{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:SPGNLXKHYDFQ35N6BI6OT3R5AU","short_pith_number":"pith:SPGNLXKH","canonical_record":{"source":{"id":"2106.09249","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-06-17T05:11:07Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"c246b2ff2a652c5d71e7b913a63f0c839b30950f16f2b3a329c9be870d761a77","abstract_canon_sha256":"0352d91e856dd5a9de8d4664821a8e31a6de7c5c2f28331e5adb24a31fea2d6a"},"schema_version":"1.0"},"canonical_sha256":"93ccd5dd47c0cb0df5be0a3ce9ee3d051e03a314e9ca7fdbbed45b1d1102faac","source":{"kind":"arxiv","id":"2106.09249","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.09249","created_at":"2026-07-05T02:50:14Z"},{"alias_kind":"arxiv_version","alias_value":"2106.09249v1","created_at":"2026-07-05T02:50:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.09249","created_at":"2026-07-05T02:50:14Z"},{"alias_kind":"pith_short_12","alias_value":"SPGNLXKHYDFQ","created_at":"2026-07-05T02:50:14Z"},{"alias_kind":"pith_short_16","alias_value":"SPGNLXKHYDFQ35N6","created_at":"2026-07-05T02:50:14Z"},{"alias_kind":"pith_short_8","alias_value":"SPGNLXKH","created_at":"2026-07-05T02:50:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:SPGNLXKHYDFQ35N6BI6OT3R5AU","target":"record","payload":{"canonical_record":{"source":{"id":"2106.09249","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-06-17T05:11:07Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"c246b2ff2a652c5d71e7b913a63f0c839b30950f16f2b3a329c9be870d761a77","abstract_canon_sha256":"0352d91e856dd5a9de8d4664821a8e31a6de7c5c2f28331e5adb24a31fea2d6a"},"schema_version":"1.0"},"canonical_sha256":"93ccd5dd47c0cb0df5be0a3ce9ee3d051e03a314e9ca7fdbbed45b1d1102faac","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:50:14.154394Z","signature_b64":"TE4jSTzFxjdUsx0biiLdUw/fnnQaF4e0mHidjb/zQt117dXruzOpCews78IV5Pw0E78Gss4IWNu0w/liuik0DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"93ccd5dd47c0cb0df5be0a3ce9ee3d051e03a314e9ca7fdbbed45b1d1102faac","last_reissued_at":"2026-07-05T02:50:14.154004Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:50:14.154004Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.09249","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:50:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YGwX/VDp/317uLi72KM04mgQv/KARgzhsnDGbw3VqB3ksaKamFi8yMEiD56BxeouIrLfNUMKjO+0IrJn3PRXDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T12:45:33.247312Z"},"content_sha256":"d50a1f531ba48dca693a7f881a436e8d0a27a23848a968f95129210d21c49db3","schema_version":"1.0","event_id":"sha256:d50a1f531ba48dca693a7f881a436e8d0a27a23848a968f95129210d21c49db3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:SPGNLXKHYDFQ35N6BI6OT3R5AU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Bo Li (*co-first authors), Chaowei Xiao*, Dawei Yang*, Jin Fang, Mingyan Liu, Ningfei Wang*, Qi Alfred Chen, Ruigang Yang, Yulong Cao*","submitted_at":"2021-06-17T05:11:07Z","abstract_excerpt":"In Autonomous Driving (AD) systems, perception is both security and safety critical. Despite various prior studies on its security issues, all of them only consider attacks on camera- or LiDAR-based AD perception alone. However, production AD systems today predominantly adopt a Multi-Sensor Fusion (MSF) based design, which in principle can be more robust against these attacks under the assumption that not all fusion sources are (or can be) attacked at the same time. In this paper, we present the first study of security issues of MSF-based perception in AD systems. We directly challenge the bas"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.09249","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.09249/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:50:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kgkfOAKqN2LsQVZHCUznpTCQ0PV9QZqNvLvdzhZZVdCkq4sMvg789aCm67PqXz67fvITrJCY+nygekjv3+nxBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T12:45:33.248293Z"},"content_sha256":"120901320495bca79016922374a97c4e91b72f043e40c09e00905c13d6c40f1f","schema_version":"1.0","event_id":"sha256:120901320495bca79016922374a97c4e91b72f043e40c09e00905c13d6c40f1f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SPGNLXKHYDFQ35N6BI6OT3R5AU/bundle.json","state_url":"https://pith.science/pith/SPGNLXKHYDFQ35N6BI6OT3R5AU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SPGNLXKHYDFQ35N6BI6OT3R5AU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T12:45:33Z","links":{"resolver":"https://pith.science/pith/SPGNLXKHYDFQ35N6BI6OT3R5AU","bundle":"https://pith.science/pith/SPGNLXKHYDFQ35N6BI6OT3R5AU/bundle.json","state":"https://pith.science/pith/SPGNLXKHYDFQ35N6BI6OT3R5AU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SPGNLXKHYDFQ35N6BI6OT3R5AU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:SPGNLXKHYDFQ35N6BI6OT3R5AU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0352d91e856dd5a9de8d4664821a8e31a6de7c5c2f28331e5adb24a31fea2d6a","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-06-17T05:11:07Z","title_canon_sha256":"c246b2ff2a652c5d71e7b913a63f0c839b30950f16f2b3a329c9be870d761a77"},"schema_version":"1.0","source":{"id":"2106.09249","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.09249","created_at":"2026-07-05T02:50:14Z"},{"alias_kind":"arxiv_version","alias_value":"2106.09249v1","created_at":"2026-07-05T02:50:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.09249","created_at":"2026-07-05T02:50:14Z"},{"alias_kind":"pith_short_12","alias_value":"SPGNLXKHYDFQ","created_at":"2026-07-05T02:50:14Z"},{"alias_kind":"pith_short_16","alias_value":"SPGNLXKHYDFQ35N6","created_at":"2026-07-05T02:50:14Z"},{"alias_kind":"pith_short_8","alias_value":"SPGNLXKH","created_at":"2026-07-05T02:50:14Z"}],"graph_snapshots":[{"event_id":"sha256:120901320495bca79016922374a97c4e91b72f043e40c09e00905c13d6c40f1f","target":"graph","created_at":"2026-07-05T02:50:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.09249/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In Autonomous Driving (AD) systems, perception is both security and safety critical. Despite various prior studies on its security issues, all of them only consider attacks on camera- or LiDAR-based AD perception alone. However, production AD systems today predominantly adopt a Multi-Sensor Fusion (MSF) based design, which in principle can be more robust against these attacks under the assumption that not all fusion sources are (or can be) attacked at the same time. In this paper, we present the first study of security issues of MSF-based perception in AD systems. We directly challenge the bas","authors_text":"Bo Li (*co-first authors), Chaowei Xiao*, Dawei Yang*, Jin Fang, Mingyan Liu, Ningfei Wang*, Qi Alfred Chen, Ruigang Yang, Yulong Cao*","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-06-17T05:11:07Z","title":"Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.09249","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d50a1f531ba48dca693a7f881a436e8d0a27a23848a968f95129210d21c49db3","target":"record","created_at":"2026-07-05T02:50:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0352d91e856dd5a9de8d4664821a8e31a6de7c5c2f28331e5adb24a31fea2d6a","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-06-17T05:11:07Z","title_canon_sha256":"c246b2ff2a652c5d71e7b913a63f0c839b30950f16f2b3a329c9be870d761a77"},"schema_version":"1.0","source":{"id":"2106.09249","kind":"arxiv","version":1}},"canonical_sha256":"93ccd5dd47c0cb0df5be0a3ce9ee3d051e03a314e9ca7fdbbed45b1d1102faac","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"93ccd5dd47c0cb0df5be0a3ce9ee3d051e03a314e9ca7fdbbed45b1d1102faac","first_computed_at":"2026-07-05T02:50:14.154004Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:50:14.154004Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TE4jSTzFxjdUsx0biiLdUw/fnnQaF4e0mHidjb/zQt117dXruzOpCews78IV5Pw0E78Gss4IWNu0w/liuik0DA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:50:14.154394Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.09249","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d50a1f531ba48dca693a7f881a436e8d0a27a23848a968f95129210d21c49db3","sha256:120901320495bca79016922374a97c4e91b72f043e40c09e00905c13d6c40f1f"],"state_sha256":"885aa8143ccc3b405b8374194fae792d2778a96c079621b22cc9730ef2750753"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NtJEOmSRDSQDDF7W//IbVSzOInlnev0J2TGm7+glSA8O6rZslbqzSlyoC1aMYGMAGeBR06Bb+eTv/Du8a/MMAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T12:45:33.256430Z","bundle_sha256":"7447a83cfbad4b873a06df62fb238d401a543476654776bafe57217c3e40dd46"}}