Abstract:In autonomous driving, millimeter wave (mmWave) radar has been widely adopted for object detection because of its robustness and reliability under various weather and lighting conditions. For radar object detection, deep neural networks (DNNs) are becoming increasingly important because they are more robust and accurate, and can provide rich semantic information about the detected objects, which is critical for autonomous vehicles (AVs) to make decisions. However, recent studies have shown that DNNs are vulnerable to adversarial attacks. Despite the rapid development of DNN-based radar object detection models, there have been no studies on their vulnerability to adversarial attacks. Although some spoofing attack methods are proposed to attack the radar sensor by actively transmitting specific signals using some special devices, these attacks require sub-nanosecond-level synchronization between the devices and the radar and are very costly, which limits their practicability in real world. In addition, these attack methods can not effectively attack DNN-based radar object detection. To address the above problems, in this paper, we investigate the possibility of using a few adversarial objects to attack the DNN-based radar object detection models through passive reflection. These objects can be easily fabricated using 3D printing and metal foils at low cost. By placing these adversarial objects at some specific locations on a target vehicle, we can easily fool the victim AV's radar object detection model. The experimental results demonstrate that the attacker can achieve the attack goal by using only two adversarial objects and conceal them as car signs, which have good stealthiness and flexibility. To the best of our knowledge, this is the first study on the passive-reflection-based attacks against the DNN-based radar object detection models using low-cost, readily-available and easily concealable geometric shaped objects.

Performance Of Target Tracking In Radar Network System Under Deception Attack

Radar2: Passive Spy Radar Detection and Localization Using COTS Mmwave Radar

A Target Detection Scheme with Decreased Complexity and Enhanced Performance for Range-Doppler FMCW Radar.

A multi-channel based passive detection strategy for high-speed moving target in the airspace under varying interference.

Range Deception Jamming Performance Evaluation for Moving Targets in a Ground-Based Radar Network

Consensus Based Target Tracking Against Deception Jamming in Distributed Radar Networks

Secured Measurement Fusion Scheme Against Deceptive ECM Attack in Radar Network

Target Detection for Multistatic Radar in the Presence of Deception Jamming

Deception Velocity-Based Method to Discriminate Physical Targets and Active False Targets in a Multistatic Radar System

Resource management for target tracking in distributed radar network system

Mitigation of Radar Range Deception Jamming Using Random Finite Sets

Design and Performance Analysis of Wireless Legitimate Surveillance Systems with Radar Function

A Range Deception Interference Recognition and Target Detection Method Based on Coherent Fusion Processing for Multistatic Radar System

Joint Antenna Scheduling and Power Allocation for Multi-Target Tracking under Range Deception Jamming in Distributed MIMO Radar System

A Novel Data Fusion Algorithm to Combat False Data Injection Attacks in Networked Radar Systems

Analysis of radar imaging and deception using chaotic FM signal

TileMask: A Passive-Reflection-based Attack against mmWave Radar Object Detection in Autonomous Driving

Secure Radar-Communication Systems With Malicious Targets: Integrating Radar, Communications and Jamming Functionalities

An Intelligent Reflecting Surface-Based Attack Scheme Against Dual-Functional Radar and Communication Systems

Performance Analysis for Cyber–physical Systems under Two Types of Stealthy Deception Attacks