Abstract:Modern autonomous vehicles adopt state-of-the-art DNN models to interpret the sensor data and perceive the environment. However, DNN models are vulnerable to different types of adversarial attacks, which pose significant risks to the security and safety of the vehicles and passengers. One prominent threat is the backdoor attack, where the adversary can compromise the DNN model by poisoning the training samples. Although lots of effort has been devoted to the investigation of the backdoor attack to conventional computer vision tasks, its practicality and applicability to the autonomous driving scenario is rarely explored, especially in the physical world. In this paper, we target the lane detection system, which is an indispensable module for many autonomous driving tasks, e.g., navigation, lane switching. We design and realize the first physical backdoor attacks to such system. Our attacks are comprehensively effective against different types of lane detection algorithms. Specifically, we introduce two attack methodologies (poison-annotation and clean-annotation) to generate poisoned samples. With those samples, the trained lane detection model will be infected with the backdoor, and can be activated by common objects (e.g., traffic cones) to make wrong detections, leading the vehicle to drive off the road or onto the opposite lane. Extensive evaluations on public datasets and physical autonomous vehicles demonstrate that our backdoor attacks are effective, stealthy and robust against various defense solutions. Our codes and experimental videos can be found in <a class="link-external link-https" href="https://sites.google.com/view/lane-detection-attack/lda" rel="external noopener nofollow">this https URL</a>.

Security of Deep Learning based Lane Keeping System under Physical-World Adversarial Attack

Clean-Annotation Backdoor Attack against Lane Detection Systems in the Wild

Physical Backdoor Attacks to Lane Detection Systems in Autonomous Driving

Towards Robust Physical-world Backdoor Attacks on Lane Detection

On Robustness of Lane Detection Models to Physical-World Adversarial Attacks in Autonomous Driving

RoLMA: A Practical Adversarial Attack Against Deep Learning-Based LPR Systems.

Adversarial Computer Vision Via Acoustic Manipulation of Camera Sensors

Adversarial Robustness Analysis of LiDAR-included Models in Autonomous Driving

Robust Roadside Physical Adversarial Attack Against Deep Learning in Lidar Perception Modules

Driving into Danger: Adversarial Patch Attack on End-to-End Autonomous Driving Systems Using Deep Learning

Model-Agnostic Defense for Lane Detection against Adversarial Attack

Lateral-Direction Localization Attack in High-Level Autonomous Driving: Domain-Specific Defense Opportunity via Lane Detection

Cross-Task Physical Adversarial Attack Against Lane Detection System Based on LED Illumination Modulation.

Stealthy and Effective Physical Adversarial Attacks in Autonomous Driving

Systematic Assessment of Cyber-Physical Security of Lane Keeping Control System for Autonomous Vehicles

Dynamic Adversarial Attacks on Autonomous Driving Systems

An Adversarial Attack on Salient Regions of Traffic Sign

Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving

Finding Physical Adversarial Examples for Autonomous Driving with Fast and Differentiable Image Compositing

Adversarial Objects Against LiDAR-Based Autonomous Driving Systems

Attacking vision-based perception in end-to-end autonomous driving models