The Phantom of LiDAR-based Perception: Black-box Attack and Defenses
(Usenix Security'20)