{"id":"https://openalex.org/W7160242948","doi":"https://doi.org/10.1109/wacv61042.2026.00170","title":"AD 2 : Analysis and Detection of Adversarial Threats in Visual Perception for End-to-End Autonomous Driving Systems","display_name":"AD 2 : Analysis and Detection of Adversarial Threats in Visual Perception for End-to-End Autonomous Driving Systems","publication_year":2026,"publication_date":"2026-03-06","ids":{"openalex":"https://openalex.org/W7160242948","doi":"https://doi.org/10.1109/wacv61042.2026.00170"},"language":null,"primary_location":{"id":"doi:10.1109/wacv61042.2026.00170","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wacv61042.2026.00170","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE/CVF Winter Conference on Applications of Computer Vision (WACV)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125720443","display_name":"Ishan Sahu","orcid":null},"institutions":[{"id":"https://openalex.org/I145894827","display_name":"Indian Institute of Technology Kharagpur","ror":"https://ror.org/03w5sq511","country_code":"IN","type":"education","lineage":["https://openalex.org/I145894827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Ishan Sahu","raw_affiliation_strings":["Indian Institute of Technology Kharagpur"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Kharagpur","institution_ids":["https://openalex.org/I145894827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021957449","display_name":"Somnath Hazra","orcid":"https://orcid.org/0000-0003-1497-1820"},"institutions":[{"id":"https://openalex.org/I145894827","display_name":"Indian Institute of Technology Kharagpur","ror":"https://ror.org/03w5sq511","country_code":"IN","type":"education","lineage":["https://openalex.org/I145894827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Somnath Hazra","raw_affiliation_strings":["Indian Institute of Technology Kharagpur"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Kharagpur","institution_ids":["https://openalex.org/I145894827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135286893","display_name":"Somak Aditya","orcid":null},"institutions":[{"id":"https://openalex.org/I145894827","display_name":"Indian Institute of Technology Kharagpur","ror":"https://ror.org/03w5sq511","country_code":"IN","type":"education","lineage":["https://openalex.org/I145894827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Somak Aditya","raw_affiliation_strings":["Indian Institute of Technology Kharagpur"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Kharagpur","institution_ids":["https://openalex.org/I145894827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085224640","display_name":"Soumyajit Dey","orcid":"https://orcid.org/0000-0001-9329-6389"},"institutions":[{"id":"https://openalex.org/I145894827","display_name":"Indian Institute of Technology Kharagpur","ror":"https://ror.org/03w5sq511","country_code":"IN","type":"education","lineage":["https://openalex.org/I145894827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Soumyajit Dey","raw_affiliation_strings":["Indian Institute of Technology Kharagpur"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Kharagpur","institution_ids":["https://openalex.org/I145894827"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I145894827"],"apc_list":null,"apc_paid":null,"fwci":13.0374,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.97950029,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1695","last_page":"1704"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8273000121116638,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8273000121116638,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11099","display_name":"Autonomous Vehicle Technology and Safety","score":0.08089999854564667,"subfield":{"id":"https://openalex.org/subfields/2203","display_name":"Automotive Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.008200000040233135,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5785999894142151},{"id":"https://openalex.org/keywords/perception","display_name":"Perception","score":0.5037000179290771},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.34040001034736633},{"id":"https://openalex.org/keywords/visual-perception","display_name":"Visual perception","score":0.335999995470047},{"id":"https://openalex.org/keywords/eye-tracking","display_name":"Eye tracking","score":0.3084000051021576},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.30640000104904175}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5785999894142151},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.567300021648407},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.5037000179290771},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46320000290870667},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.4413999915122986},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3508000075817108},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.34040001034736633},{"id":"https://openalex.org/C178253425","wikidata":"https://www.wikidata.org/wiki/Q162668","display_name":"Visual perception","level":3,"score":0.335999995470047},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.328000009059906},{"id":"https://openalex.org/C56461940","wikidata":"https://www.wikidata.org/wiki/Q970687","display_name":"Eye tracking","level":2,"score":0.3084000051021576},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.30640000104904175},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.30079999566078186},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.2946000099182129},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.29269999265670776},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.28940001130104065},{"id":"https://openalex.org/C46312422","wikidata":"https://www.wikidata.org/wiki/Q11024","display_name":"Communication","level":1,"score":0.28929999470710754},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.28200000524520874},{"id":"https://openalex.org/C2986089797","wikidata":"https://www.wikidata.org/wiki/Q6501338","display_name":"Visual attention","level":3,"score":0.2687000036239624},{"id":"https://openalex.org/C2776196576","wikidata":"https://www.wikidata.org/wiki/Q196113","display_name":"Camouflage","level":2,"score":0.2549000084400177}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/wacv61042.2026.00170","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wacv61042.2026.00170","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE/CVF Winter Conference on Applications of Computer Vision (WACV)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W1965475047","https://openalex.org/W2194775991","https://openalex.org/W2607219512","https://openalex.org/W2963564844","https://openalex.org/W3154528133","https://openalex.org/W3183870986","https://openalex.org/W4226232092","https://openalex.org/W4285172631","https://openalex.org/W4292347911","https://openalex.org/W4385356567","https://openalex.org/W4386066695","https://openalex.org/W4389169869","https://openalex.org/W4390497390","https://openalex.org/W4400975130","https://openalex.org/W4401109681","https://openalex.org/W4402093547","https://openalex.org/W4403094475","https://openalex.org/W4403600970","https://openalex.org/W4405181978","https://openalex.org/W4405743482","https://openalex.org/W4409361534","https://openalex.org/W4410115164","https://openalex.org/W4413018043","https://openalex.org/W4415800674","https://openalex.org/W7160152780"],"related_works":[],"abstract_inverted_index":{"End-to-end":[0],"autonomous":[1,25],"driving":[2,26,97],"systems":[3,128],"have":[4],"achieved":[5],"significant":[6],"progress,":[7],"yet":[8],"their":[9],"adversarial":[10,30],"robustness":[11],"remains":[12],"largely":[13],"underexplored.":[14],"In":[15],"this":[16],"work,":[17],"we":[18,36,117],"conduct":[19],"a":[20,48,67,120],"closed-loop":[21],"evaluation":[22],"of":[23],"state-of-the-art":[24],"agents":[27],"under":[28],"black-box":[29],"threat":[31],"models":[32],"in":[33,104],"CARLA.":[34],"Specifically,":[35],"consider":[37],"three":[38],"representative":[39],"attack":[40,51,60,69],"vectors":[41],"on":[42,79,83,131,143],"the":[43,105],"visual":[44],"perception":[45],"pipeline:":[46],"(i)":[47],"physics-based":[49],"blur":[50],"induced":[52],"by":[53,100],"acoustic":[54],"waves,":[55],"(ii)":[56],"an":[57],"electromagnetic":[58],"interference":[59],"that":[61,70,134,146],"distorts":[62],"captured":[63],"images,":[64],"and":[65,88,153],"(iii)":[66],"digital":[68],"adds":[71],"ghost":[72],"objects":[73],"as":[74],"carefully":[75],"crafted":[76],"bounded":[77],"perturbations":[78],"images.":[80],"Our":[81],"experiments":[82,139],"two":[84],"advanced":[85],"agents,":[86],"Transfuser":[87],"Interfuser,":[89],"reveal":[90],"severe":[91],"vulnerabilities":[92],"to":[93,102,157],"such":[94,115],"attacks,":[95],"with":[96],"scores":[98],"dropping":[99],"up":[101],"99%":[103],"worst":[106],"case,":[107],"raising":[108],"valid":[109],"safety":[110],"concerns.":[111],"To":[112],"help":[113],"mitigate":[114],"threats,":[116],"further":[118],"propose":[119],"lightweight":[121],"Attack":[122],"Detection":[123],"model":[124],"for":[125],"Autonomous":[126],"Driving":[127],"(AD2)":[129],"based":[130],"attention":[132],"mechanisms":[133],"capture":[135],"spatial-temporal":[136],"consistency.":[137],"Comprehensive":[138],"across":[140],"multi-camera":[141],"inputs":[142],"CARLA":[144],"show":[145],"our":[147],"detector":[148],"achieves":[149],"superior":[150],"detection":[151],"capability":[152],"computational":[154],"efficiency":[155],"compared":[156],"existing":[158],"approaches.":[159]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2026-05-06T00:00:00"}