Guardauto:一种用于自动驾驶的分散式安全保护系统
Guardauto: A Decentralized Runtime Protection System for Autonomous Driving
摘要:
由于广泛的攻击面和缺乏运行时保护,潜在的安全和安全威胁阻碍了自动驾驶汽车的实际应用。尽管已经做出了努力来减轻一些特定的攻击,但在保护自动驾驶系统方面的工作很少。本文提出了一个分散的自我保护框架称为Guardauto,以保护自动驾驶系统免受运行时的威胁。首先,Guardauto提出了一个隔离模型,用于对自动驾驶系统进行解耦,并使用一组分区隔离其组件。其次,Guardauto为每个目标组件提供了自保护机制,它结合不同的方法来监视目标执行并相应地规划适应动作。第三,Guardauto提供了当地自我保护机制之间的合作,以确定在级联故障影响多个组件的情况下的根本原因组件。原型已经在开源自动驾驶系统Autoware上实现和评估。实验结果表明,Guardauto能够有效地缓解运行时故障和攻击,在保证系统性能的前提下保护系统。
英文摘要:
Due to the broad attack surface and the lack of runtime protection, potential safety and security threats hinder the real-life adoption of autonomous vehicles. Although efforts have been made to mitigate some specific attacks, there are few works on the protection of the self-driving system. This paper presents a decentralized self-protection framework called Guardauto to protect the self-driving system against runtime threats. First, Guardauto proposes an isolation model to decouple the self-driving system and isolate its components with a set of partitions. Second, Guardauto provides self-protection mechanisms for each target component, which combines different methods to monitor the target execution and plan adaption actions accordingly. Third, Guardauto provides cooperation among local self-protection mechanisms to identify the root-cause component in the case of cascading failures affecting multiple components. A prototype has been implemented and evaluated on the open-source autonomous driving system Autoware. Results show that Guardauto could effectively mitigate runtime failures and attacks, and protect the control system with acceptable performance overhead.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。