Abstract:Multi-sensor Fusion (MSF) algorithms are critical components in modern autonomous driving systems, particularly in localization and AI-powered perception modules, which play a vital role in ensuring vehicle safety. The Error-State Kalman Filter (ESKF), specifically employed for localization fusion, is widely recognized for its robustness and accuracy in MSF implementations. While existing studies have demonstrated the vulnerability of ESKF to sensor spoofing attacks, these works have primarily focused on a black-box implementation, leading to an insufficient security analysis. Specifically, due to the lack of theoretical guidance in previous methods, these studies have consistently relied on exponential functions to fit attack sequences across all scenarios. As a result, the attacker had to explore an extensive parameter space to identify effective attack sequences, lacking the ability to adaptively generate optimal ones. This paper aims to fill this crucial gap by conducting a thorough security analysis of the ESKF model and presenting a simple approach for modeling injection errors in these systems. By utilizing this error modeling, we introduce a new attack strategy that employs constrained optimization to reduce the energy needed to reach the same deviation target, guaranteeing that the attack is both efficient and effective. This method increases the stealthiness of the attack, making it harder to detect. Unlike previous methods, our approach can dynamically produce nearly perfect injection signals without requiring multiple attempts to find the best parameter combination in different scenarios. Through extensive simulations and real-world experiments, we demonstrate the superiority of our method compared to state-of-the-art attack strategies. Our results indicate that our approach requires significantly less injection energy to achieve the same deviation target. Additionally, we validate the practical applicability and impact of our method through end-to-end testing on an AI-powered autonomous driving system.

False Data Injection Attacks Against Error-State Kalman Filter-Based IMU-GPS Fusion Models

Security Analysis and Adaptive False Data Injection Against Multi-Sensor Fusion Localization for Autonomous Driving

False Data Injection Attacks Against State Estimation in Wireless Sensor Networks

Fusion and detection for multi-sensor systems under false data injection attacks

A Novel Data Fusion Algorithm to Combat False Data Injection Attacks in Networked Radar Systems

Sensor Fusion of GNSS and IMU Data for Robust Localization via Smoothed Error State Kalman Filter

Detection of false data injection attacks in smart grid based on adaptive inhibition unscented Kalman filter

False Data Injection Attacks in Control Systems

Innovation-based Kalman filter fault detection and exclusion method against all-source faults for tightly coupled GNSS/INS/Vision integration

Joint detection and localization of False Data Injection Attacks in smart grids: An enhanced state estimation approach

GNSS-INS-Dynamic Fusion with Robustness to Outliers Based on External Force State Estimation

Nonlinear Fusion Estimation for False Data Injection Attack Signals in Cyber-Physical Systems.

State Estimation under Joint False Data Injection Attacks: Dealing with Constraints and Insecurity

Side Information-Based Stealthy False Data Injection Attacks Against Multi-Sensor Remote Estimation

Event-Based Optimal Stealthy False Data-Injection Attacks Against Remote State Estimation Systems

Error State Extended Kalman Filter Multi-Sensor Fusion for Unmanned Aerial Vehicle Localization in GPS and Magnetometer Denied Indoor Environments

Semi-Aerodynamic Model Aided Invariant Kalman Filtering for UAV Full-State Estimation

Enhancing Positioning in GNSS Denied Environments based on an Extended Kalman Filter Using Past GNSS Measurements and IMU

GPS-IMU Sensor Fusion for Reliable Autonomous Vehicle Position Estimation

Decentralized False-Data Injection Attacks Against State Omniscience: Existence and Security Analysis

Detection of False Data Injection Attacks in a Smart Grid Based on WLS and an Adaptive Interpolation Extended Kalman Filter