构建可交互的自动驾驶对抗测试平台,实现虚实结合的动态评估。
MetAdv: A Unified and Interactive Adversarial Testing Platform for Autonomous Driving
- 虚实融合闭环测试架构,支持从生成到实车执行的全流程评估。
- 支持多种算法范式与主流自动驾驶平台,可灵活配置3D车辆模型。
- 引入人机协同机制,实时捕捉驾驶员生理与行为反馈,研究信任问题。
评估和确保自动驾驶系统在对抗攻击下的鲁棒性是一个关键且尚未解决的挑战。本文提出MetAdv,一个新型对抗测试平台,通过将虚拟仿真与物理车辆反馈紧密集成,实现真实、动态且可交互的评估。MetAdv建立了一个混合虚拟-物理沙盒,在其中设计了三层闭环测试环境,支持对抗样本的动态演化。该架构实现了端到端的对抗评估,涵盖高层统一对抗生成、中层基于仿真的交互以及底层在真实车辆上的执行。此外,MetAdv支持广泛的自动驾驶任务与算法范式(如模块化深度学习流水线、端到端学习、视觉-语言模型),支持灵活的3D车辆建模,并能无缝切换仿真与物理环境,内置对Apollo、Tesla等商用平台的兼容性。其核心特性之一是人机协同能力:除支持自定义环境配置外,还能实时采集驾驶员的生理信号与行为反馈,为对抗情境下的人机信任提供新视角。我们认为MetAdv可为对抗评估提供可扩展、统一的框架,推动自动驾驶更安全发展。
原文摘要 · Abstract (English)
Evaluating and ensuring the adversarial robustness of autonomous driving (AD) systems is a critical and unresolved challenge. This paper introduces MetAdv, a novel adversarial testing platform that enables realistic, dynamic, and interactive evaluation by tightly integrating virtual simulation with physical vehicle feedback. At its core, MetAdv establishes a hybrid virtual-physical sandbox, within which we design a three-layer closed-loop testing environment with dynamic adversarial test evolution. This architecture facilitates end-to-end adversarial evaluation, ranging from high-level unified adversarial generation, through mid-level simulation-based interaction, to low-level execution on physical vehicles. Additionally, MetAdv supports a broad spectrum of AD tasks, algorithmic paradigms (e.g., modular deep learning pipelines, end-to-end learning, vision-language models). It supports flexible 3D vehicle modeling and seamless transitions between simulated and physical environments, with built-in compatibility for commercial platforms such as Apollo and Tesla. A key feature of MetAdv is its human-in-the-loop capability: besides flexible environmental configuration for more customized evaluation, it enables real-time capture of physiological signals and behavioral feedback from drivers, offering new insights into human-machine trust under adversarial conditions. We believe MetAdv can offer a scalable and unified framework for adversarial assessment, paving the way for safer AD.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。