Adversarial Sensor Attack On Lidar-based Perception In Autonomous Driving.

In this work, we perform the first security study of LiDAR-based perception in Autonomous Vehicle settings. We consider LiDAR spoofing attacks as the threat model and set the attack goal as spoofing obstacles close to the front of a victim AV. We find that blindly applying LiDAR spoofing is insufficient to achieve this goal due to the machine learning-based object detection process. Thus, we then explore the possibility of strategically controlling the spoofed attack to fool the machine learning model. Utilizing that, we construct and evaluate two attack scenarios that may damage road safety and mobility.