Search papers, labs, and topics across Lattice.
The paper introduces ADV-0, a closed-loop min-max adversarial training framework for improving the robustness of autonomous driving systems against long-tail scenarios. It formulates the interaction between the driving policy and an adversarial agent as a zero-sum Markov game, aligning the attacker's utility with the defender's objective to discover optimal adversarial distributions. The dynamic adversary evolution is cast as iterative preference learning, approximating the Nash Equilibrium and maximizing a certified lower bound on real-world performance.
By framing adversarial training as a zero-sum Markov game, ADV-0 finds more diverse safety-critical failures in autonomous driving systems, leading to significantly improved generalization against unseen long-tail risks.
Deploying autonomous driving systems requires robustness against long-tail scenarios that are rare but safety-critical. While adversarial training offers a promising solution, existing methods typically decouple scenario generation from policy optimization and rely on heuristic surrogates. This leads to objective misalignment and fails to capture the shifting failure modes of evolving policies. This paper presents ADV-0, a closed-loop min-max optimization framework that treats the interaction between driving policy (defender) and adversarial agent (attacker) as a zero-sum Markov game. By aligning the attacker's utility directly with the defender's objective, we reveal the optimal adversary distribution. To make this tractable, we cast dynamic adversary evolution as iterative preference learning, efficiently approximating this optimum and offering an algorithm-agnostic solution to the game. Theoretically, ADV-0 converges to a Nash Equilibrium and maximizes a certified lower bound on real-world performance. Experiments indicate that it effectively exposes diverse safety-critical failures and greatly enhances the generalizability of both learned policies and motion planners against unseen long-tail risks.