{"id":"https://openalex.org/W4415883860","doi":"https://doi.org/10.1109/mass66014.2025.00084","title":"Mitigating Adversarial Attacks in Object Detection using Multi-Modal Fusion in Autonomous Vehicles","display_name":"Mitigating Adversarial Attacks in Object Detection using Multi-Modal Fusion in Autonomous Vehicles","publication_year":2025,"publication_date":"2025-10-06","ids":{"openalex":"https://openalex.org/W4415883860","doi":"https://doi.org/10.1109/mass66014.2025.00084"},"language":null,"primary_location":{"id":"doi:10.1109/mass66014.2025.00084","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mass66014.2025.00084","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 22nd International Conference on Mobile Ad-Hoc and Smart Systems (MASS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043807642","display_name":"Ifrah Andleeb","orcid":null},"institutions":[{"id":"https://openalex.org/I74413500","display_name":"University of Windsor","ror":"https://ror.org/01gw3d370","country_code":"CA","type":"education","lineage":["https://openalex.org/I74413500"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Ifrah Andleeb","raw_affiliation_strings":["University of Windsor,Dept. of ECE,Canada"],"affiliations":[{"raw_affiliation_string":"University of Windsor,Dept. of ECE,Canada","institution_ids":["https://openalex.org/I74413500"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110597598","display_name":"Arsalan Hameed","orcid":null},"institutions":[{"id":"https://openalex.org/I2799847335","display_name":"Art Institute of Portland","ror":"https://ror.org/01cb0jg64","country_code":"US","type":"education","lineage":["https://openalex.org/I2799847335","https://openalex.org/I2799969541"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Arsalan Hameed","raw_affiliation_strings":["Healthsign,AI Researcher,Canada"],"affiliations":[{"raw_affiliation_string":"Healthsign,AI Researcher,Canada","institution_ids":["https://openalex.org/I2799847335"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061349662","display_name":"Katsuya Suto","orcid":"https://orcid.org/0000-0001-5576-4735"},"institutions":[{"id":"https://openalex.org/I104234503","display_name":"Hokkaido University of Science","ror":"https://ror.org/05gqsa340","country_code":"JP","type":"education","lineage":["https://openalex.org/I104234503"]},{"id":"https://openalex.org/I205349734","display_name":"Hokkaido University","ror":"https://ror.org/02e16g702","country_code":"JP","type":"education","lineage":["https://openalex.org/I205349734"]},{"id":"https://openalex.org/I156971308","display_name":"Hokkaido University of Education","ror":"https://ror.org/02gn38d51","country_code":"JP","type":"education","lineage":["https://openalex.org/I156971308"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Katsuya Suto","raw_affiliation_strings":["Hokkaido University,Dept. of IT,Japan"],"affiliations":[{"raw_affiliation_string":"Hokkaido University,Dept. of IT,Japan","institution_ids":["https://openalex.org/I104234503","https://openalex.org/I205349734","https://openalex.org/I156971308"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042170452","display_name":"Mitra Mirhassani","orcid":"https://orcid.org/0000-0001-8512-6427"},"institutions":[{"id":"https://openalex.org/I74413500","display_name":"University of Windsor","ror":"https://ror.org/01gw3d370","country_code":"CA","type":"education","lineage":["https://openalex.org/I74413500"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mitra Mirhassani","raw_affiliation_strings":["University of Windsor,Dept. of ECE,Canada"],"affiliations":[{"raw_affiliation_string":"University of Windsor,Dept. of ECE,Canada","institution_ids":["https://openalex.org/I74413500"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100729424","display_name":"Ning Zhang","orcid":"https://orcid.org/0000-0002-6793-1518"},"institutions":[{"id":"https://openalex.org/I74413500","display_name":"University of Windsor","ror":"https://ror.org/01gw3d370","country_code":"CA","type":"education","lineage":["https://openalex.org/I74413500"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ning Zhang","raw_affiliation_strings":["University of Windsor,Dept. of ECE,Canada"],"affiliations":[{"raw_affiliation_string":"University of Windsor,Dept. of ECE,Canada","institution_ids":["https://openalex.org/I74413500"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5043807642"],"corresponding_institution_ids":["https://openalex.org/I74413500"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.17928055,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"519","last_page":"527"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.965499997138977,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.965499997138977,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.02160000056028366,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11099","display_name":"Autonomous Vehicle Technology and Safety","score":0.002300000051036477,"subfield":{"id":"https://openalex.org/subfields/2203","display_name":"Automotive Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.738099992275238},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6722000241279602},{"id":"https://openalex.org/keywords/object-detection","display_name":"Object detection","score":0.6067000031471252},{"id":"https://openalex.org/keywords/lidar","display_name":"Lidar","score":0.6039999723434448},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.521399974822998},{"id":"https://openalex.org/keywords/point-cloud","display_name":"Point cloud","score":0.5041999816894531},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4855000078678131},{"id":"https://openalex.org/keywords/bounding-overwatch","display_name":"Bounding overwatch","score":0.47519999742507935}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.738099992275238},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6722000241279602},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6384000182151794},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.620199978351593},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.6067000031471252},{"id":"https://openalex.org/C51399673","wikidata":"https://www.wikidata.org/wiki/Q504027","display_name":"Lidar","level":2,"score":0.6039999723434448},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6019999980926514},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.521399974822998},{"id":"https://openalex.org/C131979681","wikidata":"https://www.wikidata.org/wiki/Q1899648","display_name":"Point cloud","level":2,"score":0.5041999816894531},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4855000078678131},{"id":"https://openalex.org/C63584917","wikidata":"https://www.wikidata.org/wiki/Q333286","display_name":"Bounding overwatch","level":2,"score":0.47519999742507935},{"id":"https://openalex.org/C33954974","wikidata":"https://www.wikidata.org/wiki/Q486494","display_name":"Sensor fusion","level":2,"score":0.4302000105381012},{"id":"https://openalex.org/C89600930","wikidata":"https://www.wikidata.org/wiki/Q1423946","display_name":"Segmentation","level":2,"score":0.39309999346733093},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.36489999294281006},{"id":"https://openalex.org/C147037132","wikidata":"https://www.wikidata.org/wiki/Q6865426","display_name":"Minimum bounding box","level":3,"score":0.350600004196167},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3160000145435333},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.2985000014305115},{"id":"https://openalex.org/C158525013","wikidata":"https://www.wikidata.org/wiki/Q2593739","display_name":"Fusion","level":2,"score":0.2944999933242798},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2906999886035919},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.288100004196167},{"id":"https://openalex.org/C60229501","wikidata":"https://www.wikidata.org/wiki/Q18822","display_name":"Global Positioning System","level":2,"score":0.28450000286102295},{"id":"https://openalex.org/C124504099","wikidata":"https://www.wikidata.org/wiki/Q56933","display_name":"Image segmentation","level":3,"score":0.2808000147342682},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.25679999589920044},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2556999921798706},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.25380000472068787},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.2524999976158142}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/mass66014.2025.00084","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mass66014.2025.00084","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 22nd International Conference on Mobile Ad-Hoc and Smart Systems (MASS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W3120349939","https://openalex.org/W4225463226","https://openalex.org/W4289821979","https://openalex.org/W4295249789","https://openalex.org/W4362714293","https://openalex.org/W4386835579","https://openalex.org/W4391467422","https://openalex.org/W4398188179","https://openalex.org/W4400911440","https://openalex.org/W4404835166","https://openalex.org/W4407272662","https://openalex.org/W4407423973","https://openalex.org/W4410737954","https://openalex.org/W4411232065","https://openalex.org/W4413018504"],"related_works":[],"abstract_inverted_index":{"Robust":[0],"object":[1,79],"detection":[2,137],"in":[3,169,213],"adverse":[4],"weather":[5],"conditions":[6,52],"is":[7,187],"critical":[8],"for":[9,140,207],"ensuring":[10],"the":[11,28,35,89,123,181,188,200],"safety":[12],"and":[13,42,48,53,129,133,195],"reliability":[14],"of":[15,31,65,91,153,183],"autonomous":[16,214],"driving":[17],"systems.":[18],"In":[19],"this":[20,97,186],"work,":[21],"we":[22,70,99],"present":[23],"a":[24,60,92,101,167,204],"detailed":[25],"study":[26],"on":[27,199],"adversarial":[29,73,162,193],"robustness":[30,194],"YOLO-based":[32],"detectors":[33],"using":[34,127],"RealDriveSim":[36,201],"dataset,":[37,202],"which":[38],"includes":[39],"foggy,":[40],"rainy,":[41],"nighttime":[43],"scenarios.":[44],"We":[45],"benchmark":[46,192],"YOLOv9":[47],"YOLOv10":[49,58],"under":[50],"clean":[51],"observe":[54],"high":[55],"performance,":[56],"with":[57,149],"achieving":[59],"mean":[61],"average":[62],"precision":[63],"(mAP)":[64],"69.6%.":[66],"To":[67,95,180],"evaluate":[68],"vulnerability,":[69],"introduce":[71],"an":[72,150],"patch":[74],"optimized":[75],"to":[76,86,166,171,191],"suppress":[77],"road":[78],"detections.":[80],"After":[81],"patch-based":[82],"perturbation,":[83],"mAP":[84,170],"drops":[85],"44.3%,":[87],"highlighting":[88],"importance":[90],"defense":[93,198],"system.":[94],"counter":[96],"degradation,":[98],"propose":[100],"lightweight":[102],"LiDAR-camera":[103],"fusion":[104,158,197],"framework":[105],"that":[106],"does":[107],"not":[108],"require":[109],"model":[110,175],"retraining":[111,176],"or":[112,177],"architectural":[113,178],"changes.":[114,179],"Our":[115,157],"method":[116],"projects":[117],"3D":[118,142],"LiDAR":[119,143],"point":[120],"clouds":[121],"into":[122],"2D":[124,136],"image":[125],"plane":[126],"intrinsic":[128],"extrinsic":[130],"calibration":[131],"parameters":[132],"cross-validates":[134],"each":[135],"by":[138],"checking":[139],"supporting":[141],"points":[144],"within":[145],"its":[146],"bounding":[147],"box":[148],"inference":[151],"time":[152],"only":[154],"7.2":[155],"ms.":[156],"strategy":[159],"effectively":[160],"filters":[161],"false":[163],"positives,":[164],"leading":[165],"recovery":[168],"62.9%,":[172],"without":[173],"requiring":[174],"best":[182],"our":[184],"knowledge,":[185],"first":[189],"work":[190],"sensor-level":[196],"setting":[203],"new":[205],"standard":[206],"evaluating":[208],"real-world":[209],"physical":[210],"attack":[211],"resilience":[212],"perception.":[215]},"counts_by_year":[],"updated_date":"2026-03-07T16:01:11.037858","created_date":"2025-11-04T00:00:00"}
