% Key papers for Latency and driving-perception attacks (scime atlas, https://atlas.scime.ai). Authors are not included: add them from the paper pages.

@inproceedings{iclr2020_fooling_29793,
  title = {{Fooling Detection Alone is Not Enough: Adversarial Attack against Multiple Object Tracking}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2020},
  url = {https://openreview.net/forum?id=rJl31TNYPr},
}

@inproceedings{cvpr2023_slowlidar_22224,
  title = {{SlowLiDAR: Increasing the Latency of LiDAR-Based Detection Using Adversarial Examples}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/21242},
}

@inproceedings{aaai2024_slowtrack_7358,
  title = {{SlowTrack: Increasing the Latency of Camera-Based Perception in Autonomous Driving Using Adversarial Examples}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28200},
}

@inproceedings{cvpr2024_overload_24391,
  title = {{Overload: Latency Attacks on Object Detection for Edge Devices}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/30595},
}

@inproceedings{cvpr2022_eyepad_18811,
  title = {{EyePAD++: A Distillation-Based Approach for Joint Eye Authentication and Presentation Attack Detection Using Periocular Images}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{iclr2023_adversarial_32434,
  title = {{Adversarial Training of Self-supervised Monocular Depth Estimation against Physical-World Attacks}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2023},
  url = {https://iclr.cc/virtual/2023/poster/11551},
}

@inproceedings{aaai2021_sequential_1377,
  title = {{Sequential Attacks on Kalman Filter-based Forward Collision Warning Systems}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2021},
  url = {https://aaai.org/papers/08865-sequential-attacks-on-kalman-filter-based-forward-collision-warning-systems/},
}

@inproceedings{aaai2025_is_9609,
  title = {{Is Your Autonomous Vehicle Safe? Understanding the Threat of Electromagnetic Signal Injection Attacks on Traffic Scene Perception}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/34958},
}

@inproceedings{aaai2025_numbod_10135,
  title = {{NumbOD: A Spatial-Frequency Fusion Attack Against Object Detectors}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/32108},
}

@inproceedings{aaai2024_securing_7278,
  title = {{Securing Billion Bluetooth Devices Leveraging Learning-Based Techniques}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/30544},
}

@inproceedings{cvpr2024_fooling_23497,
  title = {{Fooling Polarization-Based Vision using Locally Controllable Polarizing Projection}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/30419},
}

@inproceedings{cvpr2025_enduring_26127,
  title = {{Enduring, Efficient and Robust Trajectory Prediction Attack in Autonomous Driving via Optimization-Driven Multi-Frame Perturbation Framework}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/34648},
}

@inproceedings{iclr2024_fusion_33566,
  title = {{Fusion Is Not Enough: Single Modal Attacks on Fusion Models for 3D Object Detection}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2024},
  url = {https://iclr.cc/virtual/2024/poster/19509},
}

@inproceedings{neurips2023_spatial_67774,
  title = {{Spatial-frequency channels, shape bias, and adversarial robustness}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2023},
  url = {https://nips.cc/virtual/2023/poster/71982},
}

@inproceedings{aaai2024_tetris_7477,
  title = {{TETRIS: Towards Exploring the Robustness of Interactive Segmentation}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28225},
}

@inproceedings{neurips2024_beware_74156,
  title = {{Beware of Road Markings: A New Adversarial Patch Attack to Monocular Depth Estimation}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/93386},
}

@inproceedings{aaai2025_commit_8358,
  title = {{COMMIT: Certifying Robustness of Multi-Sensor Fusion Systems Against Semantic Attacks}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/33927},
}

@inproceedings{iclr2024_lrr_33582,
  title = {{LRR: Language-Driven Resamplable Continuous Representation against Adversarial Tracking Attacks}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2024},
  url = {https://iclr.cc/virtual/2024/poster/19493},
}

@inproceedings{cvpr2026_all_97252,
  title = {{All Vehicles Can Lie: Efficient Adversarial Defense in Fully Untrusted-Vehicle Collaborative Perception via Pseudo-Random Bayesian Inference}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2026},
  url = {https://openaccess.thecvf.com/content/CVPR2026/html/Yu_All_Vehicles_Can_Lie_Efficient_Adversarial_Defense_in_Fully_Untrusted-Vehicle_CVPR_2026_paper.html},
}

@inproceedings{aaai2026_cp_100031,
  title = {{CP-FREEZER: Latency Attacks Against Vehicular Cooperative Perception}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/37082},
}

@inproceedings{aaai2026_moba_108490,
  title = {{MOBA: A Material-Oriented Backdoor Attack Against LiDAR-Based 3D Object Detection Systems}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/40842},
}

@inproceedings{cvpr2025_can_25682,
  title = {{Can't Slow Me Down: Learning Robust and Hardware-Adaptive Object Detectors against Latency Attacks for Edge Devices}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/34113},
}

@inproceedings{aaai2026_fractured_104263,
  title = {{Fractured Glass, Failing Cameras: Simulating Physics-Based Adversarial Samples for Autonomous Driving Systems}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/37792},
}

@inproceedings{aaai2026_invisible_104651,
  title = {{Invisible Triggers, Visible Threats! Road-Style Adversarial Creation Attack for Visual 3D Detection in Autonomous Driving}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/37955},
}