Pith. sign in

REVIEW 4 major objections 4 minor 80 references

Development of Vision-Language Model-based GNSS Spoofing Detection for Autonomous Vehicle Navigation

T0 review · 4 major / 4 minor · reviewed 2026-07-31 · deepseek-v4-flash

Challenge this review Re-run · record.json Download PDF Read on arXiv ↗

Pith's one-line read Vision-language models can catch GNSS spoofing in autonomous vehicles by watching for a mismatch between the maneuver implied by satellite data and the maneuver the car's camera and sensors actually show, and a three-stage fine-tuning proce

desk verdict The behavior-level VLM validation idea is real and worth refereeing; the current evidence rests on clean post-receiver trajectory simulations, not on demonstrated defense against actual RF spoofing. read the letter →

arxiv 2607.23962 v1 pith:6SCMNQNC submitted 2026-07-27 cs.CV cs.CR

Mohammed Aldeen , Muhammad Sami Irfan , Sagar Dasgupta , Long Cheng , Mizanur Rahman , Mashrur Chowdhury This is my paper · ORCID
classification cs.CVcs.CR
keywords GNSSspoofingautonomousvehiclesvision-languagemodelsmaneuverdetectionsensorfusionattackadaptiveinferencecross-regionalgeneralization
verification ladder T0 review T1 audit T2 compute T3 formal

The pith

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The reading

This paper tries to establish that a vision-language model can act as a behavior-level auditor for GNSS in autonomous vehicles: it watches the front camera and reads speed, longitudinal acceleration, and yaw rate, then compares the maneuver it infers with the maneuver implied by the GNSS position stream. If the two disagree in the right way, the system flags a spoofing attack. On an independent road dataset collected in Tuscaloosa, the fine-tuned model reaches 94-95% F1 for maneuver classification and detects every wrong-turn and stop attack plus 88-93% of overshoot attacks, while zero-shot VLMs stay at 23-32%. An adaptive gating policy invokes the VLM for only 14% of windows, bringing average latency to 65-73 ms per four-second window. The point is that a low-cost, software-only defense could complement signal-level integrity checks by catching attacks that keep the spoofed trajectory geometrically plausible but semantically wrong.

What carries the argument

The central object is the three-stage fine-tuned vision-language model operating in a shared semantic space: Stage 1 trains only the vision encoder to ground driving motion; Stage 2 freezes vision and tunes the adapter and language model to read sensor deltas; Stage 3 unfreezes everything and fuses both modalities. Sensor telemetry is serialized as delta-style text prompts (net change in speed, longitudinal acceleration, and yaw over the clip), so the VLM compares what it sees against what the text says. Around this sit two rule-based modules: the turning-maneuver agreement rule, which requires at least 4 of 8 keyframe predictions to match the GNSS-derived turn direction, and vehicle-motion-

What would settle it

Drive the instrumented vehicle on the same Tuscaloosa routes while a hardware GNSS signal generator broadcasts genuine counterfeit RF signals (wrong-turn mirroring, position freeze, and drift), then run the detector on the resulting receiver output. If detection accuracy falls far below the simulated 94-95% F1 because real spoofing transients contaminate the position fixes, the central claim is falsified; if accuracy holds, it is supported.

Watch

Extended reading notes

Core claim

The paper claims that GNSS spoofing which changes a vehicle's observable driving behavior can be detected by auditing semantics rather than geometry. A fine-tuned vision-language model takes a four-second window of twelve front-camera frames plus text-serialized deltas of speed, longitudinal acceleration, and yaw rate, and predicts whether the vehicle is going straight, turning left, turning right, or stopped. A parallel GNSS module derives the maneuver from position fixes, road-link transitions, and bearing changes. Disagreement between the two triggers an alarm: wrong turns are flagged when fewer than four of eight keyframes match the GNSS turn direction, and overshoot/stop attacks are fla

Load-bearing premise

The load-bearing premise is that GNSS attacks created by editing the coordinate stream (mirroring with road snapping, freezing position, injecting drift) behave the same as real radio-frequency spoofing at the behavioral level the detector watches; if actual spoofing produces noisy or transient position fixes, the clean disagreements the detector keys on may not appear.

Editorial extensions

If this is right

  • If the central claim is right, a software-only VLM layer can catch navigation-level spoofing attacks that remain road-consistent and mathematically smooth, closing a gap left by RAIM, Doppler checks, and metric fusion filters.
  • The 14% invocation rate and 65-73 ms per-window latency suggest behavior-level auditing is feasible as an online check on a server-class GPU, with the paper noting automotive-grade deployment still needs compression or edge-cloud offload.
  • Training on Tokyo data and validating on Tuscaloosa data is evidence that the detector keys on vehicle-motion physics and visual displacement rather than region-specific scenery, so it should transfer to other road environments with similar sensor layouts.
  • Because the VLM is the only semantic arbiter, perfect detection of wrong-turn and stop attacks depends on the visual and inertial evidence being trustworthy, which the paper states as an assumption.

Reading between the lines

Editorial extensions of the paper, not claims the author makes directly.

  • Editorial inference: the same behavior-level disagreement test could generalize beyond the three simulated attacks — e.g., U-turns, wrong-lane driving, or GNSS traces that imply driving through buildings — since any semantic maneuver label from GNSS can be compared against the VLM's label.
  • Editorial inference: the 2 m/s motion threshold and the 0.1 rad gating threshold are fixed constants chosen from traffic practice; per-mode thresholds (urban vs highway) would likely cut VLM invocations further or catch slower drifts without retraining the VLM.
  • Editorial inference: a natural next test is whether the detector survives an attacker who also perturbs the visual channel with adversarial patches or signs; if the VLM's visual grounding can be fooled, the semantic disagreement might be manufactured rather than detected.
Share X Bluesky LinkedIn Reddit HN

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, and a circularity audit.

Referee Report

4 major / 4 minor

Summary. This paper proposes a Vision-Language Model (VLM)-based framework for detecting behavior-level GNSS spoofing in autonomous vehicles. The system compares maneuvers derived from GNSS (turn direction from road-link transitions and bearing changes; motion state from Haversine distance) with maneuvers predicted by a VLM that fuses front-camera frames and in-vehicle sensor telemetry (speed, longitudinal acceleration, yaw rate). The VLM is fine-tuned in three stages on the CoVLA dataset (Tokyo), and evaluated on an independently collected Tuscaloosa, Alabama dataset. Spoofing attacks are generated post-receiver by trajectory mirroring with OSRM road snapping (wrong-turn), position freezing (overshoot), and linear latitude drift (stop). The paper reports zero-shot VLM accuracy of 23–32%, fine-tuned accuracy of 94–95% F1, 100% detection of wrong-turn and stop attacks, 88–93% overshoot detection, and an adaptive inference policy that reduces VLM invocations to 14%, yielding 65–73 ms per 4-second window. The authors conclude that the approach provides a practical on-road defense complementing signal-level integrity checks.

Significance. If the central claims hold, the paper would make a useful contribution: it introduces a genuinely cross-regional evaluation (training in Tokyo, testing in Tuscaloosa), documents a clear data-processing pipeline, and explicitly acknowledges several limitations. The three-stage fine-tuning procedure is a sensible way to adapt VLMs to synchronized multimodal driving data, and the adaptive inference policy addresses a practical deployment concern. The paper's strengths include an independent validation dataset, honest reporting of that dataset's collection process, and a limitations section that lists hardware-based RF validation as future work. However, the evidence currently supports detection of clean, post-receiver trajectory manipulations rather than RF-level GNSS spoofing; the sample sizes are small; and the computational-savings claim is not tied to attack-detection accuracy under the adaptive policy. These issues are load-bearing and require substantive revision.

major comments (4)
  1. [§3.4 Attack Scope; §6 Limitations] All attack validation is generated by post-receiver trajectory manipulation: mirroring with OSRM snapping for wrong-turn, position freezing for overshoot, and ~20 m latitude drift for stop. The Attack Scope paragraph explicitly states that real RF-level spoofing interacts with receiver tracking loops in ways trajectory manipulation cannot capture, and §6 lists hardware-based RF validation as future work. Therefore the headline 94–95% F1 and 100% wrong-turn/stop results are estimates for a proxy attack model, not for actual RF-level GNSS spoofing. The abstract and conclusion should either be reframed to "post-receiver trajectory manipulation" or supplemented with an RF-level validation; otherwise the central claim is overstated.
  2. [§5.3 Computational Performance] The adaptive inference policy (Eq. 8, Fig. 7) is claimed to reduce VLM invocations by ~86% while "maintaining detection accuracy," but no table reports attack-detection metrics under the adaptive policy. Table 5 appears to use full VLM invocation on every window. A comparison is needed: wrong-turn, stop, and overshoot detection accuracy/F1 with and without the gate, including true positives/negatives under the 14% invocation regime. Without this, the computational-savings claim is not connected to the detection claim.
  3. [§5.2, Tables 4 and 5] The attack evaluation uses very small samples: 10 wrong-turn, 20 stop, and 60 overshoot windows. With these sample sizes, the reported 100% and 88.33–93.4% accuracies have wide binomial confidence intervals; e.g., 100% accuracy on 10 or 20 events is consistent with true accuracy well below 90%. Table 3's per-class F1 of exactly 1.00 likely reflects very small per-class counts. Report exact per-class counts and confidence intervals, and avoid exact-100% claims based on n ≤ 20.
  4. [§6 Conclusion] The conclusion claims that "even if an adversary simultaneously compromises both GNSS signals and camera inputs using state-of-the-art spoofing techniques, the attack would fail." This contradicts §3.4's Attack Scope, which assumes the attacker does not tamper with cameras and in-vehicle sensors, and also contradicts the §6 limitation stating that the approach assumes reliable sensor modalities. No experiment supports combined GNSS+camera compromise. Remove or replace this sentence with a claim within the stated threat model.
minor comments (4)
  1. [Abstract and Table 2] The abstract says zero-shot VLM F1 ranges from 23% to 32%, but Table 2 reports baseline F1 of 0.25 (LLaVA) and 0.21 (NVILA); the 23–32% range matches the accuracy column, not F1. Clarify which metric is being quoted.
  2. [§4.2] Typo: "Fine-Turning Process" should be "Fine-Tuning Process." Also "LLaVA-Next-video-7Band NVILA" needs a space.
  3. [§4.3.2] The window notation W_t = {I_{t-11}, ..., I_t} and keyframe subset K_t = {I_{t-7}, ..., I_t} should be explained more carefully. With 12 frames in a 4-s window at 3 fps, the index alignment is clear, but the relationship between "anchor frame" and the sliding stride should be stated explicitly.
  4. [§5.3 Real-Time Inference] The 65–73 ms total prediction time is derived by multiplying the VLM inference latency by the 14% invocation ratio. This assumes no queueing or scheduling delay; make this assumption explicit.

Circularity Check

0 steps flagged · score 0.0 of 10

No significant circularity: training and validation data are independent, and no detector equation or fitted threshold reduces to the target result by construction.

full rationale

The central derivation is self-contained. The VLM is trained on the CoVLA (Tokyo) dataset and evaluated on a separately collected Tuscaloosa dataset, with the paper stating the validation set 'was used only for evaluation and was not used to train or tune any component of the proposed method.' GNSS-derived maneuvers are computed from the spoofed GNSS traces via standard bearing (Eqs. 1–2), Haversine distance (Eq. 3), and speed (Eq. 4), not from the VLM or from the validation labels. The detection thresholds (2 m/s, 0.1 rad, 4-of-8 keyframes) are fixed and hand-chosen, not fitted to the test set. The attack simulations do generate exactly the clean behavioral disagreements the detector keys on (mirrored turn direction, frozen position, injected drift), but this is an attack-fidelity limitation, not a derivation that reduces to its own inputs; the paper explicitly scopes itself to post-receiver trajectory manipulation and lists RF-level hardware validation as future work in the limitations. The only self-citations (Dasgupta et al. 2022 for GNSS-maneuver extraction and attack alignment; Aldeen et al. 2024 for VLM computational challenges) are contextual and not load-bearing, and the relevant equations are presented in the paper. No fitted parameter is renamed as a prediction, and no claimed result is forced by a self-citation chain. Therefore no significant circularity is present.

Assumptions & free parameters 5 free parameters · 5 assumptions · 0 invented entities

The system rests on several hand-chosen thresholds (2 m/s motion threshold, 2.0 m/s and 0.1 rad adaptive-gate thresholds, 4-of-8 agreement rule) and on the domain assumption that post-receiver trajectory manipulation faithfully mimics real RF spoofing. Most assumptions are standard math or clearly stated domain assumptions; the attack-realism assumption is the most consequential and is acknowledged by the authors as unvalidated at the RF level.

free parameters (5)
  • Motion-state speed threshold = 2 m/s
    Used in Section 4.3.3 (Eqs. 3–4) to classify GNSS-derived motion as moving vs stationary; hand-chosen with reference to traffic sensing practice (5–8 km/h). No sensitivity analysis is provided.
  • Adaptive gate speed threshold tau_v = 2.0 m/s
    Equation (8), Section 4.4: if the range of speed changes over three segments is below this, the VLM call is skipped. Hand-chosen; directly controls the 14% VLM call ratio and the headline 86% computational savings.
  • Adaptive gate yaw threshold tau_psi = 0.1 rad
    Equation (8), Section 4.4: if the range of yaw-rate changes is below this, the VLM call is skipped. Hand-chosen; no sensitivity analysis or citation for the value.
  • Turn agreement rule (N_k=8, T=4) = 8 keyframes, threshold 4
    Section 4.3.2: at least 4 of the 8 most recent keyframes must agree with the GNSS-expected turn. Hand-chosen; affects wrong-turn detection accuracy and latency.
  • Window/rate parameters = 4 s window, 12 frames at 3 fps
    Section 3.3.2: video is downsampled to 3 fps and capped at 4 s to fit the VLM context budget. Chosen for computational feasibility, not derived from the driving problem.
assumptions (5)
  • standard math Haversine and bearing-angle geometry (Eqs. 1–3) correctly convert GNSS coordinates to distance and turn direction.
    Used in Sections 4.3.1 and 4.3.3 without proof; standard spherical geometry.
  • domain assumption Trajectory-level manipulation of GNSS coordinates (mirror+snap, freeze, drift) is a faithful proxy for real RF spoofing at the behavior level.
    Section 3.4 'Attack Scope' states RF-level signal generation is beyond scope; the entire validation depends on this substitution. The authors list RF validation as future work.
  • domain assumption The VLM's learned motion cues transfer from Tokyo (CoVLA) to Tuscaloosa because delta-style sensor prompts and visual motion cues are domain-invariant physics rather than region-specific visual features.
    Section 4.2 argues this from delta-style prompts and motion-based training; supported by the reported 95% accuracy, but not by explicit causal analysis or ablations over visual appearance.
  • domain assumption Manual annotation of maneuvers (straight/stopped/left/right) in both datasets is accurate and consistent.
    Section 3.3.1: labels are manually assigned per frame; annotation error would propagate to both training and attack evaluation.
  • domain assumption The 2 m/s threshold for 'moving vs stationary' separates legitimate low-speed driving from stop attacks given GNSS noise.
    Section 4.3.3: a single threshold; with real spoofing transients or multipath, GNSS-derived speed may exceed 2 m/s while the vehicle is stopped, or vice versa.

how reviews work

0 comments
Cite this review

Pith. "Pith review of Development of Vision-Language Model-based GNSS Spoofing Detection for Autonomous Vehicle Navigation." pith.science (2026). https://pith.science/paper/6SCMNQNC

@misc{pith2026260723962,
  author       = {Pith},
  title        = {Pith review of: Development of Vision-Language Model-based GNSS Spoofing Detection for Autonomous Vehicle Navigation},
  year         = {2026},
  howpublished = {\url{https://pith.science/paper/6SCMNQNC}},
  note         = {Machine review of arXiv:2607.23962}
}
read the original abstract

Autonomous vehicles (AVs) depend on Global Navigation Satellite Systems (GNSS) for localization and navigation, making them vulnerable to spoofing attacks that can covertly redirect vehicles or induce unsafe maneuvers. In this paper, we develop the first Vision-Language Model (VLM)-based framework for GNSS spoofing detection for autonomous vehicles by fusing front-camera visual data with in-vehicle sensor readings (e.g., speed, acceleration, yaw rate) against GNSS-derived maneuvers. Our approach introduces a three-stage fine-tuning process that first grounds visual cues, and then calibrates sensor data within a shared semantic space to detect discrepancies between predicted and GNSS-derived maneuvers across three attack scenarios. We also generated an independent real-world dataset by driving an instrumented vehicle on public roads in Tuscaloosa, Alabama, equipped with time-synchronized GNSS, IMU, and camera logs to validate cross-regional generalization of our fine-tuned model on unseen data from training data. On this dataset, we then generated intelligent spoofing attacks, including trajectory mirroring with road-network snapping for wrong-turn attacks, position freezing for overshoot scenarios, and drift generation for stop attacks. On this validation dataset, the zero-shot VLMs baseline F1-score ranges from 23% to 32%, whereas our fine-tuned model achieves an F1-score ranging from 94% to 95%. Results show that our VLM-based approach correctly classified every wrong-turn and stop attacks, and attains 88%-93% accuracy for overshoot attacks. Furthermore, we introduce an adaptive inference policy that reduces VLM invocations to 14% (~86% computational reduction) and yields 65ms-73ms per 4s window. These results point to a practical, on-road layer of defense that complements signal-level integrity checks with the use of VLMs.

Figures

Figures reproduced from arXiv: 2607.23962 by the authors.

Figure 1
Figure 1. Overview of our data collection process: (a) sensor suite installed on the vehicle and (b) GNSS [PITH_FULL_IMAGE:figures/full_fig_p007_1.png] view at source ↗
Figure 2
Figure 2. Data preprocessing workflow 3.3.2 Video Processing Our goal is to infer maneuvers from the captured videos, we need first separate actual turns from the natural curvature of straight road segments. Road geometry can be complex, even so-called “straight” roads often include curves that require subtle yaw adjustments. One straightforward approach is to feed raw camera frames directly into the model to understand if th… view at source ↗
Figure 3
Figure 3. Importance coefficients for the seven candidate sensor channels, highlighting speed, accelerometer [PITH_FULL_IMAGE:figures/full_fig_p009_3.png] view at source ↗
Figures from the paper (5 more)
Figure 4
Figure 4. Figure 4: Generated GNSS spoofing attack models signals (Kriezis et al., 2025). Real RF-level spoofing attacks (signal-level attacks) involve broadcasting counterfeit satellite signals with precise power control, carrier phase alignment, and coordination across multiple satellit…
Figure 5
Figure 5. Figure 5: System overview of the proposed framework. The fine-tuned VLM receives front-camera frames [PITH_FULL_IMAGE:figures/full_fig_p012_5.png]
Figure 6
Figure 6. Figure 6: Three-stage fine-tuning pipeline: (1) Visual Grounding – train only the vision encoder on video [PITH_FULL_IMAGE:figures/full_fig_p014_6.png]
Figure 7
Figure 7. Figure 7: Real-time adaptive VLM inference workflow [PITH_FULL_IMAGE:figures/full_fig_p018_7.png]
Figure 8
Figure 8. Figure 8: Training and validation loss during fine-tuning [PITH_FULL_IMAGE:figures/full_fig_p019_8.png]

Discussion (0). Continue with ORCID to comment.

Reference graph

Works this paper leans on

80 extracted references · 1 canonical work pages

  1. [1]

    Liang, Hao and Li, Jiapeng and Bai, Tianyi and Huang, Xijie and Sun, Linzhuang and Wang, Zhengren and He, Conghui and Cui, Bin and Chen, Chong and Zhang, Wentao , journal =

  2. [2]

    arXiv preprint arXiv:2503.10742 , year =

    Keyframe-Oriented Vision Token Pruning: Enhancing Efficiency of Large Vision Language Models on Long-Form Video Processing , author =. arXiv preprint arXiv:2503.10742 , year =

    arXiv

  3. [3]

    arXiv preprint arXiv:2410.23262 , year=

    Emma: End-to-end multimodal model for autonomous driving , author=. arXiv preprint arXiv:2410.23262 , year=

    arXiv

  4. [4]

    IEEE Transactions on Instrumentation and Measurement , year=

    A comparative analysis of hybrid sensor fusion schemes for visual--inertial navigation , author=. IEEE Transactions on Instrumentation and Measurement , year=

  5. [5]

    arXiv preprint arXiv:2511.00088 , year=

    Alpamayo-r1: Bridging reasoning and action prediction for generalizable autonomous driving in the long tail , author=. arXiv preprint arXiv:2511.00088 , year=

    arXiv

  6. [6]

    arXiv preprint arXiv:2511.19912 , year=

    Reasoning-VLA: A fast and general vision-language-action reasoning model for autonomous driving , author=. arXiv preprint arXiv:2511.19912 , year=

    arXiv

  7. [7]

    Advances in Neural Information Processing Systems , volume=

    Autovla: A vision-language-action model for end-to-end autonomous driving with adaptive reasoning and reinforcement fine-tuning , author=. Advances in Neural Information Processing Systems , volume=

  8. [8]

    Proceedings of the AAAI Conference on Artificial Intelligence , volume=

    Opendrivevla: Towards end-to-end autonomous driving with large vision language action model , author=. Proceedings of the AAAI Conference on Artificial Intelligence , volume=

Show all 80 references
  1. [9]

    Workgroup, GS , journal =

  2. [10]

    Cao, Jianjian and Ye, Peng and Li, Shengze and Yu, Chong and Tang, Yansong and Lu, Jiwen and Chen, Tao , booktitle =

  3. [11]

    Expert Systems with Applications , pages =

    Analysis and Comparison of Feature Selection Methods Towards Performance and Stability , author =. Expert Systems with Applications , pages =. 2024 , publisher =

    2024

  4. [12]

    IEEE Transactions on Pattern Analysis and Machine Intelligence , year =

    Vision-Language Models for Vision Tasks: A Survey , author =. IEEE Transactions on Pattern Analysis and Machine Intelligence , year =

  5. [13]

    Open Source Routing Machine , howpublished =

  6. [14]

    2018 European Navigation Conference (

    Classification of Spoofing Attack Types , author =. 2018 European Navigation Conference (. 2018 , organization =

    2018

  7. [15]

    An Analysis on Older Driver's Driving Behavior by

    Zhao, Yanning and Yamamoto, Toshiyuki and Morikawa, Takayuki , journal =. An Analysis on Older Driver's Driving Behavior by. 2018 , publisher =

    2018

  8. [16]

    A Sensor Fusion-Based

    Dasgupta, Sagar and Rahman, Mizanur and Islam, Mhafuzul and Chowdhury, Mashrur , journal =. A Sensor Fusion-Based. 2022 , publisher =

    2022

  9. [17]

    Prediction-Based

    Dasgupta, Sagar and Rahman, Mizanur and Islam, Mhafuzul and Chowdhury, Mashrur , journal =. Prediction-Based

  10. [18]

    Autonomous Spoofing Detection and Mitigation in a

    Konovaltsev, Andriy and Cuntz, Manuel and Haettich, Christian and Meurer, Michael , booktitle =. Autonomous Spoofing Detection and Mitigation in a

  11. [19]

    Credible Navigation Algorithm for

    Song, Jiahui and Wu, Haitao and Guo, Xuqiang and Li, Siyuan and Gong, Yingkui and Zhang, Yang and Li, Yaping , journal =. Credible Navigation Algorithm for. 2021 , publisher =

    2021

  12. [20]

    2016 , publisher =

    Psiaki, Mark L and Humphreys, Todd E , journal =. 2016 , publisher =

    2016

  13. [21]

    Anomaly Detection Against

    Yang, Zhen and Ying, Jun and Shen, Junjie and Feng, Yiheng and Chen, Qi Alfred and Mao, Z Morley and Liu, Henry X , journal =. Anomaly Detection Against. 2023 , publisher =

    2023

  14. [22]

    Proceedings of the

    Improved Baselines with Visual Instruction Tuning , author =. Proceedings of the

  15. [23]

    Li, Junnan and Li, Dongxu and Xiong, Caiming and Hoi, Steven C. H. , editor =. Proceedings of the 39th International Conference on Machine Learning (. 2022 , publisher =

    2022

  16. [24]

    Jiang, Bo and Chen, Shaoyu and Liao, Bencheng and Zhang, Xingyu and Yin, Wei and Zhang, Qian and Huang, Chang and Liu, Wenyu and Wang, Xinggang , journal =

  17. [25]

    A New Framework for

    Xia, Na and Li, Jiacheng and Du, Huazheng and Jing, Shuhao , booktitle =. A New Framework for. 2024 , organization =

    2024

  18. [26]

    arXiv preprint arXiv:2506.11472 , year =

    On the Natural Robustness of Vision-Language Models Against Visual Perception Attacks in Autonomous Driving , author =. arXiv preprint arXiv:2506.11472 , year =

  19. [27]

    A Survey of

    Meng, Lianxiao and Yang, Lin and Yang, Wu and Zhang, Long , journal =. A Survey of. 2022 , publisher =

    2022

  20. [28]

    Drift with Devil: Security of Multi-Sensor Fusion Based Localization in High-Level Autonomous Driving under

    Shen, Junjie and Won, Jun Yeon and Chen, Zeyuan and Chen, Qi Alfred , booktitle =. Drift with Devil: Security of Multi-Sensor Fusion Based Localization in High-Level Autonomous Driving under

  21. [29]

    High-Resolution Spectral Estimation for Continuous Wave Jamming Mitigation of

    Elghamrawy, Haidy and Karaim, Malek and Korenberg, Michael and Noureldin, Aboelmagd , journal =. High-Resolution Spectral Estimation for Continuous Wave Jamming Mitigation of. 2021 , publisher =

    2021

  22. [30]

    Global Positioning System: Theory and Applications , year =

    Multipath Effects , author =. Global Positioning System: Theory and Applications , year =

  23. [31]

    Research on Covert Directional Spoofing Method for

    Geng, Xingshou and Guo, Yan and Tang, Kanghua and Wu, Wenqi and Ren, Yanchao , journal =. Research on Covert Directional Spoofing Method for. 2022 , publisher =

    2022

  24. [32]

    Global Positioning System: Theory and Applications , volume =

    Interference Effects and Mitigation Techniques , author =. Global Positioning System: Theory and Applications , volume =

  25. [33]

    Tian, Xiaoyu and Gu, Junru and Li, Bailin and Liu, Yicheng and Wang, Yang and Zhao, Zhiyong and Zhan, Kun and Jia, Peng and Lang, Xianpeng and Zhao, Hang , journal =

  26. [34]

    Yuan, Zhengqing and Li, Zhaoxu and Huang, Weiran and Ye, Yanfang and Sun, Lichao , journal =

  27. [35]

    Zhou, Baichuan and Hu, Ying and Weng, Xi and Jia, Junlong and Luo, Jie and Liu, Xien and Wu, Ji and Huang, Lei , journal =

  28. [36]

    2024 , publisher =

    Xu, Zhenhua and Zhang, Yujia and Xie, Enze and Zhao, Zhen and Guo, Yong and Wong, Kwan-Yee K and Li, Zhenguo and Zhao, Hengshuang , journal =. 2024 , publisher =

    2024

  29. [37]

    Localizing

    Xie, Jian and Liu, Qing and Wang, Ling and Gong, Yanyun and Zhang, Zhaolin , journal =. Localizing. 2022 , publisher =

    2022

  30. [38]

    Yang, An and Li, Anfeng and Yang, Baosong and Zhang, Beichen and Hui, Binyuan and Zheng, Bo and Yu, Bowen and Gao, Chang and Huang, Chengen and Lv, Chenxu and others , journal =

  31. [39]

    All Your

    Zeng, Kexiong Curtis and Liu, Shinan and Shu, Yuanchao and Wang, Dong and Li, Haoyu and Dou, Yanzhi and Wang, Gang and Yang, Yaling , booktitle =. All Your

  32. [40]

    Center, John A

    Vulnerability Assessment of the Transportation Infrastructure Relying on the Global Positioning System , author =. Center, John A. Volpe Nat. Transp. Syst., Tech. Rep , year =

  33. [41]

    Mao, Jiageng and Qian, Yuxi and Zhao, Hang and Wang, Yue , journal =

  34. [42]

    arXiv preprint arXiv:2310.02324 , year =

    Alt-Pilot: Autonomous Navigation with Language Augmented Topometric Maps , author =. arXiv preprint arXiv:2310.02324 , year =

    arXiv

  35. [43]

    Talk to the Vehicle: Language Conditioned Autonomous Navigation of Self Driving Cars , author =. 2019. 2019 , organization =

    2019

  36. [44]

    Kujur, Birendra and Khanafseh, Samer and Pervan, Boris , journal =. Optimal. 2024 , publisher =

    2024

  37. [45]

    Continuity of

    Filip, Ale. Continuity of. Scientific Reports , volume =. 2024 , publisher =

    2024

  38. [46]

    Nowak, Aleksander , journal =. Dynamic. 2017 , publisher =

    2017

  39. [47]

    Detection, Tracking, and Geolocation of Moving Vehicle from

    Zhao, Xiaoyue and Pu, Fangling and Wang, Zhihang and Chen, Hongyu and Xu, Zhaozhuo , journal =. Detection, Tracking, and Geolocation of Moving Vehicle from. 2019 , publisher =

    2019

  40. [48]

    Sensors , volume =

    A Survey on Sensor Failures in Autonomous Vehicles: Challenges and Solutions , author =. Sensors , volume =. 2024 , publisher =

    2024

  41. [49]

    Advances in Neural Information Processing Systems , volume =

    A Theory of Multimodal Learning , author =. Advances in Neural Information Processing Systems , volume =

  42. [50]

    Localization Requirements for Autonomous Vehicles , volume =

    Reid, Tyler , year =. Localization Requirements for Autonomous Vehicles , volume =. SAE International Journal of Connected and Automated Vehicles , doi =

  43. [51]

    2023 , publisher =

    Chen, Liang and Zheng, Fu and Gong, Xiaopeng and Jiang, Xinyuan , journal =. 2023 , publisher =

    2023

  44. [52]

    Exploring Interpretable

    Guo, Tian and Lin, Tao and Antulov-Fantulin, Nino , booktitle =. Exploring Interpretable. 2019 , organization =

    2019

  45. [53]

    The Ghost Navigator: Revisiting the Hidden Vulnerability of Localization in Autonomous Driving , author =. 34th

  46. [54]

    Enhancing Contextual Understanding in Large Language Models through Contrastive Decoding , author =. Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers) , month =...

    2024 doi

  47. [55]

    Proceedings of the

    Frozen in Time: A Joint Video and Image Encoder for End-to-End Retrieval , author =. Proceedings of the

  48. [56]

    arXiv preprint arXiv:2310.03986 , year =

    Robust Multimodal Learning with Missing Modalities via Parameter-Efficient Adaptation , author =. arXiv preprint arXiv:2310.03986 , year =

    arXiv

  49. [57]

    2025 , organization =

    Arai, Hidehisa and Miwa, Keita and Sasaki, Kento and Watanabe, Kohei and Yamaguchi, Yu and Aoki, Shunsuke and Yamamoto, Issei , booktitle =. 2025 , organization =

    2025

  50. [58]

    IEEE Intelligent Transportation Systems Magazine , year =

    Receive, Reason, and React: Drive as You Say, With Large Language Models in Autonomous Vehicles , author =. IEEE Intelligent Transportation Systems Magazine , year =

  51. [59]

    An Initial Exploration of Employing Large Multimodal Models in Defending Against Autonomous Vehicles Attacks , year =

    Aldeen, Mohammed and MohajerAnsari, Pedram and Ma, Jin and Chowdhury, Mashrur and Cheng, Long and Pes. An Initial Exploration of Employing Large Multimodal Models in Defending Against Autonomous Vehicles Attacks , year =. 2024

    2024

  52. [60]

    Cai, Mu and Tan, Reuben and Zhang, Jianrui and Zou, Bocheng and Zhang, Kai and Yao, Feng and Zhu, Fangrui and Gu, Jing and Zhong, Yiwu and Shang, Yuzhang and others , journal =

  53. [61]

    Sha, Hao and Mu, Yao and Jiang, Yuxuan and Chen, Li and Xu, Chenfeng and Luo, Ping and Li, Shengbo Eben and Tomizuka, Masayoshi and Zhan, Wei and Ding, Mingyu , journal =

  54. [62]

    IEEE Open Journal of Intelligent Transportation Systems , volume =

    High-Definition Maps: Comprehensive Survey, Challenges, and Future Perspectives , author =. IEEE Open Journal of Intelligent Transportation Systems , volume =. 2023 , publisher =

    2023

  55. [63]

    A Survey and Analysis of the

    Schmidt, Desmond and Radke, Kenneth and Camtepe, Seyit and Foo, Ernest and Ren, Micha. A Survey and Analysis of the. ACM Computing Surveys (. 2016 , publisher =

    2016

  56. [64]

    Stars Can Tell: A Robust Method to Defend Against

    Liu, Shinan and Cheng, Xiang and Yang, Hanchao and Shu, Yuanchao and Weng, Xiaoran and Guo, Ping and Zeng, Kexiong Curtis and Wang, Gang and Yang, Yaling , booktitle =. Stars Can Tell: A Robust Method to Defend Against

  57. [65]

    IEEE Access , volume =

    Spoofing and Anti-Spoofing Technologies of Global Navigation Satellite System: A Survey , author =. IEEE Access , volume =. 2020 , publisher =

    2020

  58. [66]

    Zhang, Enming and Dai, Xingyuan and Lv, Yisheng and Miao, Qinghai , journal =

  59. [67]

    Xing, Shuo and Hua, Hongyuan and Gao, Xiangbo and Zhu, Shenzhe and Li, Renjie and Tian, Kexin and Li, Xiaopeng and Huang, Heng and Yang, Tianbao and Wang, Zhangyang and Zhou, Yang and Yao, Huaxiu and Tu, Zhengzhong , journal =

  60. [68]

    Traffic Detector Handbook: Volume

    Klein, Lawrence A and Mills, Milton K and Gibson, David RP and others , year =. Traffic Detector Handbook: Volume

  61. [69]

    Mohammadi, Ahmad and Ahmari, Reza and Hemmati, Vahid and Owusu-Ambrose, Frederick and Mahmoud, Mahmoud Nabil and Kebria, Parham and Homaifar, Abdollah and Saif, Mehrdad , journal =

  62. [70]

    Wang, Yujin and Liu, Quanfeng and Fan, Jiaqi and Hong, Jinlong and Chu, Hongqing and Tian, Mengjian and Gao, Bingzhao and Chen, Hong , journal =

  63. [71]

    Mao, Pengrui and Yuan, Hong and Chen, Xiao and Gong, Yingkui and Li, Shuhui and Li, Ran and Luo, Ruidan and Zhao, Guangyao and Fu, Chengang and Xu, Jiajia , journal =. A. 2023 , publisher =

    2023

  64. [72]

    Developing Practical

    Lo, Sherman and Rothmaier, Fabian and Miralles, Damian and Akos, Dennis and Walter, Todd , booktitle =. Developing Practical

  65. [73]

    Simon, Javier and Rodriguez, Tomas and Scorzolini, Andrea and Silva, Philippe da and Sbardellati, Flavio and Fernandez-Hernandez, Ignacio and Damy, Sophie and Ibanez, David , booktitle =. The. 2024 , doi =

    2024

  66. [74]

    IEEE Transactions on Robotics , volume =

    Campos, Carlos and Elvira, Richard and Rodr. IEEE Transactions on Robotics , volume =. 2021 , publisher =

    2021

  67. [75]

    2018 , publisher =

    Qin, Tong and Li, Peiliang and Shen, Shaojie , journal =. 2018 , publisher =

    2018

  68. [76]

    2026 , howpublished =

    Receivers Implementing. 2026 , howpublished =

    2026

  69. [77]

    2025 , month = nov, howpublished =

    2025

  70. [78]

    Chips-Message Robust Authentication (

    Anderson, Jon M and Carroll, Katherine L and DeVilbiss, Nathan P and Gillis, James T and Hinks, Joanna C and O'Hanlon, Brady W and Rushanan, Joseph J and Scott, Logan and Yazdi, Renee A , booktitle =. Chips-Message Robust Authentication (. 2017 , doi =

    2017

  71. [79]

    2024 , publisher =

    Jiang, Peng and Wu, Hongyi and Zhao, Yanxiao and Zhao, Dan and Zhou, Gang and Xin, Chunsheng , journal =. 2024 , publisher =

    2024

  72. [80]

    Proceedings of the 2025 International Technical Meeting of The Institute of Navigation , pages =

    Real-World Spoofing Detection and Characterization Using Low-Cost Receivers , author =. Proceedings of the 2025 International Technical Meeting of The Institute of Navigation , pages =

    2025

Pith tools

Reviewed July 31, 2026 · model on record in the stance chip above.