Attack End-to-End Autonomous Driving through Module-Wise Noise

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Wang, Lu, Zhang, Tianyuan, Han, Yikai, Fang, Muyang, Jin, Ting, Kang, Jiaqi
Formato: Preprint
Publicado: 2024
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866929498404945920
author Wang, Lu
Zhang, Tianyuan
Han, Yikai
Fang, Muyang
Jin, Ting
Kang, Jiaqi
author_facet Wang, Lu
Zhang, Tianyuan
Han, Yikai
Fang, Muyang
Jin, Ting
Kang, Jiaqi
contents With recent breakthroughs in deep neural networks, numerous tasks within autonomous driving have exhibited remarkable performance. However, deep learning models are susceptible to adversarial attacks, presenting significant security risks to autonomous driving systems. Presently, end-to-end architectures have emerged as the predominant solution for autonomous driving, owing to their collaborative nature across different tasks. Yet, the implications of adversarial attacks on such models remain relatively unexplored. In this paper, we conduct comprehensive adversarial security research on the modular end-to-end autonomous driving model for the first time. We thoroughly consider the potential vulnerabilities in the model inference process and design a universal attack scheme through module-wise noise injection. We conduct large-scale experiments on the full-stack autonomous driving model and demonstrate that our attack method outperforms previous attack methods. We trust that our research will offer fresh insights into ensuring the safety and reliability of autonomous driving systems.
format Preprint
id arxiv_https___arxiv_org_abs_2409_07706
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Attack End-to-End Autonomous Driving through Module-Wise Noise
Wang, Lu
Zhang, Tianyuan
Han, Yikai
Fang, Muyang
Jin, Ting
Kang, Jiaqi
Machine Learning
Artificial Intelligence
With recent breakthroughs in deep neural networks, numerous tasks within autonomous driving have exhibited remarkable performance. However, deep learning models are susceptible to adversarial attacks, presenting significant security risks to autonomous driving systems. Presently, end-to-end architectures have emerged as the predominant solution for autonomous driving, owing to their collaborative nature across different tasks. Yet, the implications of adversarial attacks on such models remain relatively unexplored. In this paper, we conduct comprehensive adversarial security research on the modular end-to-end autonomous driving model for the first time. We thoroughly consider the potential vulnerabilities in the model inference process and design a universal attack scheme through module-wise noise injection. We conduct large-scale experiments on the full-stack autonomous driving model and demonstrate that our attack method outperforms previous attack methods. We trust that our research will offer fresh insights into ensuring the safety and reliability of autonomous driving systems.
title Attack End-to-End Autonomous Driving through Module-Wise Noise
topic Machine Learning
Artificial Intelligence
url https://arxiv.org/abs/2409.07706