提出全生命周期自动驾驶安全分析框架,发现传统方法忽略的多阶段隐患。
UniSTPA: A Safety Analysis Framework for End-to-End Autonomous Driving
- 将STPA方法扩展至数据、训练、部署全流程,实现系统级风险覆盖。
- 识别出场景设计缺陷、传感器融合偏差、模型内部缺陷等多阶段隐患。
- 适合自动驾驶研发团队用于系统性安全评估与持续优化。
随着自动驾驶技术进步,端到端模型因卓越泛化能力备受关注。然而,这类学习系统在开发与实际部署中存在诸多安全风险,现有安全分析方法难以全面识别。为此,我们提出统一系统理论过程分析(UniSTPA)框架,将STPA的应用范围从运行阶段延伸至端到端自动驾驶系统的整个生命周期,涵盖信息采集、数据准备、闭环训练、验证与部署。UniSTPA不仅在组件层面,还在模型内部层面对潜在危害进行分析,实现模块间与模块内交互的细粒度评估。以高速导航辅助功能为例,通过多层级因果分析,揭示了传统方法忽视的多阶段风险,如场景设计缺陷、传感器融合偏差及模型内部缺陷,并追溯至数据质量、网络结构与优化目标等深层原因。分析结果用于构建安全监控与响应机制,支持从风险识别到系统优化的持续改进。该框架为端到端自动驾驶系统的安全研发与部署提供了理论与实践指导。
原文摘要 · Abstract (English)
As autonomous driving technology continues to advance, end-to-end models have attracted considerable attention owing to their superior generalisation capability. Nevertheless, such learning-based systems entail numerous safety risks throughout development and on-road deployment, and existing safety-analysis methods struggle to identify these risks comprehensively. To address this gap, we propose the Unified System Theoretic Process Analysis (UniSTPA) framework, which extends the scope of STPA from the operational phase to the entire lifecycle of an end-to-end autonomous driving system, including information gathering, data preparation, closed loop training, verification, and deployment. UniSTPA performs hazard analysis not only at the component level but also within the model's internal layers, thereby enabling fine-grained assessment of inter and intra module interactions. Using a highway Navigate on Autopilot function as a case study, UniSTPA uncovers multi-stage hazards overlooked by conventional approaches including scene design defects, sensor fusion biases, and internal model flaws, through multi-level causal analysis, traces these hazards to deeper issues such as data quality, network architecture, and optimisation objectives. The analysis result are used to construct a safety monitoring and safety response mechanism that supports continuous improvement from hazard identification to system optimisation. The proposed framework thus offers both theoretical and practical guidance for the safe development and deployment of end-to-end autonomous driving systems.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。