ScAR: Scaling Adversarial Robustness for LiDAR Object Detection

Xiaohu Lu,Hayder Radha

2024-03-05

Abstract:The adversarial robustness of a model is its ability to resist adversarial attacks in the form of small perturbations to input data. Universal adversarial attack methods such as Fast Sign Gradient Method (FSGM) and Projected Gradient Descend (PGD) are popular for LiDAR object detection, but they are often deficient compared to task-specific adversarial attacks. Additionally, these universal methods typically require unrestricted access to the model's information, which is difficult to obtain in real-world applications. To address these limitations, we present a black-box Scaling Adversarial Robustness (ScAR) method for LiDAR object detection. By analyzing the statistical characteristics of 3D object detection datasets such as KITTI, Waymo, and nuScenes, we have found that the model's prediction is sensitive to scaling of 3D instances. We propose three black-box scaling adversarial attack methods based on the available information: model-aware attack, distribution-aware attack, and blind attack. We also introduce a strategy for generating scaling adversarial examples to improve the model's robustness against these three scaling adversarial attacks. Comparison with other methods on public datasets under different 3D object detection architectures demonstrates the effectiveness of our proposed method. Our code is available at <a class="link-external link-https" href="https://github.com/xiaohulugo/ScAR-IROS2023" rel="external noopener nofollow">this https URL</a>.

Computer Vision and Pattern Recognition

What problem does this paper attempt to address?

### Problems the Paper Aims to Solve The paper aims to address the issue of adversarial robustness in LiDAR (Light Detection and Ranging) object detection. Specifically: 1. **Limitations of Existing Methods**: - Current popular general adversarial attack methods (such as Fast Gradient Sign Method (FSGM) and Projected Gradient Descent (PGD)) are usually less effective in LiDAR object detection compared to task-specific adversarial attacks. - These general methods typically require full access to model information, which is difficult to achieve in practical applications. 2. **Proposed Method**: - A black-box method named ScAR (Scaling Adversarial Robustness) is proposed to enhance the adversarial robustness of LiDAR object detection models. - By analyzing the statistical characteristics of 3D object detection datasets such as Kitti, Waymo, and nuScenes, it is found that model predictions are very sensitive to the scaling of 3D instances. - Three black-box scaling adversarial attack methods based on available information are proposed: model-aware attack, distribution-aware attack, and blind attack. - A strategy is designed to generate scaling adversarial samples to improve the model's robustness against these attacks. 3. **Experimental Validation**: - Comparative experiments were conducted on public datasets to demonstrate the effectiveness of the proposed method. - Experimental results show that models trained with ScAR exhibit stronger robustness when facing adversarial samples.

ScAR: Scaling Adversarial Robustness for LiDAR Object Detection

Adversarial Robustness Analysis of LiDAR-included Models in Autonomous Driving

A Comprehensive Study of the Robustness for LiDAR-Based 3D Object Detectors Against Adversarial Attacks

Generating 3D Adversarial Point Clouds under the Principle of LiDARs

Improving Adversarial Robustness of 3D Point Cloud Classification Models

PLA-LiDAR: Physical Laser Attacks Against LiDAR-based 3D Object Detection in Autonomous Vehicle.

Exploring Adversarial Robustness of LiDAR Semantic Segmentation in Autonomous Driving

Adversarial Objects Against LiDAR-Based Autonomous Driving Systems

A Comprehensive Study and Comparison of the Robustness of 3D Object Detectors Against Adversarial Attacks

Adversarial Patch Attack on Multi-Scale Object Detection for UAV Remote Sensing Images

Evaluating the Robustness of LiDAR Point Cloud Tracking Against Adversarial Attack

ROSAR: An Adversarial Re-Training Framework for Robust Side-Scan Sonar Object Detection

Efficient Adversarial Attack Strategy Against 3D Object Detection in Autonomous Driving Systems

Improving transferability of 3D adversarial attacks with scale and shear transformations

Robust Roadside Physical Adversarial Attack Against Deep Learning in Lidar Perception Modules

On the Adversarial Robustness of Camera-based 3D Object Detection

Exploring Adversarial Robustness of LiDAR-Camera Fusion Model in Autonomous Driving

A Region-Adaptive Local Perturbation-Based Method for Generating Adversarial Examples in Synthetic Aperture Radar Object Detection

Adversarial Obstacle Generation Against LiDAR-Based 3D Object Detection

ADoPT: LiDAR Spoofing Attack Detection Based on Point-Level Temporal Consistency

Learning Adversarially Robust Object Detector with Consistency Regularization in Remote Sensing Images