{"id":"https://openalex.org/W7128732531","doi":"https://doi.org/10.48550/arxiv.2602.10160","title":"AD$^2$: Analysis and Detection of Adversarial Threats in Visual Perception for End-to-End Autonomous Driving Systems","display_name":"AD$^2$: Analysis and Detection of Adversarial Threats in Visual Perception for End-to-End Autonomous Driving Systems","publication_year":2026,"publication_date":"2026-02-10","ids":{"openalex":"https://openalex.org/W7128732531","doi":"https://doi.org/10.48550/arxiv.2602.10160"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2602.10160","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.10160","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2602.10160","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125720443","display_name":"Ishan Sahu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sahu, Ishan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021957449","display_name":"Somnath Hazra","orcid":"https://orcid.org/0000-0003-1497-1820"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hazra, Somnath","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108557385","display_name":"Somak Aditya","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Aditya, Somak","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5125712723","display_name":"Soumyajit Dey","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dey, Soumyajit","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8230999708175659},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6482999920845032},{"id":"https://openalex.org/keywords/perception","display_name":"Perception","score":0.5945000052452087},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.5055000185966492},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.3946000039577484},{"id":"https://openalex.org/keywords/visual-perception","display_name":"Visual perception","score":0.3427000045776367},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.3294000029563904}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8230999708175659},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6482999920845032},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6470000147819519},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.5945000052452087},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.5055000185966492},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46880000829696655},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.46389999985694885},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43860000371932983},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3946000039577484},{"id":"https://openalex.org/C178253425","wikidata":"https://www.wikidata.org/wiki/Q162668","display_name":"Visual perception","level":3,"score":0.3427000045776367},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.3294000029563904},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.31130000948905945},{"id":"https://openalex.org/C87833898","wikidata":"https://www.wikidata.org/wiki/Q1060280","display_name":"Advanced driver assistance systems","level":2,"score":0.2948000133037567},{"id":"https://openalex.org/C32022120","wikidata":"https://www.wikidata.org/wiki/Q797225","display_name":"Interference (communication)","level":3,"score":0.2851000130176544},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.2842000126838684},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.2799000144004822},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.2784000039100647},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.27489998936653137}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2602.10160","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.10160","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2602.10160","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.10160","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6014220118522644,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"End-to-end":[0],"autonomous":[1,25],"driving":[2,26,97],"systems":[3,128],"have":[4],"achieved":[5],"significant":[6],"progress,":[7],"yet":[8],"their":[9],"adversarial":[10,30],"robustness":[11],"remains":[12],"largely":[13],"underexplored.":[14],"In":[15],"this":[16],"work,":[17],"we":[18,36,117],"conduct":[19],"a":[20,48,67,120],"closed-loop":[21],"evaluation":[22],"of":[23],"state-of-the-art":[24],"agents":[27],"under":[28],"black-box":[29],"threat":[31],"models":[32],"in":[33,104],"CARLA.":[34],"Specifically,":[35],"consider":[37],"three":[38],"representative":[39],"attack":[40,51,60,69],"vectors":[41],"on":[42,79,83,131,143],"the":[43,105],"visual":[44],"perception":[45],"pipeline:":[46],"(i)":[47],"physics-based":[49],"blur":[50],"induced":[52],"by":[53,100],"acoustic":[54],"waves,":[55],"(ii)":[56],"an":[57],"electromagnetic":[58],"interference":[59],"that":[61,70,134,146],"distorts":[62],"captured":[63],"images,":[64],"and":[65,88,153],"(iii)":[66],"digital":[68],"adds":[71],"ghost":[72],"objects":[73],"as":[74],"carefully":[75],"crafted":[76],"bounded":[77],"perturbations":[78],"images.":[80],"Our":[81],"experiments":[82,139],"two":[84],"advanced":[85],"agents,":[86],"Transfuser":[87],"Interfuser,":[89],"reveal":[90],"severe":[91],"vulnerabilities":[92],"to":[93,102,157],"such":[94,115],"attacks,":[95],"with":[96],"scores":[98],"dropping":[99],"up":[101],"99%":[103],"worst":[106],"case,":[107],"raising":[108],"valid":[109],"safety":[110],"concerns.":[111],"To":[112],"help":[113],"mitigate":[114],"threats,":[116],"further":[118],"propose":[119],"lightweight":[121],"Attack":[122],"Detection":[123],"model":[124],"for":[125],"Autonomous":[126],"Driving":[127],"(AD$^2$)":[129],"based":[130],"attention":[132],"mechanisms":[133],"capture":[135],"spatial-temporal":[136],"consistency.":[137],"Comprehensive":[138],"across":[140],"multi-camera":[141],"inputs":[142],"CARLA":[144],"show":[145],"our":[147],"detector":[148],"achieves":[149],"superior":[150],"detection":[151],"capability":[152],"computational":[154],"efficiency":[155],"compared":[156],"existing":[158],"approaches.":[159]},"counts_by_year":[],"updated_date":"2026-08-16T07:02:28.622633","created_date":"2026-02-13T00:00:00"}