arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2409.14488cs.CRcs.AI
收藏

增强基于LLM的自动驾驶智能体以缓解感知攻击

Enhancing LLM-based Autonomous Driving Agents to Mitigate Perception Attacks

Purdue University(普渡大学);Arizona State University(亚利桑那州立大学);Indiana University Bloomington(印第安纳大学伯明顿分校)

Ruoyu Song, Muslum Ozgur Ozmen, Hyungsub Kim, Antonio Bianchi, Z. Berkay Celik

AI总结:

针对LLM自动驾驶系统易受感知攻击的问题,提出驾驶推理智能体Hudson,通过将场景数据形式化为DSL并引入自定义攻击检测指令,显著提升了GPT-4等模型在对抗环境下的攻击检测率与安全决策能力。

摘要:

将大型语言模型(LLMs)与自动驾驶(AD)系统结合正受到越来越多的关注。然而,AD系统容易受到针对其目标检测与跟踪(ODT)功能的攻击。不幸的是,我们对四种最新LLM智能体抵御ODT攻击的评估表明,攻击导致它们因违反交通规则或发生碰撞而失败的成功率高达63.26%,原因在于:(1)为决策提供过往经验的记忆模块具有误导性;(2)提示词在识别不一致性方面存在局限;(3)对真实感知数据的依赖。在本文中,我们提出了Hudson,一种驾驶推理智能体,它扩展了先前基于LLM的驾驶系统,使其在感知攻击期间能够做出更安全的决策,同时在良性条件下保持有效性。Hudson首先对AD软件进行插桩,以收集实时感知结果和驾驶场景的上下文信息。然后,这些数据被形式化为领域特定语言(DSL)。为了引导LLM在ODT攻击期间检测并做出安全的控制决策,Hudson将DSL连同一系列自定义攻击检测指令一起转换为自然语言。在查询执行后,Hudson分析LLM的控制决策以理解其因果推理过程。我们使用专有LLM(GPT-4)和两个开源LLM(Llama和Gemma)在各种对抗性驾驶场景中评估了Hudson的有效性。GPT-4、Llama和Gemma的平均攻击检测准确率分别为83.3%、63.6%和73.6%。因此,它们在86.4%、73.9%和80%的攻击中做出了安全的控制决策。我们的结果突显了LLM的优势及其在检测和缓解ODT攻击方面的潜力。

英文摘要:

There is a growing interest in integrating Large Language Models (LLMs) with autonomous driving (AD) systems. However, AD systems are vulnerable to attacks against their object detection and tracking (ODT) functions. Unfortunately, our evaluation of four recent LLM agents against ODT attacks shows that the attacks are 63.26% successful in causing them to crash or violate traffic rules due to (1) misleading memory modules that provide past experiences for decision making, (2) limitations of prompts in identifying inconsistencies, and (3) reliance on ground truth perception data. In this paper, we introduce Hudson, a driving reasoning agent that extends prior LLM-based driving systems to enable safer decision making during perception attacks while maintaining effectiveness under benign conditions. Hudson achieves this by first instrumenting the AD software to collect real-time perception results and contextual information from the driving scene. This data is then formalized into a domain-specific language (DSL). To guide the LLM in detecting and making safe control decisions during ODT attacks, Hudson translates the DSL into natural language, along with a list of custom attack detection instructions. Following query execution, Hudson analyzes the LLM's control decision to understand its causal reasoning process. We evaluate the effectiveness of Hudson using a proprietary LLM (GPT-4) and two open-source LLMs (Llama and Gemma) in various adversarial driving scenarios. GPT-4, Llama, and Gemma achieve, on average, an attack detection accuracy of 83. 3%, 63. 6%, and 73. 6%. Consequently, they make safe control decisions in 86.4%, 73.9%, and 80% of the attacks. Our results, following the growing interest in integrating LLMs into AD systems, highlight the strengths of LLMs and their potential to detect and mitigate ODT attacks.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑