{"id":"https://openalex.org/W2965333252","doi":"https://doi.org/10.1109/icess.2019.8782514","title":"Simple Physical Adversarial Examples against End-to-End Autonomous Driving Models","display_name":"Simple Physical Adversarial Examples against End-to-End Autonomous Driving Models","publication_year":2019,"publication_date":"2019-06-01","ids":{"openalex":"https://openalex.org/W2965333252","doi":"https://doi.org/10.1109/icess.2019.8782514","mag":"2965333252"},"language":"en","primary_location":{"id":"doi:10.1109/icess.2019.8782514","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icess.2019.8782514","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE International Conference on Embedded Software and Systems (ICESS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047390433","display_name":"Adith Boloor","orcid":"https://orcid.org/0009-0005-0299-1949"},"institutions":[{"id":"https://openalex.org/I204465549","display_name":"Washington University in St. Louis","ror":"https://ror.org/01yc7t268","country_code":"US","type":"education","lineage":["https://openalex.org/I204465549"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Adith Boloor","raw_affiliation_strings":["Electrical and Systems Engineering, Washington University in St. Louis, St. Louis, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Systems Engineering, Washington University in St. Louis, St. Louis, USA","institution_ids":["https://openalex.org/I204465549"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101669433","display_name":"Xin He","orcid":"https://orcid.org/0000-0002-3549-0519"},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xin He","raw_affiliation_strings":["Computer Science and Engineering, University of Michigan, Ann Arbor, Ann Arbor, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science and Engineering, University of Michigan, Ann Arbor, Ann Arbor, USA","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076029698","display_name":"Christopher Gill","orcid":"https://orcid.org/0000-0003-0366-8586"},"institutions":[{"id":"https://openalex.org/I204465549","display_name":"Washington University in St. Louis","ror":"https://ror.org/01yc7t268","country_code":"US","type":"education","lineage":["https://openalex.org/I204465549"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Gill","raw_affiliation_strings":["Computer Science and Engineering, Washington University in St. Louis, St. Louis, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science and Engineering, Washington University in St. Louis, St. Louis, USA","institution_ids":["https://openalex.org/I204465549"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038669899","display_name":"Yevgeniy Vorobeychik","orcid":"https://orcid.org/0000-0003-2471-5345"},"institutions":[{"id":"https://openalex.org/I204465549","display_name":"Washington University in St. Louis","ror":"https://ror.org/01yc7t268","country_code":"US","type":"education","lineage":["https://openalex.org/I204465549"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yevgeniy Vorobeychik","raw_affiliation_strings":["Computer Science and Engineering, Washington University in St. Louis, St. Louis, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science and Engineering, Washington University in St. Louis, St. Louis, USA","institution_ids":["https://openalex.org/I204465549"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010392575","display_name":"Xuan Zhang","orcid":"https://orcid.org/0000-0002-0482-5435"},"institutions":[{"id":"https://openalex.org/I204465549","display_name":"Washington University in St. Louis","ror":"https://ror.org/01yc7t268","country_code":"US","type":"education","lineage":["https://openalex.org/I204465549"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xuan Zhang","raw_affiliation_strings":["Electrical and Systems Engineering, Washington University in St. Louis, St. Louis, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Systems Engineering, Washington University in St. Louis, St. Louis, USA","institution_ids":["https://openalex.org/I204465549"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.0457,"has_fulltext":false,"cited_by_count":72,"citation_normalized_percentile":{"value":0.95550178,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9570000171661377,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.9078999757766724,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/end-to-end-principle","display_name":"End-to-end principle","score":0.8238238096237183},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7426723837852478},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6893028020858765},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.687822699546814},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6539422869682312},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5798802375793457},{"id":"https://openalex.org/keywords/perception","display_name":"Perception","score":0.5778732299804688},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.5590559244155884},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.49019676446914673},{"id":"https://openalex.org/keywords/end-user","display_name":"End user","score":0.43816202878952026},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.37038952112197876}],"concepts":[{"id":"https://openalex.org/C74296488","wikidata":"https://www.wikidata.org/wiki/Q2527392","display_name":"End-to-end principle","level":2,"score":0.8238238096237183},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7426723837852478},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6893028020858765},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.687822699546814},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6539422869682312},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5798802375793457},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.5778732299804688},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.5590559244155884},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.49019676446914673},{"id":"https://openalex.org/C91262260","wikidata":"https://www.wikidata.org/wiki/Q528074","display_name":"End user","level":2,"score":0.43816202878952026},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.37038952112197876},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C169760540","wikidata":"https://www.wikidata.org/wiki/Q207011","display_name":"Neuroscience","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icess.2019.8782514","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icess.2019.8782514","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE International Conference on Embedded Software and Systems (ICESS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W1849277567","https://openalex.org/W1945616565","https://openalex.org/W2099471712","https://openalex.org/W2180612164","https://openalex.org/W2296452361","https://openalex.org/W2342840547","https://openalex.org/W2611430843","https://openalex.org/W2615547864","https://openalex.org/W2618530766","https://openalex.org/W2734506812","https://openalex.org/W2759471388","https://openalex.org/W2884634491","https://openalex.org/W2886189420","https://openalex.org/W2962702177","https://openalex.org/W2962867954","https://openalex.org/W2962894046","https://openalex.org/W2963207607","https://openalex.org/W2963327228","https://openalex.org/W3023761398","https://openalex.org/W4295719664","https://openalex.org/W4300172425","https://openalex.org/W4320013936","https://openalex.org/W6639204139"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W4299590256","https://openalex.org/W3080754722","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298"],"abstract_inverted_index":{"Recent":[0],"advances":[1],"in":[2,62,89,135,171],"machine":[3],"learning,":[4],"especially":[5],"techniques":[6],"such":[7,121],"as":[8],"deep":[9,26,31,107],"neural":[10,108],"networks,":[11],"are":[12,65,123,138,144],"promoting":[13],"a":[14,42],"range":[15],"of":[16,44,48,52,78,98],"high-stakes":[17],"applications,":[18],"including":[19],"autonomous":[20,87,113],"driving,":[21],"which":[22,55,136],"often":[23],"relies":[24],"on":[25,86,101],"learning":[27,32],"for":[28,33,111],"perception.":[29],"While":[30],"perception":[34],"has":[35],"been":[36],"shown":[37],"to":[38,41,126,155,166],"be":[39],"vulnerable":[40,146],"host":[43],"subtle":[45],"adversarial":[46,73],"manipulations":[47],"images,":[49],"end-to-end":[50,84,112],"demonstrations":[51],"successful":[53],"attacks,":[54],"manipulate":[56],"the":[57,76,82,96,102,158],"physical":[58,63],"environment":[59],"and":[60,128,141],"result":[61],"consequences,":[64],"scarce.":[66],"Moreover,":[67],"attacks":[68,85,105,122,159],"typically":[69],"involve":[70],"carefully":[71],"constructed":[72],"examples":[74],"at":[75],"level":[77],"pixels.":[79],"We":[80],"demonstrate":[81,156],"first":[83],"driving":[88,114,148],"simulation,":[90],"using":[91],"simple":[92],"physically":[93],"realizable":[94],"attacks:":[95],"painting":[97],"black":[99],"lines":[100],"road.":[103],"These":[104],"target":[106],"network":[109,153],"models":[110],"control.":[115],"A":[116],"systematic":[117],"investigation":[118],"shows":[119],"that":[120,143,157],"surprisingly":[124],"easy":[125],"engineer,":[127],"we":[129,151],"describe":[130],"scenarios":[131,169],"(e.g.,":[132,147],"right":[133],"turns)":[134],"they":[137],"highly":[139],"effective,":[140],"others":[142],"less":[145],"straight).":[149],"Further,":[150],"use":[152],"deconvolution":[154],"succeed":[160],"by":[161],"inducing":[162],"activation":[163],"patterns":[164],"similar":[165],"entirely":[167],"different":[168],"used":[170],"training.":[172]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":13},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":17},{"year":2020,"cited_by_count":11},{"year":2019,"cited_by_count":4}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}