Enhancing the Robustness of LiDAR-based Object Detection under Disappearing Attacks

Autonomous driving systems rely on LiDAR-based 3D object detection to identify obstacles. Recent studies have shown that detectors are susceptible to disappearing attacks, leading to missed detections and potential vehicle collisions. However, improving the adversarial robustness of 3D object detection against such attacks remains an open question. Our work seeks to bridge this gap by proposing an effective defense strategy for 3D object detection under both black-box and white-box disappearing attacks. Specifically, we formulate the problem of defending against disappearing attacks in 3D object detection as a bilevel min-max problem and introduce a novel approach, DART, to train machine learning models robust to disappearing attacks. Our extensive evaluations demonstrate that DART outperforms general adversarial defense methods, reducing the attack success rate by over 85% while achieving a better balance between robustness and performance, and meeting the real-time requirements of autonomous vehicles.