## Appendix C DeepRacer Agent Specifications for Hardware-in-the-Loop Validation  
To facilitate the crucial transition from simulation-based validation to real-world testing and ultimately to full-scale autonomous vehicles, our research initiative has acquired an AWS DeepRacer agent. This acquisition marks a significant step towards a phased validation approach, ensuring that our findings regarding cyberattack resilience, operational integrity, and safety protocols can be rigorously tested in a tangible, miniature autonomous platform. The DeepRacer will serve as an intermediate hardware-in-the-loop stage in future research, allowing us to evaluate the practical implications of our defense mechanisms and anomaly detection systems in a controlled physical environment before deployment in full-scale vehicles. Furthermore, to enhance our real-world experimentation capabilities, we are also acquiring iniVation DAVIS 346 or DAVIS 240 with the following resolutions: DAVIS 240, 240 \(\times\) 180; DAVIS 346, 346 \(\times\) 260. These will be attached to the DeepRacer agent. * [PERSON] et al. (2016) [PERSON]; [PERSON]; [PERSON] Can You Trust Autonomous Vehicles: Contactless Attacks against Sensors of Self-Driving Vehicle. In Proceedings of the 24 th USENIX Security Symposium, Austin, TX, USA, 13 August 2016. * [PERSON] et al. (2010) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; et al. Experimental Security Analysis of a Modern Automobile. In Proceedings of the 2010 IEEE Symposium on Security and Privacy, Oakland, CA, USA, 16-19 May 2010; pp. 447-462. [CrossRef]
* [PERSON] and [PERSON] (2015) [PERSON]; [PERSON] [PERSON] Remote Exploitation of an Unaltered Passenger Vehicle. In Proceedings of the Black Hat USA, Las Vegas, NV, USA, 1-6 August 2015. * [PERSON] and [PERSON] (2015) [PERSON]; [PERSON]; [PERSON] A Practical Wireless Attack on the Connected Car and Security Protocol for In-Vehicle CAN. _IEEE Trans. Intell. Transp. Syst._**2015**, _16_, 993-1006. [CrossRef]
* [PERSON] et al. (2013) [PERSON]; [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON]; [PERSON] [PERSON]; [PERSON] Intriguing Properties of Neural Networks. _arXiv_**2013**, arXiv:1312.6199. * [PERSON] et al. (2023) [PERSON]; [PERSON]; [PERSON]; [PERSON] Potential Field-based Path Planning with Interactive Speed Optimization for Autonomous Vehicles. _arXiv_**2023**, arXiv:2306.06987. [CrossRef]
* [PERSON] et al. (2016) [PERSON]; [PERSON] [PERSON]; [PERSON] Adversarial Examples in the Physical World. _arXiv_**2016**, arXiv:1607.02533. * [PERSON] et al. (2019) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Adversarial Sensor Attack on LiDAR-Based Perception in Autonomous Driving. In Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, London, UK, 11-15 November 2019; pp. 2267-2281. [CrossRef]
* [PERSON] et al. (2020) [PERSON]; [PERSON]; [PERSON]; [PERSON] Towards Robust LiDAR-Based Perception in Autonomous Driving: General Black-Box Adversarial Sensor Attack and Countermeasures. In Proceedings of the 29 th USENIX Security Symposium, Virtual, 12-14 August 2020; pp. 877-894. * [PERSON] et al. (2008) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]. Assessing the Spoofing Threat: Development of a Portable GPS Civilian Spoofer. In Proceedings of the 21 st International Technical Meeting of the Satellite Division of The Institute of Navigation, Savannah, GA, USA, 16-19 September 2008; pp. 2314-2325. * [PERSON] et al. (2011) [PERSON]; [PERSON]; [PERSON]; [PERSON] On the Requirements for Successful GPS Spoofing Attacks. In Proceedings of the 18 th ACM Conference on Computer and Communications Security, Chicago, IL, USA, 17-21 October 2011; pp. 75-86. [CrossRef]
* [PERSON] et al. (2013) [PERSON]; [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON] [PERSON] Survey on Security Threats and Protection Mechanisms in Embedded Automotive Networks. In Proceedings of the 43 rd Annual IEEE/IFIP Conference on Dependable Systems and Networks Workshop, Budapest, Hungary, 24-27 June 2013; pp.