Attention:The NSF Public Access Repository (PAR) system and access will be unavailable from 11:00 PM ET on Thursday, October 15th until 12:00 AM ET on Friday, October 16th due to maintenance. We apologize for the inconvenience.


This content will become publicly available on May 26, 2027

Title: Optical Lens Attack on Monocular Depth Estimation for Autonomous Driving
Monocular Depth Estimation (MDE) is a pivotal component of vision-based Autonomous Driving (AD) systems, enabling vehicles to estimate the depth of surrounding objects using a single camera image. This estimation guides essential driving decisions, such as braking before an obstacle or changing lanes to avoid collisions. In this paper, we explore vulnerabilities of MDE algorithms in AD systems, presentingLensAttack, a novel physical attack that strategically places optical lenses on the camera of an autonomous vehicle to manipulate the perceived object depths.LensAttackencompasses two attack formats: concave lens attack and convex lens attack, each utilizing different optical lenses to induce false depth perception. We first develop a mathematical model that outlines the parameters of the attack, followed by simulations and real-world evaluations to assess its efficacy on state-of-the-art MDE models. Additionally, we adopt an attack optimization method to further enhance the attack success rate by optimizing the attack focal length. To better evaluate the implications ofLensAttackon AD, we conduct comprehensive end-to-end system simulations using the CARLA platform. The results reveal thatLensAttackcan significantly disrupt the depth estimation processes in AD systems, posing a serious threat to their reliability and safety. Finally, we discuss some potential defense methods to mitigate the effects of the proposed attack.  more » « less
Award ID(s):
2235231
PAR ID:
10690508
Author(s) / Creator(s):
; ; ; ; ; ;
Publisher / Repository:
ACM
Date Published:
Journal Name:
ACM Transactions on Cyber-Physical Systems
ISSN:
2378-962X
Format(s):
Medium: X
Sponsoring Org:
National Science Foundation
More Like this
  1. null (Ed.)
    In Autonomous Driving (AD) systems, perception is both security and safety critical. Despite various prior studies on its security issues, all of them only consider attacks on cameraor LiDAR-based AD perception alone. However, production AD systems today predominantly adopt a Multi-Sensor Fusion (MSF) based design, which in principle can be more robust against these attacks under the assumption that not all fusion sources are (or can be) attacked at the same time. In this paper, we present the first study of security issues of MSF-based perception in AD systems. We directly challenge the basic MSF design assumption above by exploring the possibility of attacking all fusion sources simultaneously. This allows us for the first time to understand how much security guarantee MSF can fundamentally provide as a general defense strategy for AD perception. We formulate the attack as an optimization problem to generate a physically-realizable, adversarial 3D-printed object that misleads an AD system to fail in detecting it and thus crash into it. To systematically generate such a physical-world attack, we propose a novel attack pipeline that addresses two main design challenges: (1) non-differentiable target camera and LiDAR sensing systems, and (2) non-differentiable cell-level aggregated features popularly used in LiDAR-based AD perception. We evaluate our attack on MSF algorithms included in representative open-source industry-grade AD systems in real-world driving scenarios. Our results show that the attack achieves over 90% success rate across different object types and MSF algorithms. Our attack is also found stealthy, robust to victim positions, transferable across MSF algorithms, and physical-world realizable after being 3D-printed and captured by LiDAR and camera devices. To concretely assess the end-to-end safety impact, we further perform simulation evaluation and show that it can cause a 100% vehicle collision rate for an industry-grade AD system. We also evaluate and discuss defense strategies. 
    more » « less
  2. This Letter presents a novel, to the best of our knowledge, method to calibrate multi-focus microscopic structured-light three-dimensional (3D) imaging systems with an electrically adjustable camera focal length. We first leverage the conventional method to calibrate the system with a reference focal lengthf0. Then we calibrate the system with other discrete focal lengthsfiby determining virtual features on a reconstructed white plane usingf0. Finally, we fit the polynomial function model using the discrete calibration results forfi. Experimental results demonstrate that our proposed method can calibrate the system consistently and accurately. 
    more » « less
  3. We presentMiHazeFree3D, a system that leverages millimeter-wave (mmWave) radar signals to predict 3D bounding boxes of vehicles and pedestrians in real-world traffic scenarios. While current 3D object detection methods rely primarily on cameras and LiDARs, their performance degrades significantly in rain, fog, or poor lighting conditions. Our system exploits mmWave radar’s ability to operate reliably in these challenging conditions, offering a complement to existing sensors without increasing computational costs. The key challenge in using mmWave for 3D detection lies in handling motion-induced errors and the specular reflection of mmWave signals. To address these issues, we developed a deep learning architecture with multiple feature fusion layers and trained it on diverse real-world scenarios. We evaluatedMiHazeFree3Dusing data collected from mmWave radars mounted on the dashboard of an ego-vehicle driving through urban environments. Our results show thatMiHazeFree3Ddetects and bounds both vehicles and pedestrians in tested conditions, including fog and low-light scenarios, highlighting the potential of mmWave radar for 3D object detection in autonomous driving systems. 
    more » « less
  4. Robots should personalize how they perform tasks to match the needs of individual human users. Today’s robots achieve this personalization by asking for the human’s feedback in the task space. For example, an autonomous car might show the human two different ways to decelerate at stoplights, and ask the human which of these motions they prefer. This current approach to personalization isindirect: Based on the behaviors the human selects (e.g., decelerating slowly), the robot tries to infer their underlying preference (e.g., defensive driving). By contrast, our article develops a learning and interface-based approach that enables humans todirectlyindicate their desired style. We do this by learning an abstract, low-dimensional, and continuous canonical space from human demonstration data. Each point in the canonical space corresponds to a different style (e.g., defensive or aggressive driving), and users can directly personalize the robot’s behavior by simply clicking on a point. Given the human’s selection, the robot then decodes this canonical style across each task in the dataset—e.g., if the human selects a defensive style, the autonomous car personalizes its behavior to drive defensively when decelerating, passing other cars, or merging onto highways. We refer to our resulting approach as PECAN:Personalizing Robot Behaviors through a LearnedCanonical Space. Our simulations and user studies suggest that humans prefer using PECAN to directly personalize robot behavior (particularly when those users become familiar with PECAN), and that users find the learned canonical space to be intuitive and consistent. See videos here:https://youtu.be/wRJpyr23PKI. 
    more » « less
  5. A conventional optical lens can enhance lateral resolution in optical coherence tomography (OCT) by focusing the input light onto the sample. However, the typical Gaussian beam profile of such a lens will impose a tradeoff between the depth of focus (DOF) and the lateral resolution. The lateral resolution is often compromised to achieve amm-scale DOF. We have experimentally shown that using a cascade system of an ultrasonic virtual tunable optical waveguide (UVTOW) and a short focal-length lens can provide a large DOF without severely compromising the lateral resolution compared to an external lens with the same effective focal length. In addition, leveraging the reconfigurability of UVTOW, we show that the focal length of the cascade system can be tuned without the need for mechanical translation of the optical lens. We compare the performance of the cascade system with a conventional optical lens to demonstrate enhanced DOF without compromising the lateral resolution as well as reconfigurability of UVTOW for OCT imaging. 
    more » « less