Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper introduces Pseudo-Random Bayesian Inference (PRBI), a novel defense mechanism against adversarial attacks in collaborative perception (CP) systems operating in fully untrusted environments. PRBI leverages temporal perceptual discrepancies, using the preceding frame's perception as a dynamic reference, and employs a pseudo-random grouping strategy combined with Bayesian inference to identify malicious vehicles. Experiments demonstrate that PRBI requires only 2.5 verifications per frame on average and restores detection precision to between 79.4% and 86.9% of pre-attack levels, showcasing its efficiency and effectiveness.
Forget complex classifiers – this defense against adversarial attacks in collaborative perception uses temporal discrepancies and Bayesian inference to pinpoint malicious vehicles with minimal overhead.
Collaborative perception (CP) enables multiple vehicles to augment their individual perception capacities through the exchange of feature-level sensory data. However, this fusion mechanism is inherently vulnerable to adversarial attacks, especially in fully untrusted-vehicle environments. Existing defense approaches often assume a trusted ego vehicle as a reference or incorporate additional binary classifiers. These assumptions limit their practicality in real-world deployments due to the questionable trustworthiness of ego vehicles, the requirement for real-time detection, and the need for generalizability across diverse scenarios. To address these challenges, we propose a novel Pseudo-Random Bayesian Inference (PRBI) framework, a first efficient defense method tailored for fully untrusted-vehicle CP. PRBI detects adversarial behavior by leveraging temporal perceptual discrepancies, using the reliable perception from the preceding frame as a dynamic reference. Additionally, it employs a pseudo-random grouping strategy that requires only two verifications per frame, while applying Bayesian inference to estimate both the number and identities of malicious vehicles. Theoretical analysis has proven the convergence and stability of the proposed PRBI framework. Extensive experiments show that PRBI requires only 2.5 verifications per frame on average, outperforming existing methods significantly, and restores detection precision to between 79.4% and 86.9% of pre-attack levels.