자율주행 자동차에 대한 적대적 공격 및 기울기 제거를 통한 방어 대책

Vol. 35, No. 2, pp. 347-358, 4월. 2025
10.13089/JKIISC.2025.35.2.347, Full Text:
Keywords: autonomous vehicles, Imitation Learning, adversarial attacks
Abstract

Recently, artificial intelligence technology has been commercially utilized in various advanced industrial fields, such as autonomous driving, home networks, and smart factories. In particular, significant research has been conducted on ADAS(Advanced Driver Assistance Systems) in autonomous vehicles. However, it has been found to be vulnerable to adversarial attacks. In this paper, we constructed a deep learning model based on imitation learning to predict the steering angle and throttle of autonomous vehicles and applied it to the CARLA simulation to perform adversarial attacks. The performance of the model was evaluated using MSE(Mean Squared Error) and MAE(Mean Absolute Error). Furthermore, this paper proposes the GRM(Gradient Removal Module), an improved version of GSI(Gradient Sign Inversion), as a defense mechanism against adversarial attacks. The experimental results demonstrate that the proposed method, when applied to imitation learning-based deep learning models and evaluated using MSE and MAE, achieves superior performance compared to existing defense techniques, with an MSE of 0.0022 and an MAE of 0.0198.

Statistics
Show / Hide Statistics

Statistics (Cumulative Counts from December 1st, 2017)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.


Cite this article
[IEEE Style]
이승열 and 하재철, "Adversarial Attacks on Autonomous Vehicles and Countermeasure Using Gradient Removal Method," Journal of The Korea Institute of Information Security and Cryptology, vol. 35, no. 2, pp. 347-358, 2025. DOI: 10.13089/JKIISC.2025.35.2.347.

[ACM Style]
이승열 and 하재철. 2025. Adversarial Attacks on Autonomous Vehicles and Countermeasure Using Gradient Removal Method. Journal of The Korea Institute of Information Security and Cryptology, 35, 2, (2025), 347-358. DOI: 10.13089/JKIISC.2025.35.2.347.