arXiv:2608.17092cs.CRcs.AI2026-08

用小模型实时检测车载定位欺骗,效果接近大模型但更省资源。

Structured Driving-State Narratives for Small Language Model-Based GNSS Spoofing Detection

  • 将导航与传感器数据转化为结构化语义描述,交由小模型判断是否受骗
  • 在五类攻击上平均准确率96.99%,性能接近大模型
  • 适合部署在计算资源有限的车载系统中

自动驾驶车辆依赖可靠的全球导航卫星系统(GNSS)定位。然而,伪造的GNSS信号可能引发看似合理却错误的车辆状态。本研究提出一种基于小型语言模型(SLM)的框架,通过对比来自GNSS和其他传感源独立推导出的车辆状态,实现对GNSS欺骗攻击的检测与分类。该框架将两类来源的驾驶状态转换为结构化语义叙事,输入SLM进行判断。性能与在相同数据上微调的大语言模型(LLMs)对比,在同一测试集上评估。共考虑五类:无攻击、超调攻击、停驶攻击、逐段转向攻击和错转攻击。框架还使用美国南卡罗来纳州克莱姆森市的地理未见实地数据进行验证。实验结果表明,所评估的SLMs达到与LLMs相当的性能,平均准确率96.99%、精确率99.05%、召回率95.59%、F1分数97.18%。在计算效率和资源占用方面,SLMs显著优于LLMs,推理延迟更低,微调与推理阶段所需GPU内存更少。在地理差异区域的实地数据验证中也表现出有效性。该框架可实现实时检测与分类,且计算与内存开销较低,适用于资源受限的车载计算平台部署。

原文摘要 · Abstract (English)

Autonomous vehicles (AVs) depend on reliable Global Navigation Satellite System (GNSS) positioning. However, spoofed GNSS signals can induce plausible but incorrect vehicle states. This study develops a small language model (SLM)-based framework for detecting and classifying GNSS spoofing attacks by comparing vehicle behaviors independently derived from GNSS and other sensing sources. The framework converts independent driving states from GNSS and other sensing sources into structured semantic narratives that are provided to an SLM for spoofing detection and attack classification. The performance of the SLM-based framework is compared with large language models (LLMs) fine-tuned on identical training data and evaluated on the same test set. The evaluation considers five classes: no attack, overshoot attack, stopped attack, turn-by-turn attack, and wrong-turn attack. The framework is also evaluated with geographically unseen field data collected in Clemson, South Carolina, United States. Experimental results indicate that the evaluated SLMs achieve performance similar to the LLMs, achieving an average accuracy of 96.99%, precision of 99.05%, recall of 95.59%, and F1-score of 97.18%. In terms of computational efficiency and resource utilization, the SLMs demonstrate advantages over the LLMs by requiring lower inference latency and less GPU memory during both fine-tuning and inference. Evaluation using field data collected in a geographically distinct location further demonstrated its efficacy. The presented framework can detect and classify GNSS spoofing attacks in real-time while requiring relatively low computational and memory resources, and is therefore suitable for deployment on resource-constrained vehicular computing platforms.

自动驾驶定位安全小模型欺骗检测

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。