Attacker model for Connected and Automated Vehicles
Robust Physical-World Attacks on Machine Learning Models.