鲁棒性与安全 · CVPR2026 ·2026.06.03

所有车辆都可能说谎:通过伪随机贝叶斯推理在全不可信车辆协同感知中实现高效对抗防御

All Vehicles Can Lie: Efficient Adversarial Defense in Fully Untrusted-Vehicle Collaborative Perception via Pseudo-Random Bayesian Inference

Yi Yu、Libing Wu、Zhuangzhuang Zhang、Jing Qiu、Lijuan Huo、Jiaqi Feng

与你有关的部分

针对全不可信车辆协同感知场景,提出利用时序感知差异和伪随机分组进行贝叶斯推理的防御框架,仅需每帧两次验证即可估计恶意车辆数量与身份,为车路协同感知的对抗鲁棒性提供了可复用的验证调度与推理机制。

原文依据 PRBI detects adversarial behavior by leveraging temporal perceptual discrepancies, using the reliable perception from the preceding frame as a dynamic reference.
可迁移到 协同感知对抗攻击防御多智能体感知

摘要译文

由模型翻译 · 术语统一 · 请对照原文核对关键结论

协同感知(CP)使多辆车能够通过交换特征级感知数据来增强各自的感知能力。然而,这种融合机制本质上容易受到对抗攻击,尤其是在全不可信车辆环境中。现有防御方法通常假设存在一个可信的自车作为参考,或引入额外的二分类器。这些假设限制了它们在实际部署中的实用性,因为自车的可信度存疑、需要实时检测,并且需要跨不同场景的泛化能力。为解决这些挑战,我们提出了一种新颖的伪随机贝叶斯推理(PRBI)框架,这是首个针对全不可信车辆协同感知量身定制的高效防御方法。PRBI通过利用时序感知差异来检测对抗行为,使用前一帧的可靠感知作为动态参考。此外,它采用伪随机分组策略,每帧仅需两次验证,同时应用贝叶斯推理来估计恶意车辆的数量和身份。理论分析证明了所提出的PRBI框架的收敛性和稳定性。大量实验表明,PRBI平均每帧仅需2.5次验证,显著优于现有方法,并将检测精度恢复到攻击前水平的79.4%至86.9%之间。

英文原文摘要 1495 字符

Collaborative perception (CP) enables multiple vehicles to augment their individual perception capacities through the exchange of feature-level sensory data. However, this fusion mechanism is inherently vulnerable to adversarial attacks, especially in fully untrusted-vehicle environments. Existing defense approaches often assume a trusted ego vehicle as a reference or incorporate additional binary classifiers. These assumptions limit their practicality in real-world deployments due to the questionable trustworthiness of ego vehicles, the requirement for real-time detection, and the need for generalizability across diverse scenarios. To address these challenges, we propose a novel Pseudo-Random Bayesian Inference (PRBI) framework, a first efficient defense method tailored for fully untrusted-vehicle CP. PRBI detects adversarial behavior by leveraging temporal perceptual discrepancies, using the reliable perception from the preceding frame as a dynamic reference. Additionally, it employs a pseudo-random grouping strategy that requires only two verifications per frame, while applying Bayesian inference to estimate both the number and identities of malicious vehicles. Theoretical analysis has proven the convergence and stability of the proposed PRBI framework. Extensive experiments show that PRBI requires only 2.5 verifications per frame on average, outperforming existing methods significantly, and restores detection precision to between 79.4% and 86.9% of pre-attack levels.

标签

会议 CVPR2026
页码 6549-6558
Bibkey
来源 CVF Open Access