Abstract:Multi-sensor Fusion (MSF) algorithms are critical components in modern autonomous driving systems, particularly in localization and AI-powered perception modules, which play a vital role in ensuring vehicle safety. The Error-State Kalman Filter (ESKF), specifically employed for localization fusion, is widely recognized for its robustness and accuracy in MSF implementations. While existing studies have demonstrated the vulnerability of ESKF to sensor spoofing attacks, these works have primarily focused on a black-box implementation, leading to an insufficient security analysis. Specifically, due to the lack of theoretical guidance in previous methods, these studies have consistently relied on exponential functions to fit attack sequences across all scenarios. As a result, the attacker had to explore an extensive parameter space to identify effective attack sequences, lacking the ability to adaptively generate optimal ones. This paper aims to fill this crucial gap by conducting a thorough security analysis of the ESKF model and presenting a simple approach for modeling injection errors in these systems. By utilizing this error modeling, we introduce a new attack strategy that employs constrained optimization to reduce the energy needed to reach the same deviation target, guaranteeing that the attack is both efficient and effective. This method increases the stealthiness of the attack, making it harder to detect. Unlike previous methods, our approach can dynamically produce nearly perfect injection signals without requiring multiple attempts to find the best parameter combination in different scenarios. Through extensive simulations and real-world experiments, we demonstrate the superiority of our method compared to state-of-the-art attack strategies. Our results indicate that our approach requires significantly less injection energy to achieve the same deviation target. Additionally, we validate the practical applicability and impact of our method through end-to-end testing on an AI-powered autonomous driving system.

Secure Pose Estimation for Autonomous Vehicles under Cyber Attacks.

Secure Estimation and Attack Isolation for Connected and Automated Driving in the Presence of Malicious Vehicles

Partial-Information, Longitudinal Cyber Attacks on LiDAR in Autonomous Vehicles

Adaptive sensor attack detection and defense framework for autonomous vehicles based on density

A Secure Sensor Fusion Framework for Connected and Automated Vehicles under Sensor Attacks

Cyber-Physical System-Based Path Tracking Control of Autonomous Vehicles under Cyber-Attacks

Secure Fusion Estimation Against FDI Sensor Attacks in Cyber-Physical Systems

Security Analysis and Adaptive False Data Injection Against Multi-Sensor Fusion Localization for Autonomous Driving

Attack-Aware Multi-Sensor Integration Algorithm for Autonomous Vehicle Navigation Systems

Secure state estimation for unmanned aircraft cyber‐physical systems under multiple attacks

Attack Detection and Secure State Estimation of Collectively Observable Cyber-Physical Systems Under False Data Injection Attacks

Secure Nonlinear Fusion Estimation for Cyber–physical Systems under FDI Attacks

Adaptive secure lateral control of autonomous electric vehicles under denial-of-service attacks

Adaptive attack recognition method based on probability model for autonomous vehicle

Secure and Safe Control of Connected and Automated Vehicles Against False Data Injection Attacks

Fuzzy Unknown Input Observer for Estimating Sensor and Actuator Cyber-Attacks in Intelligent Connected Vehicles

An Anomaly Behavior Analysis Framework for Securing Autonomous Vehicle Perception

Play the Imitation Game: Model Extraction Attack Against Autonomous Driving Localization.

Distributed Fusion Estimation for Nonlinear Cyber-Physical Systems With Attacked Control Signals

Systematic Assessment of Cyber-Physical Security of Lane Keeping Control System for Autonomous Vehicles

Robust Vision-Aided Inertial Navigation System for Protection Against Ego-Motion Uncertainty of Unmanned Ground Vehicle