Saved in:
Bibliographic Details
Main Authors: Zhang, Ziyu, Laconte, Johann, Lisus, Daniil, Barfoot, Timothy D.
Format: Preprint
Published: 2024
Subjects:
Online Access:https://arxiv.org/abs/2403.05666
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866909777087430656
author Zhang, Ziyu
Laconte, Johann
Lisus, Daniil
Barfoot, Timothy D.
author_facet Zhang, Ziyu
Laconte, Johann
Lisus, Daniil
Barfoot, Timothy D.
contents This paper presents a novel method for assessing the resilience of the ICP algorithm via learning-based, worst-case attacks on lidar point clouds. For safety-critical applications such as autonomous navigation, ensuring the resilience of algorithms before deployments is crucial. The ICP algorithm is the standard for lidar-based localization, but its accuracy can be greatly affected by corrupted measurements from various sources, including occlusions, adverse weather, or mechanical sensor issues. Unfortunately, the complex and iterative nature of ICP makes assessing its resilience to corruption challenging. While there have been efforts to create challenging datasets and develop simulations to evaluate the resilience of ICP, our method focuses on finding the maximum possible ICP error that can arise from corrupted measurements at a location. We demonstrate that our perturbation-based adversarial attacks can be used pre-deployment to identify locations on a map where ICP is particularly vulnerable to corruptions in the measurements. With such information, autonomous robots can take safer paths when deployed, to mitigate against their measurements being corrupted. The proposed attack outperforms baselines more than 88% of the time across a wide range of scenarios.
format Preprint
id arxiv_https___arxiv_org_abs_2403_05666
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Prepared for the Worst: A Learning-Based Adversarial Attack for Resilience Analysis of the ICP Algorithm
Zhang, Ziyu
Laconte, Johann
Lisus, Daniil
Barfoot, Timothy D.
Robotics
Machine Learning
This paper presents a novel method for assessing the resilience of the ICP algorithm via learning-based, worst-case attacks on lidar point clouds. For safety-critical applications such as autonomous navigation, ensuring the resilience of algorithms before deployments is crucial. The ICP algorithm is the standard for lidar-based localization, but its accuracy can be greatly affected by corrupted measurements from various sources, including occlusions, adverse weather, or mechanical sensor issues. Unfortunately, the complex and iterative nature of ICP makes assessing its resilience to corruption challenging. While there have been efforts to create challenging datasets and develop simulations to evaluate the resilience of ICP, our method focuses on finding the maximum possible ICP error that can arise from corrupted measurements at a location. We demonstrate that our perturbation-based adversarial attacks can be used pre-deployment to identify locations on a map where ICP is particularly vulnerable to corruptions in the measurements. With such information, autonomous robots can take safer paths when deployed, to mitigate against their measurements being corrupted. The proposed attack outperforms baselines more than 88% of the time across a wide range of scenarios.
title Prepared for the Worst: A Learning-Based Adversarial Attack for Resilience Analysis of the ICP Algorithm
topic Robotics
Machine Learning
url https://arxiv.org/abs/2403.05666