Our Experts

Journal Articles

1. Chen Ma, Ningfei Wang, Qi Alfred Chen and Chao Shen (2024) “SlowTrack: Increasing the Latency of Camera-Based Perception in Autonomous Driving Using Adversarial Examples”, Proceedings of the AAAI Conference on Artificial Intelligence, 38(5), pp. 4062–4070. Available at: 10.1609/aaai.v38i5.28200. [ITS-Irvine record]

Conference Papers

1. Ningfei Wang, Shaoyuan Xie, Takami Sato, Yunpeng Luo, Kaidi Xu and Qi Alfred Chen (2025) “Revisiting Physical-World Adversarial Attack on Traffic Sign Recognition: A Commercial Systems Perspective”, in ISOC Network and Distributed System Security Symposium (NDSS) 2025. Available at: https://ics.uci.edu/~alfchen/pubs/ningfei_ndss25.pdf. [ITS-Irvine record]
2. Takami Sato, Justin Yue, Nanze Chen, Ningfei Wang and Qi Alfred Chen (2024) “Intriguing Properties of Diffusion Models: An Empirical Study of the Natural Attack Capability in Text-to-Image Generative Models”. Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, pp. 24635–24644. Available at: https://openaccess.thecvf.com/content/CVPR2024/html/Sato_Intriguing_Properties_of_Diffusion_Models_An_Empirical_Study_of_the_CVPR_2024_paper.html (Accessed: October 23, 2024). [ITS-Irvine record]
3. Takami Sato, Ningfei Wang, Yueqiang Cheng and Qi Alfred Chen (2024) “A Cross-Verification Approach with Publicly Available Map for Detecting Off-Road Attacks against Lane Detection Systems”, in ISOC Symposium on Vehicle Security and Privacy (VehicleSec). ISOC. Available at: https://par.nsf.gov/servlets/purl/10492114 (Accessed: August 21, 2025). [ITS-Irvine record]
4. Xiangguo Liu, Yunpeng Luo, Anthony Goeckner, Trishna Chakraborty, Ruochen Jiao, Ningfei Wang, Yixuan Wang, Takami Sato, Qi Alfred Chen and Qi Zhu (2023) “Waving the double-edged sword: Building resilient cavs with edge and cloud computing”, in 2023 60th ACM/IEEE Design Automation Conference (DAC). IEEE, pp. 1–4. Available at: https://doi.org/10.1109/dac56929.2023.10247809. [ITS-Irvine record]
5. Ningfei Wang, Yunpeng Luo, Takami Sato, Kaidi Xu and Qi Alfred Chen (2023) “Does Physical Adversarial Example Really Matter to Autonomous Driving? Towards System-Level Effect of Adversarial Object Evasion Attack”. Proceedings of the IEEE/CVF International Conference on Computer Vision, pp. 4412–4423. Available at: https://openaccess.thecvf.com/content/ICCV2023/html/Wang_Does_Physical_Adversarial_Example_Really_Matter_to_Autonomous_Driving_Towards_ICCV_2023_paper.html (Accessed: October 5, 2023). [ITS-Irvine record]
6. Chen Ma, Ningfei Wang, Qi Alfred Chen and Chao Shen (2023) “WIP: Towards the practicality of the adversarial attack on object tracking in autonomous driving”, in ISOC Symposium on Vehicle Security and Privacy (VehicleSec). Available at: https://par.nsf.gov/biblio/10427129. [ITS-Irvine record]
7. Ningfei Wang, Yunpeng Luo, Takami Sato, Kaidi Xu and Qi Alfred Chen (2022) “Poster: On the System-Level Effectiveness of Physical Object-Hiding Adversarial Attack in Autonomous Driving”, in Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security. New York, NY, USA: Association for Computing Machinery (CCS '22), pp. 3479–3481. Available at: 10.1145/3548606.3563539. [ITS-Irvine record]
8. Yunpeng Luo, Ningfei Wang, Bo Yu, Shaoshan Liu and Qi Alfred Chen (2022) “Infrastructure-Aided Defense for Autonomous Driving Systems: Opportunities and Challenges”, in NDSS Workshop on Automotive and Autonomous Vehicle Security (AutoSec). Available at: https://par.nsf.gov/biblio/10359463-infrastructure-aided-defense-autonomous-driving-systems-opportunities-challenges (Accessed: October 5, 2023). [ITS-Irvine record]
9. Yulong Cao, Ningfei Wang, Chaowei Xiao, Dawei Yang, Jin Fang, Ruigang Yang, Qi Alfred Chen, Mingyan Liu and Bo Li (2021) “Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks”, in 2021 IEEE Symposium on Security and Privacy (SP). 2021 IEEE Symposium on Security and Privacy (SP), pp. 176–194. Available at: 10.1109/SP40001.2021.00076. [ITS-Irvine record]
10. Takami Sato, Junjie Shen, Ningfei Wang, Yunhan Jack Jia, Xue Lin and Qi Alfred Chen (2021) “Demo: Security of Deep Learning based Automated Lane Centering under Physical-World Attack”, in 2021 IEEE Security and Privacy Workshops (SPW). 2021 IEEE Security and Privacy Workshops (SPW), pp. 244–244. Available at: 10.1109/SPW53761.2021.00041. [ITS-Irvine record]
11. Christopher DiPalma, Ningfei Wang, Takami Sato and Qi Alfred Chen (2021) “Demo: Security of Camera-based Perception for Autonomous Driving under Adversarial Attack”, in 2021 IEEE Security and Privacy Workshops (SPW). 2021 IEEE Security and Privacy Workshops (SPW), pp. 243–243. Available at: 10.1109/SPW53761.2021.00040. [ITS-Irvine record]
12. Takami Sato, Junjie Shen, Ningfei Wang, Yunhan Jack Jia, Xue Lin and Qi Alfred Chen (2021) “WIP: Deployability improvement, stealthiness user study, and safety impact assessment on real vehicle for dirty road patch attack”, in Workshop on Automotive and Autonomous Vehicle Security (AutoSec), p. 25. Available at: https://www.ndss-symposium.org/wp-content/uploads/autosec2021_23027_paper.pdf (Accessed: October 11, 2023). [ITS-Irvine record]
13. Takami Sato, Junjie Shen, Ningfei Wang, Yunhan Jia, Xue Lin and Qi Alfred Chen (2021) “Dirty road can attack: Security of deep learning based automated lane centering under {Physical-World} attack”, in 30th USENIX Security Symposium (USENIX Security 21), pp. 3309–3326. Available at: https://www.usenix.org/conference/usenixsecurity21/presentation/sato (Accessed: October 11, 2023). [ITS-Irvine record]
14. Yulong Cao, Ningfei Wang, Chaowei Xiao, Dawei Yang, Jin Fang, Ruigang Yang, Qi Alfred Chen, Mingyan Liu and Bo Li (2020) “3d adversarial object against msf-based perception in autonomous driving”, in Proceedings of the 3rd Conference on Machine Learning and Systems. Available at: https://me.ningfei.org/paper/MLsys_demo.pdf (Accessed: October 11, 2023). [ITS-Irvine record]

Theses and Dissertations

1. Ningfei Wang (2024) Novel Vulnerability Discoveries, Measurements, and Attack Designs for Safety-Critical Autonomous Systems from Practicality Perspectives. PhD Dissertation. UC Irvine. Available at: https://uci.primo.exlibrisgroup.com/permalink/01CDL_IRV_INST/17uq3m8/alma991035677822804701. [ITS-Irvine record]

Preprints

1. Ningfei Wang, Shaoyuan Xie, Takami Sato, Yunpeng Luo, Kaidi Xu and Qi Alfred Chen (2024) “Revisiting Physical-World Adversarial Attack on Traffic Sign Recognition: A Commercial Systems Perspective”. arXiv. Available at: 10.14722/ndss.2025.23090. [ITS-Irvine record]
2. Chen Ma, Ningfei Wang, Zhengyu Zhao, Qi Alfred Chen and Chao Shen (2024) “SlowPerception: Physical-World Latency Attack against Visual Perception in Autonomous Driving”. arXiv. Available at: 10.48550/arXiv.2406.05800. [ITS-Irvine record]
3. Chen Ma, Ningfei Wang, Zhengyu Zhao, Qian Wang, Qi Alfred Chen and Chao Shen (2024) “ControlLoc: Physical-World Hijacking Attack on Visual Perception in Autonomous Driving”. arXiv. Available at: 10.48550/arXiv.2406.05810. [ITS-Irvine record]
4. Junjie Shen, Ningfei Wang, Ziwen Wan, Yunpeng Luo, Takami Sato, Zhisheng Hu, Xinyang Zhang, Shengjian Guo, Zhenyu Zhong, Kang Li, Ziming Zhao, Chunming Qiao and Qi Alfred Chen (2022) “SoK: On the Semantic AI Security in Autonomous Driving”. arXiv. Available at: http://arxiv.org/abs/2203.05314 (Accessed: October 5, 2023). [ITS-Irvine record]