提出统一自适应框架,检测多智能体感知中的恶意节点。
CP-uniGuard: A Unified, Probability-Agnostic, and Adaptive Framework for Malicious Agent Detection and Defense in Multi-Agent Embodied Perception Systems
- 通过无概率共识采样,不依赖恶意比例先验
- 设计一致性损失,识别感知结果偏差的异常协作方
- 动态阈值调节,适应复杂动态环境
协同感知(CP)在多智能体自动驾驶与机器人系统中展现出巨大潜力,通过共享感知信息提升整体感知性能和范围。然而,主智能体需接收合作者的消息,易受恶意智能体攻击。为此,本文提出统一、概率无关且自适应的防御框架 CP-uniGuard,部署于各智能体以精准检测并清除协作网络中的恶意节点。核心思想是使协同感知达成与主智能体一致的结果而非冲突。为此,我们提出无概率样本共识(PASAC)方法,无需恶意智能体先验概率即可有效筛选合作方并验证共识。进一步,针对目标检测与鸟瞰图分割任务,定义协作一致性损失(CCLoss),量化主智能体与合作者间的感知差异,作为共识验证标准。同时,引入基于双滑动窗口的在线自适应阈值机制,动态调整共识判别阈值,保障系统在动态环境下的可靠性。大量实验验证了该框架的有效性,代码已开源。
原文摘要 · Abstract (English)
Collaborative Perception (CP) has been shown to be a promising technique for multi-agent autonomous driving and multi-agent robotic systems, where multiple agents share their perception information to enhance the overall perception performance and expand the perception range. However, in CP, an ego agent needs to receive messages from its collaborators, which makes it vulnerable to attacks from malicious agents. To address this critical issue, we propose a unified, probability-agnostic, and adaptive framework, namely, CP-uniGuard, which is a tailored defense mechanism for CP deployed by each agent to accurately detect and eliminate malicious agents in its collaboration network. Our key idea is to enable CP to reach a consensus rather than a conflict against an ego agent's perception results. Based on this idea, we first develop a probability-agnostic sample consensus (PASAC) method to effectively sample a subset of the collaborators and verify the consensus without prior probabilities of malicious agents. Furthermore, we define collaborative consistency loss (CCLoss) for object detection task and bird's eye view (BEV) segmentation task to capture the discrepancy between an ego agent and its collaborators, which is used as a verification criterion for consensus. In addition, we propose online adaptive threshold via dual sliding windows to dynamically adjust the threshold for consensus verification and ensure the reliability of the systems in dynamic environments. Finally, we conduct extensive experiments and demonstrate the effectiveness of our framework. Code is available at https://github.com/CP-Security/CP-uniGuard.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。