{"id":"https://openalex.org/W3025279871","doi":"https://doi.org/10.1109/percom45495.2020.9127389","title":"An Analysis of Adversarial Attacks and Defenses on Autonomous Driving Models","display_name":"An Analysis of Adversarial Attacks and Defenses on Autonomous Driving Models","publication_year":2020,"publication_date":"2020-03-01","ids":{"openalex":"https://openalex.org/W3025279871","doi":"https://doi.org/10.1109/percom45495.2020.9127389","mag":"3025279871"},"language":"en","primary_location":{"id":"doi:10.1109/percom45495.2020.9127389","is_oa":false,"landing_page_url":"https://doi.org/10.1109/percom45495.2020.9127389","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE International Conference on Pervasive Computing and Communications (PerCom)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068349578","display_name":"Yao Deng","orcid":"https://orcid.org/0000-0002-9762-7058"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yao Deng","raw_affiliation_strings":["Macquarie University, Sydney, NSW, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Macquarie University, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081182489","display_name":"Xi Zheng","orcid":"https://orcid.org/0000-0002-2572-2355"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xi Zheng","raw_affiliation_strings":["Macquarie University, Sydney, NSW, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Macquarie University, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100437453","display_name":"Tianyi Zhang","orcid":"https://orcid.org/0000-0002-5468-9347"},"institutions":[{"id":"https://openalex.org/I2801851002","display_name":"Harvard University Press","ror":"https://ror.org/006v7bf86","country_code":"US","type":"other","lineage":["https://openalex.org/I136199984","https://openalex.org/I2801851002"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tianyi Zhang","raw_affiliation_strings":["Harvard University, Cambridge, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harvard University, Cambridge, MA, USA","institution_ids":["https://openalex.org/I2801851002"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100418433","display_name":"Chen Chen","orcid":"https://orcid.org/0000-0002-3525-9755"},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Chen Chen","raw_affiliation_strings":["University of Sydney, Sydney, NSW, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019279449","display_name":"Guannan Lou","orcid":"https://orcid.org/0000-0002-9604-6390"},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Guannan Lou","raw_affiliation_strings":["University of Sydney, Sydney, NSW, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5049451101","display_name":"Miryung Kim","orcid":"https://orcid.org/0000-0003-3802-1512"},"institutions":[{"id":"https://openalex.org/I161318765","display_name":"University of California, Los Angeles","ror":"https://ror.org/046rm7j60","country_code":"US","type":"education","lineage":["https://openalex.org/I161318765"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Miryung Kim","raw_affiliation_strings":["University of California, Los Angeles, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I161318765"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":166,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9677000045776367,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7983944416046143},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7939531803131104},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.699159562587738},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.6322063207626343},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.587501049041748},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5597121715545654},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.46661677956581116},{"id":"https://openalex.org/keywords/middleware","display_name":"Middleware (distributed applications)","score":0.44595977663993835},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.41679316759109497},{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.41252994537353516},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.39795076847076416},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.2787013649940491}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7983944416046143},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7939531803131104},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.699159562587738},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.6322063207626343},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.587501049041748},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5597121715545654},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.46661677956581116},{"id":"https://openalex.org/C169468491","wikidata":"https://www.wikidata.org/wiki/Q146923","display_name":"Middleware (distributed applications)","level":2,"score":0.44595977663993835},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.41679316759109497},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.41252994537353516},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39795076847076416},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2787013649940491},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/percom45495.2020.9127389","is_oa":false,"landing_page_url":"https://doi.org/10.1109/percom45495.2020.9127389","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE International Conference on Pervasive Computing and Communications (PerCom)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":66,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W1793197839","https://openalex.org/W2099471712","https://openalex.org/W2100495367","https://openalex.org/W2243397390","https://openalex.org/W2342840547","https://openalex.org/W2408141691","https://openalex.org/W2461943168","https://openalex.org/W2483814582","https://openalex.org/W2528914598","https://openalex.org/W2537005174","https://openalex.org/W2543296129","https://openalex.org/W2543927648","https://openalex.org/W2570685808","https://openalex.org/W2588289902","https://openalex.org/W2603766943","https://openalex.org/W2607219512","https://openalex.org/W2617585083","https://openalex.org/W2735607295","https://openalex.org/W2767028498","https://openalex.org/W2786070938","https://openalex.org/W2789304371","https://openalex.org/W2808791761","https://openalex.org/W2867167548","https://openalex.org/W2888307014","https://openalex.org/W2890038638","https://openalex.org/W2962814013","https://openalex.org/W2963001136","https://openalex.org/W2963100962","https://openalex.org/W2963178695","https://openalex.org/W2963207607","https://openalex.org/W2963327228","https://openalex.org/W2963389226","https://openalex.org/W2963431851","https://openalex.org/W2963448658","https://openalex.org/W2963496101","https://openalex.org/W2963542245","https://openalex.org/W2963566318","https://openalex.org/W2963855547","https://openalex.org/W2963857521","https://openalex.org/W2963942203","https://openalex.org/W2964082701","https://openalex.org/W2964121744","https://openalex.org/W2964153729","https://openalex.org/W2964318098","https://openalex.org/W2969695741","https://openalex.org/W3102720581","https://openalex.org/W4394663350","https://openalex.org/W6631190155","https://openalex.org/W6637162671","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6685777803","https://openalex.org/W6704559304","https://openalex.org/W6714069269","https://openalex.org/W6722063826","https://openalex.org/W6729756640","https://openalex.org/W6731927902","https://openalex.org/W6745272055","https://openalex.org/W6752444042","https://openalex.org/W6752760542","https://openalex.org/W6754108890","https://openalex.org/W6765694979","https://openalex.org/W6765869585","https://openalex.org/W6765966149","https://openalex.org/W6864274290"],"related_works":["https://openalex.org/W2951345506","https://openalex.org/W4385688894","https://openalex.org/W3174927864","https://openalex.org/W4375815050","https://openalex.org/W4293790771","https://openalex.org/W4229051282","https://openalex.org/W2998983696","https://openalex.org/W4378191128","https://openalex.org/W4387039884","https://openalex.org/W2339277944"],"abstract_inverted_index":{"Nowadays,":[0],"autonomous":[1,21,123],"driving":[2,61,98,124,225],"has":[3],"attracted":[4],"much":[5,198],"attention":[6],"from":[7],"both":[8],"industry":[9],"and":[10,36,74,80,92,125,163,223],"academia.":[11],"Convolutional":[12],"neural":[13],"network":[14],"(CNN)":[15],"is":[16,24,52,176,197,209],"a":[17,118,169,187,194,203,228],"key":[18],"component":[19,171],"in":[20,28,132,183],"driving,":[22],"which":[23],"also":[25],"increasingly":[26],"adopted":[27],"pervasive":[29],"computing":[30,234],"such":[31,59],"as":[32,60,237],"smartphones,":[33],"wearable":[34],"devices,":[35],"IoT":[37],"networks.":[38],"Prior":[39],"work":[40],"shows":[41],"CNN-based":[42],"classification":[43,105],"models":[44,58,62,108,226],"are":[45,63,109,147,231,239],"vulnerable":[46,64,112],"to":[47,54,65,104,113,122,149,178,185,211,242],"adversarial":[48,66,90,114,173,243],"attacks.":[49,115,156],"However,":[50],"it":[51,175,208],"uncertain":[53],"what":[55],"extent":[56],"regression":[57],"attacks,":[67,143,174,192],"the":[68,75],"effectiveness":[69],"of":[70,88,145,190],"existing":[71],"defense":[72,76,94,136,170,181],"techniques,":[73],"implications":[77,160],"for":[78,161],"system":[79,162],"middleware":[81,164],"builders.This":[82],"paper":[83],"presents":[84],"an":[85],"in-depth":[86],"analysis":[87],"five":[89,155],"attacks":[91,244],"four":[93],"methods":[95,137,182],"on":[96],"three":[97],"models.":[99,247],"Experiments":[100],"show":[101],"that,":[102],"similar":[103],"models,":[106],"these":[107,135],"still":[110],"highly":[111],"This":[116],"poses":[117],"big":[119],"security":[120],"threat":[121],"thus":[126],"should":[127],"be":[128],"taken":[129],"into":[130],"account":[131],"practice.":[133],"While":[134],"can":[138],"effectively":[139],"defend":[140],"against":[141,153,172],"different":[142],"none":[144],"them":[146],"able":[148],"provide":[150],"adequate":[151],"protection":[152],"all":[154],"We":[157],"derive":[158],"several":[159],"builders:":[165],"(1)":[166],"when":[167],"adding":[168],"important":[177,210],"deploy":[179],"multiple":[180],"tandem":[184],"achieve":[186],"good":[188],"coverage":[189],"various":[191],"(2)":[193],"black-box":[195],"attack":[196],"less":[199],"effective":[200],"compared":[201],"with":[202,227],"white-box":[204],"attack,":[205],"implying":[206],"that":[207],"keep":[212],"model":[213,216,221],"details":[214],"(e.g.,":[215],"architecture,":[217],"hyperparameters)":[218],"confidential":[219],"via":[220],"obfuscation,":[222],"(3)":[224],"complex":[229],"architecture":[230],"preferred":[232],"if":[233],"resources":[235],"permit":[236],"they":[238],"more":[240],"resilient":[241],"than":[245],"simple":[246]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":26},{"year":2024,"cited_by_count":36},{"year":2023,"cited_by_count":35},{"year":2022,"cited_by_count":27},{"year":2021,"cited_by_count":33},{"year":2020,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}