AdvSim: Generating Safety-Critical Scenarios for Self-Driving Vehicles
Jingkang Wang, Ava Pun, James Tu, Sivabalan Manivasagam, Abbas Sadat, Sergio Casas, Mengye Ren, Raquel Urtasun
Abstract
As self-driving systems become better, simulating scenarios where the autonomy stack may fail becomes more important. Traditionally, those scenarios are generated for a few scenes with respect to the planning module that takes ground-truth actor states as input. This does not scale and cannot identify all possible autonomy failures, such as perception failures due to occlusion. In this paper, we propose AdvSim, an adversarial framework to generate safetycritical scenarios for any LiDAR-based autonomy system. Given an initial traffic scenario, AdvSim modifies the actors' trajectories in a physically plausible manner and updates the LiDAR sensor data to match the perturbed world. Importantly, by simulating directly from sensor data, we obtain adversarial scenarios that are safety-critical for the full autonomy stack. Our experiments show that our approach is general and can identify thousands of semantically meaningful safety-critical scenarios for a wide range of modern self-driving systems. Furthermore, we show that the robustness and safety of these systems can be further improved by training them with scenarios generated by AdvSim.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Cited by top-tier papers28
- On Adversarial Robustness of Trajectory Prediction for Autonomous VehiclesQingzhao Zhang, Shengtuo Hu, Jiachen Sun, Qi Alfred Chen et al.CVPR 2022 · 132 citations
- Generating Useful Accident-Prone Driving Scenarios via a Learned Traffic PriorDavis Rempe, Jonah Philion, Leonidas J. Guibas, Sanja Fidler et al.CVPR 2022 · 123 citations
- Vehicle trajectory prediction works, but not everywhereMohammadhossein Bahari, Saeed Saadatnejad, Ahmad Rahimi, Mohammad Shahverdikondori et al.CVPR 2022 · 65 citations
- ChatScene: Knowledge-Enabled Safety-Critical Scenario Generation for Autonomous VehiclesJiawei Zhang, Chejian Xu, Bo LiCVPR 2024 · 50 citations
- Adv-BMT: Bidirectional Motion Transformer for Safety-Critical Traffic Scenario GenerationYuxin Liu, Zhenghao Mark Peng, Xuanhao Cui, Bolei ZhouNeurIPS 2025 · 14 citations
Builds on5
- Adversarial Sensor Attack on LiDAR-based Perception in Autonomous DrivingYulong Cao, Chaowei Xiao, Benjamin Cyr, Yimeng Zhou et al.CCS 2019 · 626 citations
- BayesOpt Adversarial AttackBinxin Ru, Adam D. Cobb, Arno Blaas, Yarin GalICLR 2020 · 85 citations
- Neural Bridge Sampling for Evaluating Safety-Critical Autonomous SystemsAman Sinha, Matthew O'Kelly, Russ Tedrake, John C. DuchiNeurIPS 2020 · 60 citations
- Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and CountermeasuresJiachen Sun, Yulong Cao, Qi Alfred Chen, Z. Morley MaoUSENIX Security 2020
- LiDARsim: Realistic LiDAR Simulation by Leveraging the Real WorldSivabalan Manivasagam, Shenlong Wang, Kelvin Wong, Wenyuan Zeng et al.CVPR 2020
Related papers
- Generating Realistic and Diverse Tests for LiDAR-Based Perception SystemsGarrett Christian, Trey Woodlief, Sebastian G. ElbaumICSE 2023 · 11 citations
- Physically Realizable Adversarial Examples for LiDAR Object DetectionJames Tu, Mengye Ren, Sivabalan Manivasagam, Ming Liang et al.CVPR 2020
- Generating Traffic Scenarios via In-Context Learning to Learn Better Motion PlannerAizierjiang AiersilanAAAI 2025 · 6 citations
- ScenePilot: Controllable Boundary-Driven Critical Scenario Generation for Autonomous DrivingQiyu Ruan, YUXUAN WANG, He Li, Zhenning Li et al.ICML 2026
- Invisible Triggers, Visible Threats! Road-Style Adversarial Creation Attack for Visual 3D Detection in Autonomous DrivingJian Wang, Lijun He, Yixing Yong, Haixia Bi et al.AAAI 2026 · 1 citation
