{"id":"https://openalex.org/W3140377724","doi":"https://doi.org/10.1109/tii.2021.3071405","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","display_name":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","publication_year":2021,"publication_date":"2021-04-06","ids":{"openalex":"https://openalex.org/W3140377724","doi":"https://doi.org/10.1109/tii.2021.3071405","mag":"3140377724"},"language":"en","primary_location":{"id":"doi:10.1109/tii.2021.3071405","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tii.2021.3071405","pdf_url":null,"source":{"id":"https://openalex.org/S184777250","display_name":"IEEE Transactions on Industrial Informatics","issn_l":"1551-3203","issn":["1551-3203","1941-0050"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Industrial Informatics","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068349578","display_name":"Yao Deng","orcid":"https://orcid.org/0000-0002-9762-7058"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yao Deng","raw_affiliation_strings":["Department of Computing, Macquarie University, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9762-7058","affiliations":[{"raw_affiliation_string":"Department of Computing, Macquarie University, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020793859","display_name":"Tiehua Zhang","orcid":"https://orcid.org/0000-0002-7195-4472"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Tiehua Zhang","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0002-7195-4472","affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019279449","display_name":"Guannan Lou","orcid":"https://orcid.org/0000-0002-9604-6390"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Guannan Lou","raw_affiliation_strings":["Department of Computing, Macquarie University, Sydney, NSW, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing, Macquarie University, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081182489","display_name":"Xi Zheng","orcid":"https://orcid.org/0000-0002-2572-2355"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xi Zheng","raw_affiliation_strings":["Department of Computing, Macquarie University, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-2572-2355","affiliations":[{"raw_affiliation_string":"Department of Computing, Macquarie University, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080328538","display_name":"Jiong Jin","orcid":"https://orcid.org/0000-0002-0306-2691"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Jiong Jin","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0002-0306-2691","affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083874423","display_name":"Qing\u2010Long Han","orcid":"https://orcid.org/0000-0002-7207-0716"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Qing-Long Han","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0002-7207-0716","affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":14.2986,"has_fulltext":false,"cited_by_count":175,"citation_normalized_percentile":{"value":0.99156479,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"17","issue":"12","first_page":"7897","last_page":"7912"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9873999953269958,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9725000262260437,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.7224485874176025},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6559763550758362},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6315068602561951},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6175317764282227},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6157546043395996},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5982803106307983},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.529233455657959},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5239431858062744},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.50590580701828},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.49958038330078125},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.47302794456481934},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.44587212800979614}],"concepts":[{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.7224485874176025},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6559763550758362},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6315068602561951},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6175317764282227},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6157546043395996},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5982803106307983},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.529233455657959},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5239431858062744},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.50590580701828},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.49958038330078125},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.47302794456481934},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.44587212800979614},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tii.2021.3071405","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tii.2021.3071405","pdf_url":null,"source":{"id":"https://openalex.org/S184777250","display_name":"IEEE Transactions on Industrial Informatics","issn_l":"1551-3203","issn":["1551-3203","1941-0050"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Industrial Informatics","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.49000000953674316,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":176,"referenced_works":["https://openalex.org/W102190310","https://openalex.org/W174269335","https://openalex.org/W1470570003","https://openalex.org/W1536680647","https://openalex.org/W1585201850","https://openalex.org/W1614659291","https://openalex.org/W1673923490","https://openalex.org/W1793197839","https://openalex.org/W1883420340","https://openalex.org/W1903029394","https://openalex.org/W1945616565","https://openalex.org/W2046659441","https://openalex.org/W2080611336","https://openalex.org/W2099474094","https://openalex.org/W2117962540","https://openalex.org/W2126628495","https://openalex.org/W2135689574","https://openalex.org/W2150113962","https://openalex.org/W2211722331","https://openalex.org/W2243397390","https://openalex.org/W2342840547","https://openalex.org/W2402268235","https://openalex.org/W2475412994","https://openalex.org/W2477231637","https://openalex.org/W2497078867","https://openalex.org/W2515486452","https://openalex.org/W2537005174","https://openalex.org/W2543296129","https://openalex.org/W2543927648","https://openalex.org/W2559767995","https://openalex.org/W2560023338","https://openalex.org/W2560609797","https://openalex.org/W2570685808","https://openalex.org/W2586751528","https://openalex.org/W2598706937","https://openalex.org/W2603766943","https://openalex.org/W2604382266","https://openalex.org/W2604394466","https://openalex.org/W2607219512","https://openalex.org/W2610190180","https://openalex.org/W2611562434","https://openalex.org/W2616841723","https://openalex.org/W2620038827","https://openalex.org/W2739529772","https://openalex.org/W2740323046","https://openalex.org/W2746600820","https://openalex.org/W2753783305","https://openalex.org/W2765424254","https://openalex.org/W2774018344","https://openalex.org/W2786080675","https://openalex.org/W2786163515","https://openalex.org/W2789304371","https://openalex.org/W2795727551","https://openalex.org/W2798302089","https://openalex.org/W2798930779","https://openalex.org/W2807398060","https://openalex.org/W2867167548","https://openalex.org/W2884989375","https://openalex.org/W2890038638","https://openalex.org/W2903637353","https://openalex.org/W2905423756","https://openalex.org/W2910314742","https://openalex.org/W2912070915","https://openalex.org/W2913266441","https://openalex.org/W2934843808","https://openalex.org/W2941205169","https://openalex.org/W2945639270","https://openalex.org/W2949103145","https://openalex.org/W2949708697","https://openalex.org/W2952661572","https://openalex.org/W2955544543","https://openalex.org/W2959364614","https://openalex.org/W2962700793","https://openalex.org/W2962710014","https://openalex.org/W2962729158","https://openalex.org/W2962818872","https://openalex.org/W2962867954","https://openalex.org/W2962894046","https://openalex.org/W2962927323","https://openalex.org/W2962951365","https://openalex.org/W2963001136","https://openalex.org/W2963001155","https://openalex.org/W2963037989","https://openalex.org/W2963070423","https://openalex.org/W2963100962","https://openalex.org/W2963178695","https://openalex.org/W2963207607","https://openalex.org/W2963389226","https://openalex.org/W2963448658","https://openalex.org/W2963496101","https://openalex.org/W2963542245","https://openalex.org/W2963566318","https://openalex.org/W2963612069","https://openalex.org/W2963626025","https://openalex.org/W2963629198","https://openalex.org/W2963662610","https://openalex.org/W2963706662","https://openalex.org/W2963727135","https://openalex.org/W2963744840","https://openalex.org/W2963855547","https://openalex.org/W2963857521","https://openalex.org/W2963952467","https://openalex.org/W2964043796","https://openalex.org/W2964082701","https://openalex.org/W2964153729","https://openalex.org/W2964197269","https://openalex.org/W2964294232","https://openalex.org/W2965565691","https://openalex.org/W2969596189","https://openalex.org/W2972676112","https://openalex.org/W2980535048","https://openalex.org/W2984260944","https://openalex.org/W2985020889","https://openalex.org/W2986305485","https://openalex.org/W2990270730","https://openalex.org/W2997719468","https://openalex.org/W3015176854","https://openalex.org/W3035524670","https://openalex.org/W3039575763","https://openalex.org/W3042417939","https://openalex.org/W3046359723","https://openalex.org/W3048723201","https://openalex.org/W3090608524","https://openalex.org/W3092988199","https://openalex.org/W3098881644","https://openalex.org/W3102720581","https://openalex.org/W3103557498","https://openalex.org/W3105806188","https://openalex.org/W3106412272","https://openalex.org/W3106440972","https://openalex.org/W3114753236","https://openalex.org/W3118608800","https://openalex.org/W3175984392","https://openalex.org/W3200175741","https://openalex.org/W4289300166","https://openalex.org/W4295719664","https://openalex.org/W4300167250","https://openalex.org/W6607124456","https://openalex.org/W6628508383","https://openalex.org/W6634964483","https://openalex.org/W6637162671","https://openalex.org/W6639568328","https://openalex.org/W6640425456","https://openalex.org/W6692846177","https://openalex.org/W6704559304","https://openalex.org/W6713098461","https://openalex.org/W6719080892","https://openalex.org/W6721630048","https://openalex.org/W6729756640","https://openalex.org/W6731927902","https://openalex.org/W6733049761","https://openalex.org/W6737897983","https://openalex.org/W6742214317","https://openalex.org/W6744511767","https://openalex.org/W6745272055","https://openalex.org/W6745935785","https://openalex.org/W6746608116","https://openalex.org/W6748204703","https://openalex.org/W6748277150","https://openalex.org/W6752444042","https://openalex.org/W6752760542","https://openalex.org/W6753527932","https://openalex.org/W6754108890","https://openalex.org/W6756074407","https://openalex.org/W6758779121","https://openalex.org/W6759129252","https://openalex.org/W6763422710","https://openalex.org/W6764629166","https://openalex.org/W6765694979","https://openalex.org/W6766787143","https://openalex.org/W6780185707","https://openalex.org/W6780439892","https://openalex.org/W6781429935","https://openalex.org/W6784241397","https://openalex.org/W6786289243","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W4246396837","https://openalex.org/W2482350142","https://openalex.org/W3176240006","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4288019534","https://openalex.org/W4310988119"],"abstract_inverted_index":{"The":[0,111],"rapid":[1],"development":[2],"of":[3,64,96,120],"artificial":[4],"intelligence,":[5],"especially":[6],"deep":[7,65,132,154],"learning":[8,133],"technology,":[9],"has":[10],"advanced":[11],"autonomous":[12,67,156],"driving":[13,25,31,68,157],"systems":[14],"(ADSs)":[15],"by":[16,41,72,115],"providing":[17],"precise":[18],"control":[19],"decisions":[20],"to":[21,32,85,152],"counterpart":[22],"almost":[23],"any":[24],"event,":[26],"spanning":[27],"from":[28,44,75],"antifatigue":[29],"safe":[30],"intelligent":[33],"route":[34],"planning.":[35],"However,":[36],"ADSs":[37],"are":[38,69,148],"still":[39],"plagued":[40],"increasing":[42],"threats":[43],"different":[45,97],"attacks,":[46,53,74],"which":[47,76],"could":[48],"be":[49,80],"categorized":[50],"into":[51],"physical":[52,139],"cyberattacks":[54],"and":[55,62,82,135,140,165,167],"learning-based":[56,66,155],"adversarial":[57,128],"attacks.":[58],"Inevitably,":[59],"the":[60,77,106,124],"safety":[61],"security":[63],"severely":[70],"challenged":[71],"these":[73],"countermeasures":[78],"should":[79],"analyzed":[81],"studied":[83],"comprehensively":[84],"mitigate":[86],"all":[87],"potential":[88],"risks.":[89],"This":[90],"survey":[91],"provides":[92],"a":[93],"thorough":[94],"analysis":[95,112],"attacks":[98,129,136],"that":[99],"may":[100],"jeopardize":[101],"ADSs,":[102],"as":[103,105],"well":[104],"corresponding":[107],"state-of-the-art":[108],"defense":[109],"mechanisms.":[110],"is":[113],"unrolled":[114],"taking":[116],"an":[117],"in-depth":[118],"overview":[119],"each":[121],"step":[122],"in":[123,137,150],"ADS":[125],"workflow,":[126],"covering":[127],"for":[130],"various":[131],"models":[134],"both":[138],"cyber":[141],"context.":[142],"Furthermore,":[143],"some":[144],"promising":[145],"research":[146],"directions":[147],"suggested":[149],"order":[151],"improve":[153],"safety,":[158],"including":[159],"model":[160,163],"robustness":[161],"training,":[162],"testing":[164],"verification,":[166],"anomaly":[168],"detection":[169],"based":[170],"on":[171],"cloud/edge":[172],"servers.":[173]},"counts_by_year":[{"year":2026,"cited_by_count":17},{"year":2025,"cited_by_count":48},{"year":2024,"cited_by_count":44},{"year":2023,"cited_by_count":41},{"year":2022,"cited_by_count":18},{"year":2021,"cited_by_count":7}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}
