Short: Certifiably Robust Perception Against Adversarial Patch Attacks: A Survey
Chong Xiang, Chawin Sitawarin, Tong Wu, Prateek Mittal · 2023
The physical-world adversarial patch attack poses a security threat to AI perception models in autonomous vehicles.To mitigate this threat, researchers have designed defenses with certifiable robustness.In this paper, we survey existing certifiably robust defenses and highlight core robustness techniques that are applicable to a variety of perception tasks, including classification, detection, and segmentation.We emphasize the unsolved problems in this space to guide future research, and call for attention and efforts from both academia and industry to robustify perception models in autonomous vehicles.