Our Experts

Journal Articles

1. Ryo Suzuki, Takami Sato, Yuki Hayakawa, Kazuma Ikeda, Ozora Sako, Rokuto Nagata, Ryo Yoshida, Qi Alfred Chen and Kentaro Yoshioka (2025) “From Lab to Road: Realizing and Detecting LiDAR Spoofing Attacks Against Autonomous Vehicles at High Speed and Long Distance”, IEEE Sensors Journal, 25(13), pp. 25661–25681. Available at: 10.1109/JSEN.2025.3565532. [ITS-Irvine record]
2. Yuki Hayakawa, Takami Sato, Ryo Suzuki, Kazuma Ikeda, Ozora Sako, Rokuto Nagata, Ryo Yoshida, Qi Alfred Chen and Kentaro Yoshioka (2025) “Breaking the Shield: Systematic Security Analysis on Pulse Fingerprinting LiDAR Systems for Autonomous Driving”, IEEE Sensors Journal, 25(11), pp. 20523–20537. Available at: 10.1109/JSEN.2025.3558401. [ITS-Irvine record]

Conference Papers

1. Ruochen Jiao, Shaoyuan Xie, Justin Yue, Takami Sato, Lixu Wang, Yixuan Wang, Qi Alfred Chen and Qi Zhu (2025) “Can We Trust Embodied Agents? Exploring Backdoor Attacks against Embodied LLM-based Decision-Making Systems”, in The Thirteenth International Conference on Learning Representations (ICLR) 2025. Available at: https://ics.uci.edu/~alfchen/pubs/shaoyuan_iclr25.pdf (Accessed: August 21, 2025). [ITS-Irvine record]
2. Rokuto Nagata, Kenji Koide, Yuki Hayakawa, Ryo Suzuki, Kazuma Ikeda, Ozora Sako, Qi Alfred Chen, Takami Sato and Kentaro Yoshioka (2025) “SLAMSpoof: Practical LiDAR Spoofing Attacks on Localization Systems Guided by Scan Matching Vulnerability Analysis”, in IEEE International Conference on Robotics and Automation. arXiv. Available at: https://ics.uci.edu/~alfchen/pubs/ken_icra25.pdf (Accessed: August 21, 2025). [ITS-Irvine record]
3. Ningfei Wang, Shaoyuan Xie, Takami Sato, Yunpeng Luo, Kaidi Xu and Qi Alfred Chen (2025) “Revisiting Physical-World Adversarial Attack on Traffic Sign Recognition: A Commercial Systems Perspective”, in ISOC Network and Distributed System Security Symposium (NDSS) 2025. Available at: https://ics.uci.edu/~alfchen/pubs/ningfei_ndss25.pdf. [ITS-Irvine record]
4. Takami Sato, Ryo Suzuki, Yuki Hayakawa, Kazuma Ikeda, Ozora Sako, Rokuto Nagata, Ryo Yoshida, Qi Alfred Chen and Kentaro Yoshioka (2025) “On the realism of lidar spoofing attacks against autonomous driving vehicle at high speed and long distance”, in Proceedings of the Network and Distributed System Security Symposium (NDSS)x. Available at: https://www-test.ics.uci.edu/~alfchen/pubs/takami_ndss25.pdf (Accessed: August 21, 2025). [ITS-Irvine record]
5. Takami Sato, Yuki Hayakawa, Ryo Suzuki, Yohsuke Shiiki, Kentaro Yoshioka and Qi Alfred Chen (2024) “LiDAR Spoofing Meets the New-Gen: Capability Improvements, Broken Assumptions, and New Attack Strategies”, in Proceedings 2024 Network and Distributed System Security Symposium. Available at: 10.14722/ndss.2024.23350. [ITS-Irvine record]
6. Takami Sato, Justin Yue, Nanze Chen, Ningfei Wang and Qi Alfred Chen (2024) “Intriguing Properties of Diffusion Models: An Empirical Study of the Natural Attack Capability in Text-to-Image Generative Models”. Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, pp. 24635–24644. Available at: https://openaccess.thecvf.com/content/CVPR2024/html/Sato_Intriguing_Properties_of_Diffusion_Models_An_Empirical_Study_of_the_CVPR_2024_paper.html (Accessed: October 23, 2024). [ITS-Irvine record]
7. Go Tsuruoka, Takami Sato, Qi Alfred Chen, Kazuki Nomoto, Yuna Tanaka, Ryunosuke Kobayashi and Tatsuya Mori (2024) “WIP: Adversarial Retroreflective Patches: A Novel Stealthy Attack on Traffic Sign Recognition at Night”, in Proceedings of the Symposium on Vehicle Security and Privacy. Available at: https://www.ndss-symposium.org/wp-content/uploads/vehiclesec2024-25-paper.pdf (Accessed: September 13, 2024). [ITS-Irvine record]
8. Yuki Hayakawa, Takami Sato, Ryo Suzuki, Kazuma Ikeda, Ozora Sako, Rokuto Nagata, Qi Alfred Chen and Kentaro Yoshioka (2024) “WIP: An Adaptive High Frequency Removal Attack to Bypass Pulse Fingerprinting in New-Gen LiDARs”. Symposium on Vehicles Security and Privacy (VehicleSec) 2024 26 February 2024, San Diego, CA, USA, VehicleSec. Available at: https://www.ndss-symposium.org/wp-content/uploads/vehiclesec2024-22-paper.pdf (Accessed: September 13, 2024). [ITS-Irvine record]
9. Sri Hrushikesh Varma Bhupathiraju, Takeshi Sugawara, Takami Sato, Qi Alfred Chen, Michael Clifford and Sara Rampazzi (2024) “On the Vulnerability of Traffic Light Recognition Systems to Laser Illumination Attacks”, in ISOC Symposium on Vehicle Security and Privacy (VehicleSec). ISOC, San Diego, CA, USA. https://doi. org/10. Available at: https://www.ndss-symposium.org/wp-content/uploads/vehiclesec2024-24-paper.pdf (Accessed: September 13, 2024). [ITS-Irvine record]
10. Takami Sato, Ningfei Wang, Yueqiang Cheng and Qi Alfred Chen (2024) “A Cross-Verification Approach with Publicly Available Map for Detecting Off-Road Attacks against Lane Detection Systems”, in ISOC Symposium on Vehicle Security and Privacy (VehicleSec). ISOC. Available at: https://par.nsf.gov/servlets/purl/10492114 (Accessed: August 21, 2025). [ITS-Irvine record]
11. Ruochen Jiao, Juyang Bai, Xiangguo Liu, Takami Sato, Xiaowei Yuan, Qi Alfred Chen and Qi Zhu (2023) “Learning Representation for Anomaly Detection of Vehicle Trajectories”, in 2023 IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS). 2023 IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS), pp. 9699–9706. Available at: 10.1109/IROS55552.2023.10342070. [ITS-Irvine record]
12. Xiangguo Liu, Yunpeng Luo, Anthony Goeckner, Trishna Chakraborty, Ruochen Jiao, Ningfei Wang, Yixuan Wang, Takami Sato, Qi Alfred Chen and Qi Zhu (2023) “Waving the double-edged sword: Building resilient cavs with edge and cloud computing”, in 2023 60th ACM/IEEE Design Automation Conference (DAC). IEEE, pp. 1–4. Available at: https://doi.org/10.1109/dac56929.2023.10247809. [ITS-Irvine record]
13. Yanan Guo, Takami Sato, Yulong Cao, Qi Alfred Chen and Yueqiang Cheng (2023) “Adversarial Attacks on Adaptive Cruise Control Systems”, in Proceedings of Cyber-Physical Systems and Internet of Things Week 2023. New York, NY, USA: Association for Computing Machinery (CPS-IoT Week '23), pp. 49–54. Available at: 10.1145/3576914.3587493. [ITS-Irvine record]
14. Ningfei Wang, Yunpeng Luo, Takami Sato, Kaidi Xu and Qi Alfred Chen (2023) “Does Physical Adversarial Example Really Matter to Autonomous Driving? Towards System-Level Effect of Adversarial Object Evasion Attack”. Proceedings of the IEEE/CVF International Conference on Computer Vision, pp. 4412–4423. Available at: https://openaccess.thecvf.com/content/ICCV2023/html/Wang_Does_Physical_Adversarial_Example_Really_Matter_to_Autonomous_Driving_Towards_ICCV_2023_paper.html (Accessed: October 5, 2023). [ITS-Irvine record]
15. Ruochen Jiao, Xiangguo Liu, Takami Sato, Qi Alfred Chen and Qi Zhu (2023) “Semi-supervised Semantics-guided Adversarial Training for Robust Trajectory Prediction”. Proceedings of the IEEE/CVF International Conference on Computer Vision, pp. 8207–8217. Available at: https://openaccess.thecvf.com/content/ICCV2023/html/Jiao_Semi-supervised_Semantics-guided_Adversarial_Training_for_Robust_Trajectory_Prediction_ICCV_2023_paper.html (Accessed: October 11, 2023). [ITS-Irvine record]
16. Takami Sato, Sri Hrushikesh Bhupathiraju, Michael Clifford, Takeshi Sugawara, Qi Alfred Chen and Sara Rampazzi (2023) “WIP: Infrared Laser Reflection Attack Against Traffic Sign Recognition Systems”, in ISOC Symposium on Vehicle Security and Privacy (VehicleSec). Available at: https://par.nsf.gov/biblio/10427118-wip-infrared-laser-reflection-attack-against-traffic-sign-recognition-systems (Accessed: September 13, 2024). [ITS-Irvine record]
17. Takami Sato, Yuki Hayakawa, Ryo Suzuki, Yohsuke Shiiki, Kentaro Yoshioka and Qi Alfred Chen (2023) “WIP: Practical Removal Attacks on LiDAR-based Object Detection in Autonomous Driving”, in ISOC Symposium on Vehicle Security and Privacy (VehicleSec). Available at: https://par.nsf.gov/biblio/10427123-wip-practical-removal-attacks-lidar-based-object-detection-autonomous-driving (Accessed: September 13, 2024). [ITS-Irvine record]
18. Ningfei Wang, Yunpeng Luo, Takami Sato, Kaidi Xu and Qi Alfred Chen (2022) “Poster: On the System-Level Effectiveness of Physical Object-Hiding Adversarial Attack in Autonomous Driving”, in Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security. New York, NY, USA: Association for Computing Machinery (CCS '22), pp. 3479–3481. Available at: 10.1145/3548606.3563539. [ITS-Irvine record]
19. Takami Sato, Yuki Hayakawa, Ryo Suzuki, Yohsuke Shiiki, Kentaro Yoshioka and Qi Alfred Chen (2022) “Poster: Towards Large-Scale Measurement Study on LiDAR Spoofing Attacks against Object Detection”, in Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security. New York, NY, USA: Association for Computing Machinery (CCS '22), pp. 3459–3461. Available at: 10.1145/3548606.3563537. [ITS-Irvine record]
20. Takami Sato and Qi Alfred Chen (2022) “Towards Driving-Oriented Metric for Lane Detection Models”. Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, pp. 17153–17162. Available at: https://openaccess.thecvf.com/content/CVPR2022/html/Sato_Towards_Driving-Oriented_Metric_for_Lane_Detection_Models_CVPR_2022_paper.html (Accessed: October 5, 2023). [ITS-Irvine record]
21. Ruochen Jiao, Hengyi Liang, Takami Sato, Junjie Shen, Qi Alfred Chen and Qi Zhu (2021) “End-to-end Uncertainty-based Mitigation of Adversarial Attacks to Automated Lane Centering”, in 2021 IEEE Intelligent Vehicles Symposium (IV). 2021 IEEE Intelligent Vehicles Symposium (IV), pp. 266–273. Available at: 10.1109/IV48863.2021.9575549. [ITS-Irvine record]
22. Takami Sato, Junjie Shen, Ningfei Wang, Yunhan Jack Jia, Xue Lin and Qi Alfred Chen (2021) “Demo: Security of Deep Learning based Automated Lane Centering under Physical-World Attack”, in 2021 IEEE Security and Privacy Workshops (SPW). 2021 IEEE Security and Privacy Workshops (SPW), pp. 244–244. Available at: 10.1109/SPW53761.2021.00041. [ITS-Irvine record]
23. Christopher DiPalma, Ningfei Wang, Takami Sato and Qi Alfred Chen (2021) “Demo: Security of Camera-based Perception for Autonomous Driving under Adversarial Attack”, in 2021 IEEE Security and Privacy Workshops (SPW). 2021 IEEE Security and Privacy Workshops (SPW), pp. 243–243. Available at: 10.1109/SPW53761.2021.00040. [ITS-Irvine record]
24. Hengyi Liang, Ruochen Jiao, Takami Sato, Junjie Shen, Qi Alfred Chen and Qi Zhu (2021) “WIP: End-to-End Analysis of Adversarial Attacks to Automated Lane Centering Systems”, in Workshop on Automotive and Autonomous Vehicle Security (AutoSec'21). Available at: https://par.nsf.gov/biblio/10289738-wip-end-end-analysis-adversarial-attacks-automated-lane-centering-systems (Accessed: October 11, 2023). [ITS-Irvine record]
25. Takami Sato, Junjie Shen, Ningfei Wang, Yunhan Jack Jia, Xue Lin and Qi Alfred Chen (2021) “WIP: Deployability improvement, stealthiness user study, and safety impact assessment on real vehicle for dirty road patch attack”, in Workshop on Automotive and Autonomous Vehicle Security (AutoSec), p. 25. Available at: https://www.ndss-symposium.org/wp-content/uploads/autosec2021_23027_paper.pdf (Accessed: October 11, 2023). [ITS-Irvine record]
26. Takami Sato, Junjie Shen, Ningfei Wang, Yunhan Jia, Xue Lin and Qi Alfred Chen (2021) “Dirty road can attack: Security of deep learning based automated lane centering under {Physical-World} attack”, in 30th USENIX Security Symposium (USENIX Security 21), pp. 3309–3326. Available at: https://www.usenix.org/conference/usenixsecurity21/presentation/sato (Accessed: October 11, 2023). [ITS-Irvine record]

Theses and Dissertations

1. Takami Sato (2024) Exploring novel security vulnerabilities and their safety implications in sensors and perception for autonomous systems. PhD Dissertation. UC Irvine. Available at: https://uci.primo.exlibrisgroup.com/permalink/01CDL_IRV_INST/17uq3m8/alma991035617652404701. [ITS-Irvine record]

Preprints

1. Ruochen Jiao, Shaoyuan Xie, Justin Yue, Takami Sato, Lixu Wang, Yixuan Wang, Qi Alfred Chen and Qi Zhu (2025) “Can We Trust Embodied Agents? Exploring Backdoor Attacks against Embodied LLM-based Decision-Making Systems”. arXiv. Available at: 10.48550/arXiv.2405.20774. [ITS-Irvine record]
2. Rokuto Nagata, Kenji Koide, Yuki Hayakawa, Ryo Suzuki, Kazuma Ikeda, Ozora Sako, Qi Alfred Chen, Takami Sato and Kentaro Yoshioka (2025) “SLAMSpoof: Practical LiDAR Spoofing Attacks on Localization Systems Guided by Scan Matching Vulnerability Analysis”. arXiv. Available at: 10.48550/arXiv.2502.13641. [ITS-Irvine record]
3. Ningfei Wang, Shaoyuan Xie, Takami Sato, Yunpeng Luo, Kaidi Xu and Qi Alfred Chen (2024) “Revisiting Physical-World Adversarial Attack on Traffic Sign Recognition: A Commercial Systems Perspective”. arXiv. Available at: 10.14722/ndss.2025.23090. [ITS-Irvine record]
4. Takami Sato, Sri Hrushikesh Varma Bhupathiraju, Michael Clifford, Takeshi Sugawara, Qi Alfred Chen and Sara Rampazzi (2024) “Invisible Reflections: Leveraging Infrared Laser Reflections to Target Traffic Sign Perception”. arXiv. Available at: 10.14722/ndss.2024.231053. [ITS-Irvine record]
5. Ruochen Jiao, Shaoyuan Xie, Justin Yue, Takami Sato, Lixu Wang, Yixuan Wang, Qi Alfred Chen and Qi Zhu (2024) “Exploring backdoor attacks against large language model-based decision making”. Research Gate. Available at: https://www.researchgate.net/profile/Yixuan-Wang-93/publication/381109316_Exploring_Backdoor_Attacks_against_Large_Language_Model-based_Decision_Making/links/66775067d21e220d89c8d757/Exploring-Backdoor-Attacks-against-Large-Language-Model-based-Decision-Making.pdf (Accessed: August 21, 2025). [ITS-Irvine record]
6. Ruochen Jiao, Juyang Bai, Xiangguo Liu, Takami Sato, Xiaowei Yuan, Qi Alfred Chen and Qi Zhu (2023) “Learning Representation for Anomaly Detection of Vehicle Trajectories”. arXiv. Available at: http://arxiv.org/abs/2303.05000 (Accessed: October 5, 2023). [ITS-Irvine record]
7. Junjie Shen, Ningfei Wang, Ziwen Wan, Yunpeng Luo, Takami Sato, Zhisheng Hu, Xinyang Zhang, Shengjian Guo, Zhenyu Zhong, Kang Li, Ziming Zhao, Chunming Qiao and Qi Alfred Chen (2022) “SoK: On the Semantic AI Security in Autonomous Driving”. arXiv. Available at: http://arxiv.org/abs/2203.05314 (Accessed: October 5, 2023). [ITS-Irvine record]
8. Takami Sato and Qi Alfred Chen (2021) “On Robustness of Lane Detection Models to Physical-World Adversarial Attacks in Autonomous Driving”. arXiv. Available at: http://arxiv.org/abs/2107.02488 (Accessed: October 11, 2023). [ITS-Irvine record]