ADoPT: LiDAR Spoofing Attack Detection Based on Point-Level Temporal Consistency


Minkyoung Cho (University of Michigan),* Yulong Cao (Nvidia), Zixiang Zhou (University of Michigan), Zhuoqing Morley Mao (University of Michigan)
The 34th British Machine Vision Conference

Abstract

Deep neural networks (DNNs) are increasingly integrated into LiDAR (Light Detection and Ranging)-based perception systems for autonomous vehicles (AVs), requiring robust performance under adversarial conditions. One pressing concern is the challenge posed by LiDAR spoofing attacks, where attackers inject fake objects into LiDAR data, leading AVs to misinterpret their surroundings and make faulty decisions. Many current defense algorithms predominantly depend on perception outputs, such as bounding boxes. However, these outputs are intrinsically limited as they are generated by imperfect perception models that process a restricted set of points, acquired from the ego vehicle's specific viewpoint. The reliance on bounding boxes is a manifestation of this fundamental constraint. To overcome these limitations, we propose a novel framework, named ADoPT(Anomaly Detection Based on Point-Level Temporal Consistency), which quantitatively measures temporal consistency across consecutive frames and identifies abnormal objects based on the coherency of point clusters. In our evaluation using the nuScenes dataset, our algorithm effectively counters various LiDAR spoofing attacks, achieving a low (< 10%) false positive ratio and high (> 85%) true positive ratio, outperforming existing state-of-the-art defense methods, CARLO and 3D-TC2. Moreover, ADoPT shows promising potential for accurate defense in diverse road environments.

Video



Citation

@inproceedings{Cho_2023_BMVC,
author    = {Minkyoung Cho and Yulong Cao and Zixiang Zhou and Zhuoqing Morley Mao},
title     = {ADoPT: LiDAR Spoofing Attack Detection Based on Point-Level Temporal Consistency},
booktitle = {34th British Machine Vision Conference 2023, {BMVC} 2023, Aberdeen, UK, November 20-24, 2023},
publisher = {BMVA},
year      = {2023},
url       = {https://papers.bmvc2023.org/0486.pdf}
}


Copyright © 2023 The British Machine Vision Association and Society for Pattern Recognition
The British Machine Vision Conference is organised by The British Machine Vision Association and Society for Pattern Recognition. The Association is a Company limited by guarantee, No.2543446, and a non-profit-making body, registered in England and Wales as Charity No.1002307 (Registered Office: Dept. of Computer Science, Durham University, South Road, Durham, DH1 3LE, UK).

Imprint | Data Protection