Saved in:
Bibliographic Details
Main Authors: Gao, Linyun, Wen, Qiang, Machida, Fumio
Format: Preprint
Published: 2025
Subjects:
Online Access:https://arxiv.org/abs/2507.06907
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866915379578667008
author Gao, Linyun
Wen, Qiang
Machida, Fumio
author_facet Gao, Linyun
Wen, Qiang
Machida, Fumio
contents Autonomous driving is rapidly advancing as a key application of machine learning, yet ensuring the safety of these systems remains a critical challenge. Traffic sign recognition, an essential component of autonomous vehicles, is particularly vulnerable to adversarial attacks that can compromise driving safety. In this paper, we propose an N-version machine learning (NVML) framework that integrates a safety-aware weighted soft voting mechanism. Our approach utilizes Failure Mode and Effects Analysis (FMEA) to assess potential safety risks and assign dynamic, safety-aware weights to the ensemble outputs. We evaluate the robustness of three-version NVML systems employing various voting mechanisms against adversarial samples generated using the Fast Gradient Sign Method (FGSM) and Projected Gradient Descent (PGD) attacks. Experimental results demonstrate that our NVML approach significantly enhances the robustness and safety of traffic sign recognition systems under adversarial conditions.
format Preprint
id arxiv_https___arxiv_org_abs_2507_06907
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Robust and Safe Traffic Sign Recognition using N-version with Weighted Voting
Gao, Linyun
Wen, Qiang
Machida, Fumio
Machine Learning
Software Engineering
Autonomous driving is rapidly advancing as a key application of machine learning, yet ensuring the safety of these systems remains a critical challenge. Traffic sign recognition, an essential component of autonomous vehicles, is particularly vulnerable to adversarial attacks that can compromise driving safety. In this paper, we propose an N-version machine learning (NVML) framework that integrates a safety-aware weighted soft voting mechanism. Our approach utilizes Failure Mode and Effects Analysis (FMEA) to assess potential safety risks and assign dynamic, safety-aware weights to the ensemble outputs. We evaluate the robustness of three-version NVML systems employing various voting mechanisms against adversarial samples generated using the Fast Gradient Sign Method (FGSM) and Projected Gradient Descent (PGD) attacks. Experimental results demonstrate that our NVML approach significantly enhances the robustness and safety of traffic sign recognition systems under adversarial conditions.
title Robust and Safe Traffic Sign Recognition using N-version with Weighted Voting
topic Machine Learning
Software Engineering
url https://arxiv.org/abs/2507.06907