A collaboration of researchers from the University of Florida, the University of Michigan, and the University of Electro-Communications in Japan have now shown these eyes can be tricked with a fairly basic laser setup. They demonstrated that expertly timed lasers shined at an approaching LiDAR system can create a blind spot in front of the vehicle large enough to completely hide moving pedestrians and other obstacles.

Figure 1: LiDAR system can create a blind spot in front of the vehicle.

Figure 1 shows that the deleted data causes the cars to think the road is safe to continue moving along, endangering whatever may be in the attack’s blind spot. This is the first time when a LiDAR sensor has been tricked into deleting data about obstacles. The team also provides upgrades that could eliminate this weakness to protect people from malicious attacks. [1]

Lidar works by emitting laser light and capturing the reflections to calculate distances, much like how a bat’s echolocation uses sound echoes. The attack creates fake reflections to scramble the sensor.

The scientists demonstrated the attack on moving vehicles and robots with the attacker placed about 15 feet away on the side of the road. But in theory it could be accomplished from farther away with upgraded equipment.

The tech required is all fairly basic, but the laser must be perfectly timed to the lidar sensor and moving vehicles must be carefully tracked to keep the laser pointing in the right direction. “It’s primarily a matter of synchronization of the laser with the lidar device. The information you need is usually publicly available from the manufacturer,” said S. Hrushikesh Bhupathiraj. [2]

Using this technique, the scientists were able to delete data for static obstacles and moving pedestrians. They also demonstrated with real-world experiments that the attack could follow a slow-moving vehicle using basic camera tracking equipment.

In simulations of autonomous vehicle decision making, this deletion of data caused a car to continue accelerating toward a pedestrian it could no longer see instead of stopping as it should.

Updates to the lidar sensors or the software that interprets the raw data could address this vulnerability. For example, manufacturers could teach the software to look for the telltale signatures of the spoofed reflections added by the laser attack. [3]

References:

1. https://www.inceptivemind.com/laser-attack-blinds-self-driving-cars-deleting-pedestrians-view/28104/
2. https://news.ufl.edu/2022/11/lidar-attack/
3. https://www.sciencedaily.com/releases/2022/10/221031124642.htm

Cite this article:

Sri Vasagi K, Researcher Used a New Lidar System in Autonomous Vehicle, Anatechmaz, pp.187