Adversarial 3D virtual patches using integrated gradients
File(s)safethings24-final20 (2).pdf (980.74 KB)
Accepted version
Author(s)
You, Chengzeng
Hau, Zhongyuan
Xu, Binbin
Demetriou, Soteris
Type
Conference Paper
Abstract
LiDAR sensors are widely used in autonomous vehicles to better perceive the environment. However, prior works have shown that LiDAR signals can be spoofed to hide real objects from 3D object detectors. This study explores the feasibility of reducing the required spoofing area through a novel object-hiding strategy based on virtual patches (VPs). We first manually design VPs (MVPs) and show that VP-focused attacks can achieve similar success rates with prior work but with a fraction of the required spoofing area. Then we design a framework Saliency-LiDAR (SALL), which can identify critical regions for LiDAR objects using Integrated Gradients. VPs crafted on critical regions (CVPs) reduce object detection recall by at least 15% compared to our baseline with an approximate 50% reduction in the spoofing area for vehicles of average size.
Date Issued
2024-05-23
Date Acceptance
2024-05-23
Citation
2024 IEEE Security and Privacy Workshops (SPW), 2024, pp.289-295
ISBN
979-8-3503-5487-4
ISSN
2770-8411
Publisher
IEEE
Start Page
289
End Page
295
Journal / Book Title
2024 IEEE Security and Privacy Workshops (SPW)
Copyright Statement
© 2024, Chengzeng You. Under license to IEEE. This is the author’s accepted manuscript made available under a CC-BY licence in accordance with Imperial’s Research Publications Open Access policy (www.imperial.ac.uk/oa-policy)
License URL
Source
IEEE Symposium on Security and Privacy Workshops (SPW)
Publication Status
Published
Start Date
2024-05-23
Finish Date
2024-05-23
Coverage Spatial
San Francisco, CA, USA
Date Publish Online
2024-07-04