Object removal attacks on LiDAR-based 3D object detectors
File(s)autosec2021_23016_paper.pdf (1.01 MB)
Published version
Author(s)
Hau, Zhongyuan
Co, Kenneth Tan
Demetriou, Soteris
Lupu, Emil
Type
Conference Paper
Abstract
LiDARs play a critical role in Autonomous Vehicles' (AVs) perception and their safe operations. Recent works have demonstrated that it is possible to spoof LiDAR return signals to elicit fake objects. In this work we demonstrate how the same physical capabilities can be used to mount a new, even more dangerous class of attacks, namely Object Removal Attacks (ORAs). ORAs aim to force 3D object detectors to fail. We leverage the default setting of LiDARs that record a single return signal per direction to perturb point clouds in the region of interest (RoI) of 3D objects. By injecting illegitimate points behind the target object, we effectively shift points away from the target objects' RoIs. Our initial results using a simple random point selection strategy show that the attack is effective in degrading the performance of commonly used 3D object detection models.
Date Issued
2021-02-25
Date Acceptance
2021-02-02
Citation
Automotive and Autonomous Vehicle Security (AutoSec) Workshop 2021, 2021
ISBN
1-891562-68-1
Publisher
Internet Society
Journal / Book Title
Automotive and Autonomous Vehicle Security (AutoSec) Workshop 2021
Identifier
https://www.ndss-symposium.org/ndss-paper/auto-draft-112/
Source
NDSS 2021 Workshop
Publication Status
Published
Start Date
2021-02-25
Finish Date
2021-02-25
Coverage Spatial
Online