Journal article
Adversarial point cloud perturbations against 3D object detection in autonomous driving systems
Neurocomputing, Vol.466, pp.27-36
2021
Abstract
Deep learning models have been demonstrated vulnerable to adversarial attacks even with imperceptible perturbations. As such, the reliability of existing deep neural networks-based autonomous driving systems can suffer. However, deep 3D models have applications in various Cyber-Physical Systems (CPSs) with safety-critical requirements, particularly autonomous driving systems. In this paper, the robustness of deep 3D object detection models under adversarial point cloud perturbations has been investigated. A novel method is developed to generate 3D adversarial examples from point cloud perturbations, which are common due to the intrinsic characteristics of the data captured by 3D sensors, e.g., LiDAR. The generation of adversarial samples is supervised by a dual loss, which constitutes an adversarial loss and a perturbation loss. The adversarial loss produces a point cloud with the property of aggressiveness, while the perturbation loss enforces the produced point cloud subject to visual imperception. We demonstrate that the method can successfully attack 3D object detection models in most cases, and expose their vulnerability to physical-world attacks in the form of point cloud perturbations. We perform a thorough evaluation of popular deep 3D object detectors in an adversarial setting on the KITTI vision benchmark. Experimental results show that current deep 3D object detection models are susceptible to adversarial attacks in the context of autonomous driving, and their performances are degraded by a large margin in the presence of adversarial point clouds generated by the proposed method.
Details
- Title
- Adversarial point cloud perturbations against 3D object detection in autonomous driving systems
- Authors/Creators
- X. Wang (Author/Creator) - University of Electronic Science and Technology of ChinaM. Cai (Author/Creator) - University of Electronic Science and Technology of ChinaF. Sohel (Author/Creator) - Murdoch UniversityN. Sang (Author/Creator) - University of Electronic Science and Technology of ChinaZ. Chang (Author/Creator) - Shanghai Electric (China)
- Publication Details
- Neurocomputing, Vol.466, pp.27-36
- Publisher
- Elsevier BV
- Identifiers
- 991005543810507891
- Copyright
- © 2021 Elsevier B.V.
- Murdoch Affiliation
- School of Information Technology
- Language
- English
- Resource Type
- Journal article
Metrics
106 Record Views
InCites Highlights
These are selected metrics from InCites Benchmarking & Analytics tool, related to this output
- Collaboration types
- Industry collaboration
- Domestic collaboration
- International collaboration
- Citation topics
- 4 Electrical Engineering, Electronics & Computer Science
- 4.17 Computer Vision & Graphics
- 4.17.2798 Stereo Depth Estimation
- Web Of Science research areas
- Computer Science, Artificial Intelligence
- ESI research areas
- Computer Science