{"id":"https://openalex.org/W7162094872","doi":"https://doi.org/10.48550/arxiv.2605.22122","title":"Adversarial Trust Poisoning in Vehicular Collaborative Perception","display_name":"Adversarial Trust Poisoning in Vehicular Collaborative Perception","publication_year":2026,"publication_date":"2026-05-21","ids":{"openalex":"https://openalex.org/W7162094872","doi":"https://doi.org/10.48550/arxiv.2605.22122"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.22122","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22122","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.22122","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136771659","display_name":"Yutong Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Yutong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136739128","display_name":"Chenyi Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Chenyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136735802","display_name":"Ming F. Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Ming F.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136804719","display_name":"Qingzhao Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Qingzhao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8222000002861023,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8222000002861023,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11099","display_name":"Autonomous Vehicle Technology and Safety","score":0.037700001150369644,"subfield":{"id":"https://openalex.org/subfields/2203","display_name":"Automotive Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.022299999371170998,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.90420001745224},{"id":"https://openalex.org/keywords/perception","display_name":"Perception","score":0.7767000198364258},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3260999917984009},{"id":"https://openalex.org/keywords/mechanism","display_name":"Mechanism (biology)","score":0.3034999966621399},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.2928999960422516}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.90420001745224},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.7767000198364258},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.72079998254776},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6140999794006348},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4909999966621399},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3260999917984009},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.3034999966621399},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2928999960422516},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.2856999933719635},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2793999910354614},{"id":"https://openalex.org/C163355716","wikidata":"https://www.wikidata.org/wiki/Q2154783","display_name":"Risk perception","level":3,"score":0.26489999890327454},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.2583000063896179}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.22122","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22122","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.22122","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22122","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7127602696418762,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Collaborative":[0],"perception":[1,137,150],"(CP)":[2],"enables":[3],"connected":[4],"and":[5,12,34,119,139,152,180,206],"autonomous":[6],"vehicles":[7,38],"to":[8,69,74,109,117,122,176,187],"share":[9],"sensor":[10],"data":[11,81],"jointly":[13],"reason":[14],"about":[15],"their":[16],"environment.":[17],"To":[18],"defend":[19],"against":[20],"adversaries":[21],"that":[22,50,65,91,158,200],"fabricate":[23],"or":[24,125],"manipulate":[25],"shared":[26],"data,":[27],"existing":[28],"systems":[29],"employ":[30],"cross-vehicle":[31],"inconsistency":[32],"detection":[33],"trust":[35,72,115,210],"estimation,":[36],"penalizing":[37],"whose":[39],"observations":[40,97],"conflict":[41],"with":[42],"the":[43,71,83,107,110,130,165,168,213],"majority.":[44],"In":[45],"this":[46],"work,":[47],"we":[48,193],"show":[49,157],"these":[51],"defenses":[52,68,160],"themselves":[53],"introduce":[54,194],"a":[55,62,196],"new":[56],"attack":[57,64,166,214],"surface.":[58],"We":[59,144],"present":[60],"TrustFlip,":[61],"novel":[63],"weaponizes":[66],"consistency-based":[67],"poison":[70],"assigned":[73],"benign":[75,99,170],"vehicles.":[76,100],"Instead":[77],"of":[78,178],"injecting":[79],"false":[80],"into":[82],"collaboration":[84,173],"pipeline,":[85],"it":[86],"deploys":[87],"physical":[88],"adversarial":[89],"objects":[90],"are":[92,104],"genuine":[93],"but":[94],"induce":[95],"inconsistent":[96],"among":[98],"The":[101],"resulting":[102],"inconsistencies":[103],"misattributed":[105],"by":[106,185,217],"defense":[108,153],"targeted":[111,169],"vehicle,":[112],"causing":[113],"its":[114,123],"score":[116],"degrade":[118],"eventually":[120],"leading":[121],"downweighting":[124],"exclusion":[126],"from":[127,172,209],"collaboration.":[128],"Consequently,":[129],"system":[131],"loses":[132],"reliable":[133],"sensing":[134],"contributors,":[135],"degrading":[136],"capability":[138],"potentially":[140],"inducing":[141],"safety-critical":[142],"failures.":[143],"evaluate":[145],"TrustFlip":[146],"across":[147],"multiple":[148],"collaborative":[149],"architectures":[151],"mechanisms.":[154],"Our":[155],"results":[156],"state-of-the-art":[159],"can":[161],"be":[162],"significantly":[163],"affected:":[164],"removes":[167],"vehicle":[171],"in":[174],"up":[175,186],"87.7%":[177],"scenarios":[179],"drops":[181],"Average":[182],"Precision":[183],"(AP)":[184],"13%.":[188],"As":[189],"an":[190],"initial":[191],"mitigation,":[192],"TrustReflect,":[195],"lightweight":[197],"self-reflection":[198],"mechanism":[199],"marks":[201],"disputed":[202],"regions":[203],"as":[204],"uncertain":[205],"excludes":[207],"them":[208],"evaluation,":[211],"reducing":[212],"success":[215],"rate":[216],"35-100%.":[218]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-23T00:00:00"}