Abstract:Automated driving systems rely on 3D object detectors to recognize possible obstacles from LiDAR point clouds. However, recent works show the adversary can forge non-existent cars in the prediction results with a few fake points (i.e., appearing attack). By removing statistical outliers, existing defenses are however designed for specific attacks or biased by predefined heuristic rules. Towards more comprehensive mitigation, we first systematically inspect the mechanism of recent appearing attacks: Their common weaknesses are observed in crafting fake obstacles which (i) have obvious differences in the local parts compared with real obstacles and (ii) violate the physical relation between depth and point density. In this paper, we propose a novel plug-and-play defensive module which works by side of a trained LiDAR-based object detector to eliminate forged obstacles where a major proportion of local parts have low objectness, i.e., to what degree it belongs to a real object. At the core of our module is a local objectness predictor, which explicitly incorporates the depth information to model the relation between depth and point density, and predicts each local part of an obstacle with an objectness score. Extensive experiments show, our proposed defense eliminates at least 70% cars forged by three known appearing attacks in most cases, while, for the best previous defense, less than 30% forged cars are eliminated. Meanwhile, under the same circumstance, our defense incurs less overhead for AP/precision on cars compared with existing defenses. Furthermore, We validate the effectiveness of our proposed defense on simulation-based closed-loop control driving tests in the open-source system of Baidu's Apollo.

Adversarial Objects Against LiDAR-Based Autonomous Driving Systems

Adversarial Robustness Analysis of LiDAR-included Models in Autonomous Driving

Generating 3D Adversarial Point Clouds under the Principle of LiDARs

PLA-LiDAR: Physical Laser Attacks Against LiDAR-based 3D Object Detection in Autonomous Vehicle.

Laser-Based LiDAR Spoofing: Effects Validation, Capability Quantification, and Countermeasures

Adversarial Computer Vision Via Acoustic Manipulation of Camera Sensors

Robust Roadside Physical Adversarial Attack Against Deep Learning in Lidar Perception Modules

Adversarial Obstacle Generation Against LiDAR-Based 3D Object Detection

Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving

Exploring Adversarial Robustness of LiDAR Semantic Segmentation in Autonomous Driving

Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasures

Exorcising ''Wraith'': Protecting LiDAR-based Object Detector in Automated Driving System from Appearing Attacks

Exploring Adversarial Robustness of LiDAR-Camera Fusion Model in Autonomous Driving

You Can't See Me: Physical Removal Attacks on LiDAR-based Autonomous Vehicles Driving Frameworks

ADoPT: LiDAR Spoofing Attack Detection Based on Point-Level Temporal Consistency

A Survey on Adversarial Robustness of LiDAR-based Machine Learning Perception in Autonomous Vehicles

Navigating Threats: A Survey of Physical Adversarial Attacks on LiDAR Perception Systems in Autonomous Vehicles

A Comprehensive Study of the Robustness for LiDAR-Based 3D Object Detectors Against Adversarial Attacks

Partial-Information, Longitudinal Cyber Attacks on LiDAR in Autonomous Vehicles

Attacking vision-based perception in end-to-end autonomous driving models

Adversarial Point Cloud Perturbations Against 3D Object Detection in Autonomous Driving Systems