{"id":"https://openalex.org/W4307964211","doi":"https://doi.org/10.1145/3560830.3563733","title":"Assessing the Impact of Transformations on Physical Adversarial Attacks","display_name":"Assessing the Impact of Transformations on Physical Adversarial Attacks","publication_year":2022,"publication_date":"2022-11-02","ids":{"openalex":"https://openalex.org/W4307964211","doi":"https://doi.org/10.1145/3560830.3563733"},"language":"en","primary_location":{"id":"doi:10.1145/3560830.3563733","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3560830.3563733","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM Workshop on Artificial Intelligence and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5019331911","display_name":"Paul Andrei Sava","orcid":null},"institutions":[{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Paul Andrei Sava","raw_affiliation_strings":["Technical University of Munich & Fraunhofer AISEC, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Munich & Fraunhofer AISEC, Munich, Germany","institution_ids":["https://openalex.org/I4210136922","https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066820889","display_name":"Jan-Philipp Schulze","orcid":"https://orcid.org/0000-0003-1787-4102"},"institutions":[{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jan-Philipp Schulze","raw_affiliation_strings":["Technical University of Munich & Fraunhofer AISEC, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Munich & Fraunhofer AISEC, Munich, Germany","institution_ids":["https://openalex.org/I4210136922","https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011742469","display_name":"Philip Sperl","orcid":"https://orcid.org/0000-0002-7901-7168"},"institutions":[{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Philip Sperl","raw_affiliation_strings":["Technical University of Munich & Fraunhofer AISEC, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Munich & Fraunhofer AISEC, Munich, Germany","institution_ids":["https://openalex.org/I4210136922","https://openalex.org/I62916508"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5091848694","display_name":"Konstantin B\u00f6ttinger","orcid":"https://orcid.org/0000-0002-9337-7506"},"institutions":[{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Konstantin B\u00f6ttinger","raw_affiliation_strings":["Fraunhofer AISEC, Garching, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer AISEC, Garching, Germany","institution_ids":["https://openalex.org/I4210136922"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.5179,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.85349592,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"79","last_page":"90"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9872999787330627,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9864000082015991,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9551113843917847},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7251051068305969},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7218209505081177},{"id":"https://openalex.org/keywords/realm","display_name":"Realm","score":0.620729386806488},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.5817171335220337},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5808167457580566},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5551403760910034},{"id":"https://openalex.org/keywords/physical-security","display_name":"Physical security","score":0.5124574303627014},{"id":"https://openalex.org/keywords/range","display_name":"Range (aeronautics)","score":0.4697349965572357},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.35163432359695435},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.12627822160720825}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9551113843917847},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7251051068305969},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7218209505081177},{"id":"https://openalex.org/C2778757428","wikidata":"https://www.wikidata.org/wiki/Q1250464","display_name":"Realm","level":2,"score":0.620729386806488},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.5817171335220337},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5808167457580566},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5551403760910034},{"id":"https://openalex.org/C2776157020","wikidata":"https://www.wikidata.org/wiki/Q851598","display_name":"Physical security","level":2,"score":0.5124574303627014},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.4697349965572357},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.35163432359695435},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.12627822160720825},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3560830.3563733","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3560830.3563733","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM Workshop on Artificial Intelligence and Security","raw_type":"proceedings-article"},{"id":"pmh:oai:null:publica/429179","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/429179","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W639708223","https://openalex.org/W2050607296","https://openalex.org/W2535873859","https://openalex.org/W2536208356","https://openalex.org/W2603766943","https://openalex.org/W2613995098","https://openalex.org/W2734506812","https://openalex.org/W2788820894","https://openalex.org/W2953610242","https://openalex.org/W2984260944","https://openalex.org/W3109906897","https://openalex.org/W3150962209","https://openalex.org/W3205672068","https://openalex.org/W4293584584","https://openalex.org/W4294517337","https://openalex.org/W4299905753"],"related_works":["https://openalex.org/W2359053655","https://openalex.org/W2387777532","https://openalex.org/W2382709029","https://openalex.org/W2389147080","https://openalex.org/W2377883125","https://openalex.org/W2362479786","https://openalex.org/W2392455911","https://openalex.org/W2374248756","https://openalex.org/W2375492428","https://openalex.org/W2350419982"],"abstract_inverted_index":{"The":[0,131],"decision":[1],"of":[2,62,69,133],"neural":[3],"networks":[4],"is":[5],"easily":[6],"shifted":[7],"at":[8],"an":[9],"attacker's":[10],"will":[11],"by":[12],"so-called":[13],"adversarial":[14,38,71,166],"attacks.":[15,39,72],"Initially":[16],"only":[17,159],"successful":[18,96],"when":[19],"directly":[20],"applied":[21],"to":[22,29,35,50,106,119,138,174],"the":[23,31,52,60,63,67,100,113,120,134],"input,":[24],"recent":[25],"advances":[26],"allow":[27],"attacks":[28],"breach":[30],"digital":[32],"realm,":[33],"leading":[34],"over-the-air":[36],"physical":[37,43,70,128,165],"During":[40],"training,":[41],"some":[42,90,142],"phenomena":[44],"are":[45,92,116],"simulated":[46],"through":[47],"equivalent":[48],"transformations":[49,65,91,136],"increase":[51],"attack's":[53],"success.":[54],"In":[55],"our":[56,155],"work,":[57],"we":[58,157],"evaluate":[59],"impact":[61],"selected":[64],"on":[66,163,172],"performance":[68,76],"We":[73],"quantify":[74],"their":[75,176],"across":[77],"diverse":[78],"attack":[79],"scenarios,":[80],"e.g.,":[81,141],"multiple":[82],"distances":[83],"and":[84],"angles.":[85],"Our":[86],"evaluation":[87],"motivates":[88],"that":[89],"indeed":[93],"essential":[94],"for":[95,109,146,151],"attacks,":[97,114,148,167],"no":[98],"matter":[99],"target":[101,121],"class.":[102,122],"These":[103],"also":[104,169],"appear":[105],"be":[107,139],"responsible":[108],"creating":[110],"shapes":[111],"within":[112],"which":[115],"semantically":[117],"related":[118],"However,":[123],"they":[124],"do":[125],"not":[126,150,158],"ensure":[127],"robustness":[129],"alone.":[130],"choice":[132],"remaining":[135],"appears":[137],"context-dependent,":[140],"being":[143],"more":[144],"advantageous":[145],"long-range":[147],"but":[149,168],"close-range":[152],"ones.":[153],"With":[154],"findings,":[156],"provide":[160],"useful":[161],"information":[162],"generating":[164],"help":[170],"research":[171],"defenses":[173],"understand":[175],"weaknesses.":[177]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":3}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}