252843","display_name":"Embry-Riddle Aeronautical University Daytona Beach Florida Campus","ror":"https://ror.org/001emy730","country_code":"US","type":"education","lineage":["https://openalex.org/I4405252843","https://openalex.org/I84475105"]},{"id":"https://openalex.org/I84475105","display_name":"Embry\u2013Riddle Aeronautical University","ror":"https://ror.org/010jskt71","country_code":"US","type":"education","lineage":["https://openalex.org/I84475105"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shekhar, Prashant","raw_affiliation_strings":["Department of Mathematics Embry-Riddle Aeronautical University Daytona Beach , FL , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mathematics Embry-Riddle Aeronautical University Daytona Beach , FL , USA","institution_ids":["https://openalex.org/I4405252843","https://openalex.org/I84475105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032037965","display_name":"Bidur Devkota","orcid":"https://orcid.org/0000-0001-5901-3971","observed_orcids":["https://orcid.org/0000-0001-5901-3971"]},"institutions":[{"id":"https://openalex.org/I4405252843","display_name":"Embry-Riddle Aeronautical University Daytona Beach Florida Campus","ror":"https://ror.org/001emy730","country_code":"US","type":"education","lineage":["https://openalex.org/I4405252843","https://openalex.org/I84475105"]},{"id":"https://openalex.org/I84475105","display_name":"Embry\u2013Riddle Aeronautical University","ror":"https://ror.org/010jskt71","country_code":"US","type":"education","lineage":["https://openalex.org/I84475105"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Devkota, Bidur","raw_affiliation_strings":["Department of Mathematics Embry-Riddle Aeronautical University Daytona Beach , FL , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mathematics Embry-Riddle Aeronautical University Daytona Beach , FL , USA","institution_ids":["https://openalex.org/I4405252843","https://openalex.org/I84475105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041459341","display_name":"Dumindu Samaraweera","orcid":"https://orcid.org/0000-0003-4097-5585","observed_orcids":["https://orcid.org/0000-0003-4097-5585"]},"institutions":[{"id":"https://openalex.org/I4405252843","display_name":"Embry-Riddle Aeronautical University Daytona Beach Florida Campus","ror":"https://ror.org/001emy730","country_code":"US","type":"education","lineage":["https://openalex.org/I4405252843","https://openalex.org/I84475105"]},{"id":"https://openalex.org/I84475105","display_name":"Embry\u2013Riddle Aeronautical University","ror":"https://ror.org/010jskt71","country_code":"US","type":"education","lineage":["https://openalex.org/I84475105"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Samaraweera, Dumindu","raw_affiliation_strings":["Department of Mathematics Embry-Riddle Aeronautical University Daytona Beach , FL , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mathematics Embry-Riddle Aeronautical University Daytona Beach , FL , USA","institution_ids":["https://openalex.org/I4405252843","https://openalex.org/I84475105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008970195","display_name":"Laxima Niure Kandel","orcid":"https://orcid.org/0000-0002-3933-1187","observed_orcids":["https://orcid.org/0000-0002-3933-1187"]},"institutions":[{"id":"https://openalex.org/I4405252843","display_name":"Embry-Riddle Aeronautical University Daytona Beach Florida Campus","ror":"https://ror.org/001emy730","country_code":"US","type":"education","lineage":["https://openalex.org/I4405252843","https://openalex.org/I84475105"]},{"id":"https://openalex.org/I84475105","display_name":"Embry\u2013Riddle Aeronautical University","ror":"https://ror.org/010jskt71","country_code":"US","type":"education","lineage":["https://openalex.org/I84475105"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kandel, Laxima Niure","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science Embry-Riddle Aeronautical University Daytona Beach , FL , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science Embry-Riddle Aeronautical University Daytona Beach , FL , USA","institution_ids":["https://openalex.org/I4405252843","https://openalex.org/I84475105"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075022021","display_name":"Manoj Babu","orcid":"https://orcid.org/0000-0003-2598-7625","observed_orcids":["https://orcid.org/0000-0003-2598-7625"]},"institutions":[{"id":"https://openalex.org/I39555362","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86","country_code":"GB","type":"education","lineage":["https://openalex.org/I39555362"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Babu, Manoj","raw_affiliation_strings":["WMG University of Warwick Warwick , UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"WMG University of Warwick Warwick , UK","institution_ids":["https://openalex.org/I39555362"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-patches","display_name":"adversarial patches","score":0.9409999847412109},{"id":"https://openalex.org/keywords/cross-model-transferability","display_name":"cross-model transfer","score":0.9129999876022339},{"id":"https://openalex.org/keywords/semantic-segmentation","display_name":"semantic segmentation","score":0.75},{"id":"https://openalex.org/keywords/autonomous-driving","display_name":"autonomous driving","score":0.8679999709129333},{"id":"https://openalex.org/keywords/real-time-inference","display_name":"real-time inference","score":0.6489999890327454},{"id":"https://openalex.org/keywords/vision-transformer","display_name":"vision transformer","score":0.7179999947547913},{"id":"https://openalex.org/keywords/convolutional-neural-networks","display_name":"convolutional neural networks","score":0.8309999704360962},{"id":"https://openalex.org/keywords/segformer","display_name":"SegFormer","score":0.871999979019165},{"id":"https://openalex.org/keywords/cityscape","display_name":"cityscape","score":0.8050000071525574}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7976999878883362},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7706000208854675},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.734000027179718},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7203999757766724},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.6765000224113464},{"id":"https://openalex.org/C89600930","wikidata":"https://www.wikidata.org/wiki/Q1423946","display_name":"Segmentation","level":2,"score":0.5848000049591064},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5382999777793884},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5346999764442444},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.527899980545044},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4999000132083893},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3021000027656555},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.30059999227523804},{"id":"https://openalex.org/C204241405","wikidata":"https://www.wikidata.org/wiki/Q461499","display_name":"Transformation (genetics)","level":3,"score":0.2831999957561493},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.2759999930858612},{"id":"https://openalex.org/C124504099","wikidata":"https://www.wikidata.org/wiki/Q56933","display_name":"Image segmentation","level":3,"score":0.2750000059604645},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2671999931335449},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2655999958515167},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.26249998807907104},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.2597000002861023},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.2572000026702881},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.25609999895095825},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2500999867916107}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2502.16012","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2502.16012","pdf_url":"https://arxiv.org/pdf/2502.16012","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2502.16012","doi":"https://doi.org/10.48550/arxiv.2502.16012","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2502.16012","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2502.16012","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2502.16012","pdf_url":"https://arxiv.org/pdf/2502.16012","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4414836799.pdf","grobid_xml":"https://content.openalex.org/works/W4414836799.grobid-xml"},"referenced_works_count":4,"referenced_works":["https://openalex.org/W1945616565","https://openalex.org/W3170544306","https://openalex.org/W4294517337","https://openalex.org/W4399554878"],"related_works":["https://openalex.org/W4411997070","https://openalex.org/W7140166796","https://openalex.org/W3196107314","https://openalex.org/W4387249807","https://openalex.org/W7131821172","https://openalex.org/W4404315722","https://openalex.org/W4405333866","https://openalex.org/W7134958605","https://openalex.org/W4415599703","https://openalex.org/W4385474288"],"abstract_inverted_index":{"Adversarial":[0],"attacks":[1,22,187,198,237],"pose":[2],"a":[3,47,72,97,109],"significant":[4],"threat":[5],"to":[6,31,79,139,142,214],"deep":[7],"learning":[8],"models,":[9,232],"particularly":[10],"in":[11,26],"safety-critical":[12],"applications":[13],"like":[14,247],"healthcare":[15],"and":[16,34,81,128,220],"autonomous":[17,62],"driving.":[18],"Recently,":[19],"patch":[20,55,236],"based":[21,53,222],"have":[23],"demonstrated":[24],"effectiveness":[25],"real-time":[27],"inference":[28],"scenarios":[29],"owing":[30],"their":[32],"'drag":[33],"drop'":[35],"nature.":[36],"Following":[37],"this":[38,67,84,211],"idea":[39],"for":[40,61,217,230,256],"Semantic":[41],"Segmentation":[42],"(SS),":[43],"here":[44],"we":[45,69,89,133,179],"propose":[46,71],"novel":[48],"Expectation":[49],"Over":[50],"Transformation":[51],"(EOT)":[52],"adversarial":[54,92,115],"attack":[56,68,85,175],"that":[57,76,181,229,245],"is":[58,77,150,194,259],"more":[59],"realistic":[60],"vehicles.":[63],"To":[64],"effectively":[65],"train":[66],"also":[70,134,227],"'simplified'":[73],"loss":[74],"function":[75],"easy":[78],"analyze":[80],"implement.":[82],"Using":[83],"as":[86],"our":[87,148,225],"basis,":[88],"investigate":[90],"whether":[91],"patches":[93,116],"once":[94],"optimized":[95],"on":[96,118,152,188,207],"specific":[98],"SS":[99],"model,":[100],"can":[101],"fool":[102],"other":[103,208],"models":[104,124],"or":[105,170],"architectures.":[106],"We":[107],"conduct":[108],"comprehensive":[110],"cross-model":[111],"transferability":[112,141,184],"analysis":[113,149,243],"of":[114,147,186,191,235],"trained":[117,199],"SOTA":[119],"Convolutional":[120],"Neural":[121],"Network":[122],"(CNN)":[123],"such":[125],"PIDNet-S,":[126],"PIDNet-M":[127],"PIDNet-L,":[129],"among":[130],"others.":[131,253],"Additionally,":[132],"include":[135],"the":[136,153,183,197,233,257],"Segformer":[137],"model":[138,165,203],"study":[140,159],"Vision":[143],"Transformers":[144],"(ViTs).":[145],"All":[146],"conducted":[151],"widely":[154],"used":[155],"Cityscapes":[156],"dataset.":[157],"Our":[158],"reveals":[160,244],"key":[161],"insights":[162],"into":[163],"how":[164],"architectures":[166],"(CNN":[167],"vs":[168],"CNN":[169,171,221],"vs.":[172],"Transformer-based)":[173],"influence":[174],"susceptibility.":[176],"In":[177],"particular,":[178],"conclude":[180],"although":[182],"(effectiveness)":[185],"unseen":[189],"images":[190],"any":[192],"dimension":[193],"really":[195],"high,":[196],"against":[200],"one":[201],"particular":[202],"are":[204,238],"minimally":[205],"effective":[206],"models.":[209,223],"And":[210],"was":[212],"found":[213],"be":[215],"true":[216],"both":[218],"ViT":[219],"Additionally":[224],"results":[226],"indicate":[228],"CNN-based":[231],"repercussions":[234],"local,":[239],"unlike":[240],"ViTs.":[241],"Per-class":[242],"simple-classes":[246],"'sky'":[248],"suffer":[249],"less":[250],"misclassification":[251],"than":[252],"The":[254],"code":[255],"project":[258],"available":[260],"at:":[261],"https://github.com/p-shekhar/adversarial-patch-transferability":[262]},"counts_by_year":[{"year":2026,"cited_by_count":3}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2025-10-10T00:00:00"}