{"id":"https://openalex.org/W7161280919","doi":"https://doi.org/10.48550/arxiv.2605.14396","title":"Systematic Discovery of Semantic Attacks in Online Map Construction through Conditional Diffusion","display_name":"Systematic Discovery of Semantic Attacks in Online Map Construction through Conditional Diffusion","publication_year":2026,"publication_date":"2026-05-14","ids":{"openalex":"https://openalex.org/W7161280919","doi":"https://doi.org/10.48550/arxiv.2605.14396"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.14396","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.14396","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.14396","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136265625","display_name":"Chenyi Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Chenyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013340244","display_name":"Ruoyu Song","orcid":"https://orcid.org/0009-0008-8807-048X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Song, Ruoyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125692617","display_name":"Raymond Muller","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Muller, Raymond","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047495482","display_name":"Jean-Philippe Monteuuis","orcid":"https://orcid.org/0000-0001-7712-1132"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Monteuuis, Jean-Philippe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136258210","display_name":"Jonathan Petit","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Petit, Jonathan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135391333","display_name":"Z. Berkay Celik","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Celik, Z. Berkay","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134031319","display_name":"Ryan Gerdes","orcid":"https://orcid.org/0009-0000-2160-3108"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gerdes, Ryan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136199656","display_name":"Ming F. Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Ming F.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9761000275611877,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9761000275611877,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11099","display_name":"Autonomous Vehicle Technology and Safety","score":0.013100000098347664,"subfield":{"id":"https://openalex.org/subfields/2203","display_name":"Automotive Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.002199999988079071,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7814000248908997},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7213000059127808},{"id":"https://openalex.org/keywords/categorical-variable","display_name":"Categorical variable","score":0.6003000140190125},{"id":"https://openalex.org/keywords/robot","display_name":"Robot","score":0.5055000185966492},{"id":"https://openalex.org/keywords/boundary","display_name":"Boundary (topology)","score":0.503000020980835},{"id":"https://openalex.org/keywords/manifold","display_name":"Manifold (fluid mechanics)","score":0.4544000029563904},{"id":"https://openalex.org/keywords/pedestrian","display_name":"Pedestrian","score":0.4415999948978424},{"id":"https://openalex.org/keywords/pixel","display_name":"Pixel","score":0.42080000042915344}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7814000248908997},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7213000059127808},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.699999988079071},{"id":"https://openalex.org/C5274069","wikidata":"https://www.wikidata.org/wiki/Q2285707","display_name":"Categorical variable","level":2,"score":0.6003000140190125},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5277000069618225},{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.5055000185966492},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.503000020980835},{"id":"https://openalex.org/C529865628","wikidata":"https://www.wikidata.org/wiki/Q1790740","display_name":"Manifold (fluid mechanics)","level":2,"score":0.4544000029563904},{"id":"https://openalex.org/C2777113093","wikidata":"https://www.wikidata.org/wiki/Q221488","display_name":"Pedestrian","level":2,"score":0.4415999948978424},{"id":"https://openalex.org/C160633673","wikidata":"https://www.wikidata.org/wiki/Q355198","display_name":"Pixel","level":2,"score":0.42080000042915344},{"id":"https://openalex.org/C2778334786","wikidata":"https://www.wikidata.org/wiki/Q1586270","display_name":"Variation (astronomy)","level":2,"score":0.4203999936580658},{"id":"https://openalex.org/C146849305","wikidata":"https://www.wikidata.org/wiki/Q370766","display_name":"Ground truth","level":2,"score":0.3910999894142151},{"id":"https://openalex.org/C2775955345","wikidata":"https://www.wikidata.org/wiki/Q7449071","display_name":"Semantic mapping","level":2,"score":0.3783999979496002},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.35850000381469727},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3450999855995178},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3400000035762787},{"id":"https://openalex.org/C2987819851","wikidata":"https://www.wikidata.org/wiki/Q191839","display_name":"Aerial imagery","level":2,"score":0.3230000138282776},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32280001044273376},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3212999999523163},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.31349998712539673},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.3075000047683716},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3010999858379364},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2978000044822693},{"id":"https://openalex.org/C204806902","wikidata":"https://www.wikidata.org/wiki/Q2333581","display_name":"Semantic security","level":5,"score":0.2766999900341034}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.14396","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.14396","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.14396","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.14396","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/11","score":0.676237165927887,"display_name":"Sustainable cities and communities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Autonomous":[0],"vehicles":[1],"depend":[2],"on":[3,105],"online":[4],"HD":[5],"map":[6],"construction":[7],"to":[8,157,199],"perceive":[9],"lane":[10],"boundaries,":[11,135],"dividers,":[12],"and":[13,57,82,107,118,124,139],"pedestrian":[14],"crossings":[15],"--":[16],"safety-critical":[17],"road":[18,95],"elements":[19],"that":[20,53,131,190],"directly":[21],"govern":[22],"motion":[23],"planning.":[24],"While":[25],"existing":[26],"pixel":[27,137],"perturbation":[28],"attacks":[29,52,144],"can":[30,35],"disrupt":[31],"the":[32,72,89,93,99,128,167],"mapping,":[33],"they":[34],"be":[36],"neutralized":[37],"by":[38,61,79],"standard":[39],"adversarial":[40,55,149,186],"defenses.":[41,150],"We":[42,102,151],"present":[43],"MIRAGE,":[44],"a":[45,181],"framework":[46],"for":[47,84,171],"systematic":[48],"discovery":[49],"of":[50,75,116,121,166],"semantic":[51],"bypass":[54],"defenses":[56],"degrade":[58],"mapping":[59,100],"predictions":[60],"finding":[62],"plausible":[63],"environmental":[64,194],"variation":[65,195],"(e.g.":[66],"shadows,":[67],"wet":[68],"roads).":[69],"MIRAGE":[70,104,161],"exploits":[71],"latent":[73],"manifold":[74],"real-world":[76],"data":[77],"learned":[78],"diffusion":[80],"models,":[81],"searches":[83],"semantically":[85],"mutated":[86],"scenes":[87],"neighboring":[88],"ground":[90],"truth":[91],"with":[92],"same":[94],"topology":[96],"yet":[97],"mislead":[98],"predictions.":[101],"evaluate":[103],"nuScenes":[106],"demonstrate":[108],"two":[109,153],"attacks:":[110],"(1)":[111],"boundary":[112,126],"removal,":[113],"suppressing":[114],"57.7%":[115],"detections":[117],"corrupting":[119],"96%":[120],"planned":[122],"trajectories;":[123],"(2)":[125],"injection,":[127],"only":[129,176],"method":[130],"successfully":[132],"injects":[133],"fictitious":[134],"while":[136,174],"PGD":[138],"AdvPatch":[140,175],"fail":[141],"entirely.":[142],"Both":[143],"remain":[145],"potent":[146],"under":[147],"various":[148],"use":[152],"independent":[154],"VLM":[155],"judges":[156],"quantify":[158],"realism,":[159],"where":[160],"passes":[162],"as":[163,192],"realistic":[164],"80--84%":[165],"time":[168],"(vs.":[169],"97--99%":[170],"clean":[172],"nuScenes),":[173],"0--9%.":[177],"Our":[178],"findings":[179],"expose":[180],"categorical":[182],"gap":[183],"in":[184],"current":[185],"defenses:":[187],"semantic-level":[188],"perturbations":[189],"manifest":[191],"legitimate":[193],"are":[196],"substantially":[197],"harder":[198],"mitigate":[200],"than":[201],"pixel-level":[202],"perturbations.":[203]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-16T00:00:00"}