Cybersecurity of autonomous vehicles: A systematic literature review of adversarial attacks and defense models

M Girdhar, J Hong, J Moore - IEEE Open Journal of Vehicular …, 2023 - ieeexplore.ieee.org
Autonomous driving (AD) has developed tremendously in parallel with the ongoing
development and improvement of deep learning (DL) technology. However, the uptake of …

On the real-world adversarial robustness of real-time semantic segmentation models for autonomous driving

G Rossolini, F Nesti, G D'Amico, S Nair… - … on Neural Networks …, 2023 - ieeexplore.ieee.org
The existence of real-world adversarial examples (RWAEs)(commonly in the form of
patches) poses a serious threat for the use of deep learning models in safety-critical …

Kaleidoscope: Physical backdoor attacks against deep neural networks with RGB filters

X Gong, Z Wang, Y Chen, M Xue… - IEEE Transactions on …, 2023 - ieeexplore.ieee.org
Recent research has shown that deep neural networks are vulnerable to backdoor attacks. A
carefully-designed backdoor trigger will mislead the victim model to misclassify any sample …

Objectseeker: Certifiably robust object detection against patch hiding attacks via patch-agnostic masking

C Xiang, A Valtchanov, S Mahloujifar… - 2023 IEEE Symposium …, 2023 - ieeexplore.ieee.org
Object detectors, which are widely deployed in security-critical systems such as autonomous
vehicles, have been found vulnerable to patch hiding attacks. An attacker can use a single …

Defending physical adversarial attack on object detection via adversarial patch-feature energy

T Kim, Y Yu, YM Ro - Proceedings of the 30th ACM International …, 2022 - dl.acm.org
Object detection plays an important role in security-critical systems such as autonomous
vehicles but has shown to be vulnerable to adversarial patch attacks. Existing defense …

PAD: Patch-Agnostic Defense against Adversarial Patch Attacks

L Jing, R Wang, W Ren, X Dong… - Proceedings of the …, 2024 - openaccess.thecvf.com
Adversarial patch attacks present a significant threat to real-world object detectors due to
their practical feasibility. Existing defense methods which rely on attack data or prior …

Defending person detection against adversarial patch attack by using universal defensive frame

Y Yu, HJ Lee, H Lee, YM Ro - IEEE Transactions on Image …, 2022 - ieeexplore.ieee.org
Person detection has attracted great attention in the computer vision area and is an
imperative element in human-centric computer vision. Although the predictive performances …

Object Detectors in the Open Environment: Challenges, Solutions, and Outlook

S Liang, W Wang, R Chen, A Liu, B Wu… - arXiv preprint arXiv …, 2024 - arxiv.org
With the emergence of foundation models, deep learning-based object detectors have
shown practical usability in closed set scenarios. However, for real-world tasks, object …

HARP: Let Object Detector Undergo Hyperplasia to Counter Adversarial Patches

J Cai, S Chen, H Li, B Xia, Z Mao, W Yuan - Proceedings of the 31st …, 2023 - dl.acm.org
Adversarial patches can mislead object detectors to produce erroneous predictions. To
defend against adversarial patches, one can take two types of protections on the model side …

Defending from physically-realizable adversarial attacks through internal over-activation analysis

G Rossolini, F Nesti, F Brau, A Biondi… - Proceedings of the AAAI …, 2023 - ojs.aaai.org
This work presents Z-Mask, an effective and deterministic strategy to improve the adversarial
robustness of convolutional networks against physically-realizable adversarial attacks. The …