{"id":"https://openalex.org/W7101748591","doi":"https://doi.org/10.1109/tdsc.2025.3626196","title":"NarAdv: Natural-Style Physical Adversarial Attack on Traffic Sign Detection for Autonomous Vehicles","display_name":"NarAdv: Natural-Style Physical Adversarial Attack on Traffic Sign Detection for Autonomous Vehicles","publication_year":2025,"publication_date":"2025-10-28","ids":{"openalex":"https://openalex.org/W7101748591","doi":"https://doi.org/10.1109/tdsc.2025.3626196"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2025.3626196","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3626196","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Yang Xu","orcid":"https://orcid.org/0000-0003-2037-6948"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Xu","raw_affiliation_strings":["School of Computer Science and Technology, Xidian University, Xi&#x2019;an, China"],"raw_orcid":"https://orcid.org/0000-0003-2037-6948","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Xidian University, Xi&#x2019;an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Fengyuan Xie","orcid":null},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fengyuan Xie","raw_affiliation_strings":["School of Computer Science and Technology, Xidian University, Xi&#x2019;an, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Xidian University, Xi&#x2019;an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Chen Lyu","orcid":"https://orcid.org/0000-0002-4373-9898"},"institutions":[{"id":"https://openalex.org/I181679659","display_name":"Shanghai University of Finance and Economics","ror":"https://ror.org/00wtvfq62","country_code":"CN","type":"education","lineage":["https://openalex.org/I181679659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen Lyu","raw_affiliation_strings":["School of Computing and Artificial Intelligence, MoE Key Laboratory of Interdisciplinary Research of Computation and Economics, Shanghai University of Finance and Economics, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-4373-9898","affiliations":[{"raw_affiliation_string":"School of Computing and Artificial Intelligence, MoE Key Laboratory of Interdisciplinary Research of Computation and Economics, Shanghai University of Finance and Economics, Shanghai, China","institution_ids":["https://openalex.org/I181679659"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jia Liu","orcid":"https://orcid.org/0000-0002-3424-050X"},"institutions":[{"id":"https://openalex.org/I184597095","display_name":"National Institute of Informatics","ror":"https://ror.org/04ksd4g47","country_code":"JP","type":"facility","lineage":["https://openalex.org/I1319490839","https://openalex.org/I184597095","https://openalex.org/I4210158934"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Jia Liu","raw_affiliation_strings":["Center for Strategic Cyber Resilience Research and Development, National Institute of Informatics, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0000-0002-3424-050X","affiliations":[{"raw_affiliation_string":"Center for Strategic Cyber Resilience Research and Development, National Institute of Informatics, Tokyo, Japan","institution_ids":["https://openalex.org/I184597095"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yusheng Ji","orcid":"https://orcid.org/0000-0003-4364-8491"},"institutions":[{"id":"https://openalex.org/I184597095","display_name":"National Institute of Informatics","ror":"https://ror.org/04ksd4g47","country_code":"JP","type":"facility","lineage":["https://openalex.org/I1319490839","https://openalex.org/I184597095","https://openalex.org/I4210158934"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yusheng Ji","raw_affiliation_strings":["Information Systems Architecture Science Research Division, National Institute of Informatics, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0000-0003-4364-8491","affiliations":[{"raw_affiliation_string":"Information Systems Architecture Science Research Division, National Institute of Informatics, Tokyo, Japan","institution_ids":["https://openalex.org/I184597095"]}]},{"author_position":"last","author":{"id":null,"display_name":"Norio Shiratori","orcid":"https://orcid.org/0000-0001-9500-3332"},"institutions":[{"id":"https://openalex.org/I96679780","display_name":"Chuo University","ror":"https://ror.org/03qvqb743","country_code":"JP","type":"education","lineage":["https://openalex.org/I96679780"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Norio Shiratori","raw_affiliation_strings":["Research and Development Initiative, Chuo University, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0000-0001-9500-3332","affiliations":[{"raw_affiliation_string":"Research and Development Initiative, Chuo University, Tokyo, Japan","institution_ids":["https://openalex.org/I96679780"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.4349,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.67504359,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"23","issue":"2","first_page":"2303","last_page":"2319"},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T12257","display_name":"Bioactive natural compounds","score":0.08590000122785568,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},"topics":[{"id":"https://openalex.org/T12257","display_name":"Bioactive natural compounds","score":0.08590000122785568,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T10431","display_name":"Ethnobotanical and Medicinal Plants Studies","score":0.05050000175833702,"subfield":{"id":"https://openalex.org/subfields/1110","display_name":"Plant Science"},"field":{"id":"https://openalex.org/fields/11","display_name":"Agricultural and Biological Sciences"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T13090","display_name":"Medicinal Plant Extracts Effects","score":0.034699998795986176,"subfield":{"id":"https://openalex.org/subfields/2707","display_name":"Complementary and alternative medicine"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7734000086784363},{"id":"https://openalex.org/keywords/camouflage","display_name":"Camouflage","score":0.7243000268936157},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7164000272750854},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6758999824523926},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.5008999705314636},{"id":"https://openalex.org/keywords/object-detection","display_name":"Object detection","score":0.4975000023841858},{"id":"https://openalex.org/keywords/vehicle-dynamics","display_name":"Vehicle dynamics","score":0.47519999742507935},{"id":"https://openalex.org/keywords/bounding-overwatch","display_name":"Bounding overwatch","score":0.454800009727478},{"id":"https://openalex.org/keywords/object","display_name":"Object (grammar)","score":0.4417000114917755}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8029000163078308},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7734000086784363},{"id":"https://openalex.org/C2776196576","wikidata":"https://www.wikidata.org/wiki/Q196113","display_name":"Camouflage","level":2,"score":0.7243000268936157},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7164000272750854},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6758999824523926},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5167999863624573},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.5008999705314636},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.4975000023841858},{"id":"https://openalex.org/C79487989","wikidata":"https://www.wikidata.org/wiki/Q934680","display_name":"Vehicle dynamics","level":2,"score":0.47519999742507935},{"id":"https://openalex.org/C63584917","wikidata":"https://www.wikidata.org/wiki/Q333286","display_name":"Bounding overwatch","level":2,"score":0.454800009727478},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.4417000114917755},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.4300999939441681},{"id":"https://openalex.org/C2775960376","wikidata":"https://www.wikidata.org/wiki/Q1435859","display_name":"Grippers","level":2,"score":0.40860000252723694},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.38420000672340393},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3698999881744385},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.351500004529953},{"id":"https://openalex.org/C147037132","wikidata":"https://www.wikidata.org/wiki/Q6865426","display_name":"Minimum bounding box","level":3,"score":0.3474000096321106},{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.3467000126838684},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3287000060081482},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.30410000681877136},{"id":"https://openalex.org/C145424490","wikidata":"https://www.wikidata.org/wiki/Q618465","display_name":"Remotely operated underwater vehicle","level":4,"score":0.2976999878883362},{"id":"https://openalex.org/C11560541","wikidata":"https://www.wikidata.org/wiki/Q1756025","display_name":"Replay attack","level":3,"score":0.29649999737739563},{"id":"https://openalex.org/C204241405","wikidata":"https://www.wikidata.org/wiki/Q461499","display_name":"Transformation (genetics)","level":3,"score":0.295199990272522},{"id":"https://openalex.org/C87833898","wikidata":"https://www.wikidata.org/wiki/Q1060280","display_name":"Advanced driver assistance systems","level":2,"score":0.28839999437332153},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.27469998598098755},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2621999979019165},{"id":"https://openalex.org/C64876066","wikidata":"https://www.wikidata.org/wiki/Q5141226","display_name":"Cognitive neuroscience of visual object recognition","level":3,"score":0.2554999887943268}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3626196","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3626196","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Sustainable cities and communities","id":"https://metadata.un.org/sdg/11","score":0.5003067255020142}],"awards":[{"id":"https://openalex.org/G6402620090","display_name":null,"funder_award_id":"62372361","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W114517082","https://openalex.org/W2166242527","https://openalex.org/W2275363859","https://openalex.org/W2479866714","https://openalex.org/W2535873859","https://openalex.org/W2603777577","https://openalex.org/W2604721644","https://openalex.org/W2733509922","https://openalex.org/W2797558164","https://openalex.org/W2890883923","https://openalex.org/W2950689937","https://openalex.org/W2962793481","https://openalex.org/W2963037989","https://openalex.org/W2963542245","https://openalex.org/W2963854351","https://openalex.org/W2963857521","https://openalex.org/W3035447895","https://openalex.org/W3035574168","https://openalex.org/W3035584216","https://openalex.org/W3108358648","https://openalex.org/W3174032462","https://openalex.org/W3185095134","https://openalex.org/W3204155906","https://openalex.org/W4225786036","https://openalex.org/W4226201626","https://openalex.org/W4282936640","https://openalex.org/W4293846201","https://openalex.org/W4313138527","https://openalex.org/W4328028651","https://openalex.org/W4367182782","https://openalex.org/W4386075987","https://openalex.org/W4386076210","https://openalex.org/W4390874272","https://openalex.org/W4391549807","https://openalex.org/W4391847287","https://openalex.org/W4393153717"],"related_works":[],"abstract_inverted_index":{"In":[0,60],"autonomous":[1,16],"driving,":[2],"object":[3,37],"detection":[4],"system":[5],"(ODS)":[6],"plays":[7],"a":[8,68,95,118],"crucial":[9],"role":[10],"in":[11,153],"ensuring":[12,148],"the":[13,78,101,124],"safety":[14],"of":[15,41],"vehicles.":[17],"However,":[18],"it":[19],"is":[20],"vulnerable":[21],"to":[22,29,57,81,108,122,145],"adversarial":[23,73],"examples":[24],"(AEs),":[25],"which":[26],"exploit":[27],"perturbations":[28,138],"deceive":[30],"deep":[31],"neural":[32],"networks":[33],"(DNNs)":[34],"used":[35],"for":[36,88],"detection.":[38],"Previous":[39],"instances":[40],"such":[42],"attacks":[43],"either":[44],"lack":[45],"stealthiness,":[46],"making":[47],"them":[48],"easily":[49],"detectable":[50],"by":[51,135],"human":[52,146],"observers,":[53,147],"or":[54],"are":[55,165],"limited":[56],"static":[58],"scenarios.":[59,155],"this":[61],"paper,":[62],"we":[63,93,116,132],"propose":[64],"<italic":[65],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[66],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">NarAdv</i>,":[67],"natural-style":[69],"and":[70,85,151,167,189],"robust":[71,86],"physical":[72],"attack":[74,177],"on":[75],"ODS,":[76],"marking":[77],"first":[79],"study":[80],"generate":[82],"highly":[83,168],"stealthy":[84],"AEs":[87,134,163],"dynamic":[89],"driving":[90,182],"environments.":[91],"First,":[92],"develop":[94,117],"bounding":[96],"box":[97],"pre-selection":[98],"module,":[99],"incorporating":[100],"Expectation":[102],"Over":[103],"Transformation":[104],"(EOT)":[105],"technique,":[106],"aiming":[107],"enhance":[109],"robustness":[110],"under":[111],"varying":[112,185],"distance":[113],"conditions.":[114,191],"Second,":[115],"perspective":[119],"alignment":[120],"module":[121],"model":[123],"camera's":[125],"viewpoint":[126],"shifts":[127],"during":[128],"vehicle":[129],"movement.":[130],"Finally,":[131],"camouflage":[133],"converting":[136],"large":[137],"into":[139],"natural":[140],"styles":[141],"that":[142,159,164,173],"appear":[143],"legitimate":[144],"both":[149],"effectiveness":[150],"stealthiness":[152],"real-world":[154],"We":[156],"have":[157],"shown":[158],"our":[160],"NarAdv":[161,174],"crafts":[162],"well-camouflaged":[166],"stealthy.":[169],"Extensive":[170],"experiments":[171],"demonstrate":[172],"achieves":[175],"high":[176],"success":[178],"rates":[179],"across":[180],"different":[181],"scenarios,":[183],"including":[184],"distances,":[186],"camera":[187],"angles,":[188],"lighting":[190]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-29T00:00:00"}