{"id":"https://openalex.org/W3201189939","doi":"https://doi.org/10.1109/icra46639.2022.9811574","title":"Targeted Attack on Deep RL-based Autonomous Driving with Learned Visual Patterns","display_name":"Targeted Attack on Deep RL-based Autonomous Driving with Learned Visual Patterns","publication_year":2022,"publication_date":"2022-05-23","ids":{"openalex":"https://openalex.org/W3201189939","doi":"https://doi.org/10.1109/icra46639.2022.9811574","mag":"3201189939"},"language":"en","primary_location":{"id":"doi:10.1109/icra46639.2022.9811574","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icra46639.2022.9811574","pdf_url":null,"source":{"id":"https://openalex.org/S4363607759","display_name":"2022 International Conference on Robotics and Automation (ICRA)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 International Conference on Robotics and Automation (ICRA)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078757069","display_name":"Prasanth Buddareddygari","orcid":null},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Prasanth Buddareddygari","raw_affiliation_strings":["Active Perception Group at the School of Computing and Augmented Intelligence, Arizona State University,Tempe,AZ,USA,85287"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Active Perception Group at the School of Computing and Augmented Intelligence, Arizona State University,Tempe,AZ,USA,85287","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088203748","display_name":"Travis Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]},{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Travis Zhang","raw_affiliation_strings":["College of Engineering, Cornell University,Ithaca,NY,USA,14853","intern at the Active Perception Group, Arizona State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Engineering, Cornell University,Ithaca,NY,USA,14853","institution_ids":["https://openalex.org/I205783295"]},{"raw_affiliation_string":"intern at the Active Perception Group, Arizona State University","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002278578","display_name":"Yezhou Yang","orcid":"https://orcid.org/0000-0003-0126-8976"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yezhou Yang","raw_affiliation_strings":["Active Perception Group at the School of Computing and Augmented Intelligence, Arizona State University,Tempe,AZ,USA,85287"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Active Perception Group at the School of Computing and Augmented Intelligence, Arizona State University,Tempe,AZ,USA,85287","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088179161","display_name":"Yi Ren","orcid":"https://orcid.org/0000-0001-9889-5460"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yi Ren","raw_affiliation_strings":["School for Engineering of Matter, Transport, and Energy, Arizona State University,Tempe","School for Engineering of Matter, Transport, and Energy, Arizona State University, Tempe"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School for Engineering of Matter, Transport, and Energy, Arizona State University,Tempe","institution_ids":["https://openalex.org/I55732556"]},{"raw_affiliation_string":"School for Engineering of Matter, Transport, and Energy, Arizona State University, Tempe","institution_ids":["https://openalex.org/I55732556"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.0121,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.76742478,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"10571","last_page":"10577"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9729999899864197,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9690999984741211,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8311248421669006},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7226904630661011},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.7225466966629028},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6344380378723145},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6288548707962036},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6104058027267456},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5075658559799194},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.4828382134437561},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4402448236942291},{"id":"https://openalex.org/keywords/unintended-consequences","display_name":"Unintended consequences","score":0.42494022846221924},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.35664117336273193}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8311248421669006},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7226904630661011},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.7225466966629028},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6344380378723145},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6288548707962036},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6104058027267456},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5075658559799194},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.4828382134437561},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4402448236942291},{"id":"https://openalex.org/C2776889888","wikidata":"https://www.wikidata.org/wiki/Q1135789","display_name":"Unintended consequences","level":2,"score":0.42494022846221924},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.35664117336273193},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icra46639.2022.9811574","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icra46639.2022.9811574","pdf_url":null,"source":{"id":"https://openalex.org/S4363607759","display_name":"2022 International Conference on Robotics and Automation (ICRA)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 International Conference on Robotics and Automation (ICRA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5199999809265137,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G5071000472","display_name":null,"funder_award_id":"1925403,2038666,2101052","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":66,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W1932198206","https://openalex.org/W1945616565","https://openalex.org/W2145339207","https://openalex.org/W2158782408","https://openalex.org/W2342662072","https://openalex.org/W2460937040","https://openalex.org/W2535873859","https://openalex.org/W2575705757","https://openalex.org/W2616841723","https://openalex.org/W2736899637","https://openalex.org/W2765424254","https://openalex.org/W2773525213","https://openalex.org/W2798302089","https://openalex.org/W2837605352","https://openalex.org/W2890208753","https://openalex.org/W2897573479","https://openalex.org/W2923292931","https://openalex.org/W2941205169","https://openalex.org/W2949103145","https://openalex.org/W2952603690","https://openalex.org/W2952730822","https://openalex.org/W2962700793","https://openalex.org/W2962755762","https://openalex.org/W2963207607","https://openalex.org/W2963557656","https://openalex.org/W2963641140","https://openalex.org/W2963857521","https://openalex.org/W2963969878","https://openalex.org/W2964043796","https://openalex.org/W2971510799","https://openalex.org/W2989847975","https://openalex.org/W2995442767","https://openalex.org/W2996343955","https://openalex.org/W2997293639","https://openalex.org/W3013618273","https://openalex.org/W3015176854","https://openalex.org/W3015437096","https://openalex.org/W3025573667","https://openalex.org/W3034956653","https://openalex.org/W3035524670","https://openalex.org/W3092988199","https://openalex.org/W3098237412","https://openalex.org/W3103557498","https://openalex.org/W3115293622","https://openalex.org/W3118210634","https://openalex.org/W3126473426","https://openalex.org/W4300511536","https://openalex.org/W4394661925","https://openalex.org/W6631190155","https://openalex.org/W6640425456","https://openalex.org/W6692846177","https://openalex.org/W6704571135","https://openalex.org/W6719080892","https://openalex.org/W6733049761","https://openalex.org/W6737897983","https://openalex.org/W6741036071","https://openalex.org/W6747027214","https://openalex.org/W6752961934","https://openalex.org/W6754184789","https://openalex.org/W6756925679","https://openalex.org/W6760326341","https://openalex.org/W6762427411","https://openalex.org/W6771690906","https://openalex.org/W6774966973","https://openalex.org/W6775522024"],"related_works":["https://openalex.org/W4320018150","https://openalex.org/W2918664383","https://openalex.org/W203812490","https://openalex.org/W4320855730","https://openalex.org/W3123119822","https://openalex.org/W106056076","https://openalex.org/W2135200719","https://openalex.org/W4307079546","https://openalex.org/W4283317927","https://openalex.org/W2899461894"],"abstract_inverted_index":{"Recent":[0],"studies":[1],"demonstrated":[2],"the":[3,19,46,56,65,72,83,97,104,109,140,147,151,154,160,166,169,183,186],"vulnerability":[4],"of":[5,21,45,55,85,108,149,168],"control":[6,76],"policies":[7],"learned":[8,90,158],"through":[9,42,53,88],"deep":[10],"reinforcement":[11],"learning":[12],"against":[13],"adversarial":[14,134],"attacks,":[15],"raising":[16],"concerns":[17],"about":[18],"application":[20],"such":[22,27],"models":[23,32],"to":[24,38,64],"risk-sensitive":[25],"tasks":[26],"as":[28],"autonomous":[29],"driving.":[30],"Threat":[31],"for":[33],"these":[34],"demonstrations":[35],"are":[36],"limited":[37],"(1)":[39],"targeted":[40,86],"attacks":[41,52,87],"real-time":[43],"manipulation":[44,54],"agent's":[47,66],"observation,":[48],"and":[49,106,153,181,189],"(2)":[50],"untargeted":[51],"physical":[57,94],"environment.":[58],"The":[59],"former":[60],"assumes":[61],"full":[62],"access":[63],"states/observations":[67],"at":[68,195],"all":[69],"times,":[70],"while":[71],"latter":[73],"has":[74],"no":[75],"over":[77],"attack":[78,171,187],"outcomes.":[79],"This":[80],"paper":[81],"investigates":[82],"feasibility":[84],"visually":[89],"patterns":[91],"placed":[92],"on":[93,172],"objects":[95],"in":[96],"environment,":[98],"a":[99,117,124,177],"threat":[100],"model":[101],"that":[102,116,146],"combines":[103],"practicality":[105],"effectiveness":[107,167,191],"existing":[110],"ones.":[111],"Through":[112],"analysis,":[113],"we":[114,142,163],"demonstrate":[115],"pre-trained":[118],"policy":[119],"can":[120,156],"be":[121,157],"hijacked":[122],"within":[123],"time":[125],"window,":[126],"e.g.,":[127],"performing":[128],"an":[129,133,144],"unintended":[130],"self-parking,":[131],"when":[132],"object":[135],"is":[136,193],"present.":[137],"To":[138],"enable":[139],"attack,":[141],"adopt":[143],"assumption":[145],"dynamics":[148],"both":[150],"environment":[152],"agent":[155],"by":[159],"attacker.":[161],"Lastly,":[162],"empirically":[164],"show":[165],"proposed":[170],"different":[173],"driving":[174],"scenarios,":[175],"perform":[176],"location":[178],"robustness":[179],"test,":[180],"study":[182],"tradeoff":[184],"between":[185],"strength":[188],"its":[190],"Code":[192],"available":[194],"https://github.com/ASU-APG/":[196],"Targeted-Physical-Adversarial-Attacks-on-AD":[197]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}