arXiv:2604.04349cs.ROcs.LG2026-04

研究云协同自动驾驶的抗攻击能力,发现感知与网络双重漏洞会严重威胁行车安全。

Adversarial Robustness Analysis of Cloud-Assisted Autonomous Driving Systems

  • 构建真实道路环境测试平台,模拟云端感知与网络通信的联合攻击。
  • 对抗攻击使检测精度从0.73降至0.22,网络延迟超150毫秒引发控制失准。
  • 适合关注自动驾驶安全、系统韧性及跨层防御的研究者阅读。

自动驾驶车辆日益依赖基于深度学习的感知与控制,带来巨大计算负担。云协同架构将这些任务卸载至远程服务器,通过车联网(IoV)实现增强感知与协同决策。然而,该范式引入了跨层漏洞:感知模型遭受对抗攻击,同时车-云链路出现网络劣化,可能共同破坏安全关键的自主性。本文构建硬件在环的IoV测试平台,集成实时感知、控制与通信,评估云协同自动驾驶中的此类漏洞。部署于云端的YOLOv8目标检测器受到白盒对抗攻击,采用快速梯度符号法(FGSM)与投影梯度下降(PGD),网络攻击则引入延迟与丢包。结果显示,对抗扰动显著降低感知性能:在ε=0.04时,检测精度与召回率从干净基线的0.73和0.68分别降至0.22和0.15。网络延迟150–250毫秒(对应约3–4帧瞬时丢失)及丢包率0.5%–5%,进一步扰乱闭环控制,导致执行延迟与规则违规。研究揭示云协同自动驾驶系统亟需跨层鲁棒性设计。

原文摘要 · Abstract (English)

Autonomous vehicles increasingly rely on deep learning-based perception and control, which impose substantial computational demands. Cloud-assisted architectures offload these functions to remote servers, enabling enhanced perception and coordinated decision-making through the Internet of Vehicles (IoV). However, this paradigm introduces cross-layer vulnerabilities, where adversarial manipulation of perception models and network impairments in the vehicle-cloud link can jointly undermine safety-critical autonomy. This paper presents a hardware-in-the-loop IoV testbed that integrates real-time perception, control, and communication to evaluate such vulnerabilities in cloud-assisted autonomous driving. A YOLOv8-based object detector deployed on the cloud is subjected to whitebox adversarial attacks using the Fast Gradient Sign Method (FGSM) and Projected Gradient Descent (PGD), while network adversaries induce delay and packet loss in the vehicle-cloud loop. Results show that adversarial perturbations significantly degrade perception performance, with PGD reducing detection precision and recall from 0.73 and 0.68 in the clean baseline to 0.22 and 0.15 at epsilon= 0.04. Network delays of 150-250 ms, corresponding to transient losses of approximately 3-4 frames, and packet loss rates of 0.5-5 % further destabilize closed-loop control, leading to delayed actuation and rule violations. These findings highlight the need for cross-layer resilience in cloud-assisted autonomous driving systems.

自动驾驶对抗攻击云协同安全评估

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。