… benchmarking their robustness to RWAEs in autonomous driving scenarios. Of the several …
form of attack used in this paper is adversarial patches [5]. This is because attacks that perturb …

… attacks, perturbation attacks, and patch attacks, on the driving safety of vision-based autonomous
… related work from the perspectives of attacks on autonomous driving, vision-based 3-D …

… To the best of our knowledge, the vulnerability of end-toend autonomous driving models
to patch-based attacks has not been studied in depth yet. Previous work mostly aims at …

… attacks, thereby introducing latent risks to vehicle driving safety. In this paper, we first
investigate a novel adversarial patch attack … autonomous driving systems in future endeavors. …

… attacks, which could be categorized into physical attacks, cyberattacks and learning-based
adversarial attacks… -based autonomous driving are severely challenged by these attacks, from …

… analysis of autonomous driving security. At first, the attack surface of autonomous driving is
… [54] developed an adversarial patch attack against camera-based obstacle detection. The …

… This attack may be caught when the driver involves but is much more efficient with …
monitored during model execution and automatically patched to further enhance driving safety. …

… -patch and single-patch attacks with the same total patch area; in this case, double-patch
attacks … than those for single-patch attacks (ie, we used two patches with the same size 3.75 × …

… automate tasks in life critical operations such as autonomous driving Leetaru (2019); Autopilot
ai-… In this paper we identify a new type of attack which we call a Remote Adversarial Patch (…

… Different from 2D patch-based attacks, our attack, 3D2Fool, is the first 3D texture-based …
To evaluate the textures when applied to different objects common in autonomous driving …