Search papers, labs, and topics across Lattice.
This paper systematizes 48 studies on perception-layer attacks against autonomous vehicles, revealing a shift from single-sensor exploits to cross-modal threats targeting multi-sensor fusion (MSF). They develop a taxonomy of 20 attack vectors, organized by sensor type, attack stage, medium, and perception module, to expose vulnerabilities in fusion logic and cross-sensor dependencies. A proof-of-concept simulation combining infrared and lidar spoofing validates a fusion-level vulnerability, highlighting the need for fusion-aware defense design.
AVs' reliance on multi-sensor fusion, intended for robustness, ironically creates new attack surfaces that attackers are already exploiting.
Autonomous vehicles (AVs) increasingly rely on multi-sensor perception pipelines that combine data from cameras, lidar, radar, and other modalities to interpret the environment. This SoK systematizes 48 peer-reviewed studies on perception-layer attacks against AVs, tracking the field's evolution from single-sensor exploits to complex cross-modal threats that compromise multi-sensor fusion (MSF). We develop a unified taxonomy of 20 attack vectors organized by sensor type, attack stage, medium, and perception module, revealing patterns that expose underexplored vulnerabilities in fusion logic and cross-sensor dependencies. Our analysis identifies key research gaps, including limited real-world testing, short-term evaluation bias, and the absence of defenses that account for inter-sensor consistency. To illustrate one such gap, we validate a fusion-level vulnerability through a proof-of-concept simulation combining infrared and lidar spoofing. The findings highlight a fundamental shift in AV security: as systems fuse more sensors for robustness, attackers exploit the very redundancy meant to ensure safety. We conclude with directions for fusion-aware defense design and a research agenda for trustworthy perception in autonomous systems.
