Malicious Attacks Against Autonomous Vehicles

In their paper “Malicious Attacks against Multi-Sensor Fusion in Autonomous Driving”, the authors present the first study on the vulnerability of multi-sensor fusion systems using LiDAR, camera, and radar. “Specifically, we propose a novel attack method that can simultaneously attack all three types of sensing modalities using a single type of adversarial object. The adversarial object can be easily fabricated at low cost, and the proposed attack can be easily performed with high stealthiness and flexibility in practice. Extensive experiments based on a real-world AV testbed show that the proposed attack can continuously hide a target vehicle from the perception system of a victim AV using only two small adversarial objects.” (Abstract) In an article for ICTkommunikation on 6 March 2024, Oliver Bendel presented ten ways in which sensors can be attacked from the outside. On his behalf, M. Hashem Birahjakli investigated further possible attacks on self-driving cars as part of his final thesis in 2020. ‘The results of the work suggest that every 14-year-old girl could disable a self-driving car.’ Boys too, of course, if they have comparable equipment with them (Image: Ideogram).

Towards Human-friendly Robot Cars

According to a news story by University of Leeds, robot cars and other automated vehicles could be made more pedestrian-friendly thanks to new research which could help predict when people will cross the road. Leeds scientists say “that neuroscientific theories of how the brain makes decisions can be used in automated vehicle technology to improve safety and make them more human-friendly” (University of Leeds, 5 October 2021). “The researchers set out to determine whether a decision-making model called drift diffusion could predict when pedestrians would cross a road in front of approaching cars, and whether it could be used in scenarios where the car gives way to the pedestrian, either with or without explicit signals. This prediction capability will allow the autonomous vehicle to communicate more effectively with pedestrians, in terms of its movements in traffic and any external signals such as flashing lights, to maximise traffic flow and decrease uncertainty.” (University of Leeds, 5 October 2021) In fact, communication between automated vehicles and pedestrians or cyclists is the crucial problem to be solved in cities. Predictive models can be used, as well as communication options such as eye contact and natural language. For this to happen, however, the autonomous car would have to become a social robot.

Young Girls could Kill Autonomous Driving

On behalf of Prof. Dr. Oliver Bendel, M. Hashem Birahjakli investigated possible attacks on self-driving cars as part of his final thesis in 2020. The supervisor was Safak Korkut. In the chapter “Attacking Scenarios on Sensors” the student divided into invasive attacks and non-invasive attacks. In the section on invasive attacks he dealt with different sensors and examined possible attacks based on scenarios: vision-based cameras (chewing gum, lipstick, and nail polish; spraying paint; transparent colored foil; concave lenses), radar (chaff, countermeasure), lidar (mirror and reflective objects; dust; face powder), inertial measuring unit (magnet), and sonar (carrot and stick; duct tape). In the section on non-invasive attacks he dealt with fake traffic signs, invisible or fake obstacles, and roadside attacks. The results of the work suggest that every 14-year-old girl could disable a self-driving car. So far, hacking has been seen as the greatest threat to autonomous driving. But while not everyone can hack, almost everyone carries chewing gum or lipstick. The automotive industry should consider this threat seriously.

The Future of Autonomous Driving

Driving in cities is a very complex matter. There are several reasons for this: You have to judge hundreds of objects and events at all times. You have to communicate with people. And you should be able to change decisions spontaneously, for example because you remember that you have to buy something. That’s a bad prospect for an autonomous car. Of course it can do some tricks: It can drive very slowly. It can use virtual tracks or special lanes and signals and sounds. A bus or shuttle is able to use such tricks. But hardly a car. Autonomous individual transport in cities will only be possible if the cities are redesigned. This has been done a few decades ago. And it wasn’t a good idea at all. So don’t let autonomous cars drive in the cities, but let them drive on the highways. Should autonomous cars make moral decisions about the lives and deaths of pedestrians and cyclists? They should better not. Moral machines are a valuable innovation in certain contexts. But not in the traffic of cities. Pedestrians and cyclists rarely get onto the highway. There are many reasons why we should allow autonomous cars only there.

Talk to the Shuttle

Olli 2.0 is born. Local Motors and IBM had presented an autonomous shuttle in 2016 that reminded of the Smart Shuttle operated by PostAuto AG in Sion, Valais. Unlike this one, however, Olli 1.0 could not only think but also speak, both at a high level and with the help of IBM Watson. Passengers’ wishes are accepted, for example with regard to destinations, and these are even suggested; when it is hot, the car drives to the nearest ice cream parlour. Olli could also reassure passengers or passers-by: “For citizens of Maryland, many of whom have never seen a self-driving car, Watson’s reassuring communications could be critical to making them more comfortable with the idea that there’s no human being at the wheel.” (Information IBM) Olli 2.0, launched in 2019, can not only access IBM Watson, but also Amazon’s deep learning chatbot service Lex. Something else is different from the predecessor: Olli is now 80% 3D-printed. This was reported by Techcrunch on August 31, 2019. The magazine contains more interesting information about the shuttle. By the way, it is intended for small areas, especially for trade fairs and university campuses. But like the Smart Shuttle, it has already been tested in small cities.