Abstract:Autonomous driving technology has advanced significantly with deep learning, but noise and attacks threaten its real-world deployment. While research has revealed vulnerabilities in individual intelligent tasks, a comprehensive evaluation of these impacts across complete end-to-end systems is still underexplored. To address this void, we thoroughly analyze the robustness of four end-to-end autonomous driving systems against various noise and build the RobustE2E Benchmark, including five traditional adversarial attacks and a newly proposed Module-Wise Attack specifically targeting end-to-end autonomous driving in white-box settings, as well as four major categories of natural corruptions (a total of 17 types, with five severity levels) in black-box settings. Additionally, we extend the robustness evaluation from the open-loop model level to the closed-loop case studies of autonomous driving system level. Our comprehensive evaluation and analysis provide valuable insights into the robustness of end-to-end autonomous driving, which may offer potential guidance for targeted improvements to models. For example, (1) even the most advanced end-to-end models suffer large planning failures under minor perturbations, with perception tasks showing the most substantial decline; (2) among adversarial attacks, our Module-Wise Attack poses the greatest threat to end-to-end autonomous driving models, while PGD-l2 is the weakest, and among four categories of natural corruptions, noise and weather are the most harmful, followed by blur and digital distortion being less severe; (3) the integrated, multitask approach results in significantly higher robustness and reliability compared with the simpler design, highlighting the critical role of collaborative multitask in autonomous driving; and (4) the autonomous driving systems amplify the model's lack of robustness, etc. Our research contributes to developing more resilient autonomous driving models and their deployment in the real world.

Adversarial Driving: Attacking End-to-End Autonomous Driving

Attacking vision-based perception in end-to-end autonomous driving models

Attack End-to-End Autonomous Driving through Module-Wise Noise

Adversarial Computer Vision Via Acoustic Manipulation of Camera Sensors

Finding Physical Adversarial Examples for Autonomous Driving with Fast and Differentiable Image Compositing

Adversarial Robustness Analysis of LiDAR-included Models in Autonomous Driving

Evaluating Adversarial Attacks on Driving Safety in Vision-Based Autonomous Vehicles

Module-wise Adaptive Adversarial Training for End-to-end Autonomous Driving

Dynamic Adversarial Attacks on Autonomous Driving Systems

Adversarial Attacks on Multi-task Visual Perception for Autonomous Driving

Are Self-Driving Cars Secure? Evasion Attacks against Deep Neural Networks for Steering Angle Prediction

An Analysis of Adversarial Attacks and Defenses on Autonomous Driving Models

Driving into Danger: Adversarial Patch Attack on End-to-End Autonomous Driving Systems Using Deep Learning

Stealthy and Effective Physical Adversarial Attacks in Autonomous Driving

A Review of Adversarial Attacks in Computer Vision

Adversarial Objects Against LiDAR-Based Autonomous Driving Systems

RobustE2E: Exploring the Robustness of End-to-End Autonomous Driving

Feasibility and Suppression of Adversarial Patch Attacks on End-to-End Vehicle Control

Practical black-box adversarial attack on open-set recognition: Towards robust autonomous driving

Learning Image Attacks toward Vision Guided Autonomous Vehicles

Towards Autonomous Driving Model Resistant to Adversarial Attack