Simulation-based Adversarial Test Generation for Autonomous Vehicles with Machine Learning Components
Not on the map. Why?
Abstract (arXiv)
Many organizations are developing autonomous driving systems, which are expected to be deployed at a large scale in the near future. Despite this, there is a lack of agreement on appropriate methods to test, debug, and certify the performance of these systems. One of the main challenges is that many autonomous driving systems have machine learning components, such as deep neural networks, for which formal properties are difficult to characterize. We present a testing framework that is compatible with test case generation and automatic falsification methods, which are used to evaluate cyber-physical systems. We demonstrate how the framework can be used to evaluate closed-loop properties of an autonomous driving system model that includes the ML components, all within a virtual environment. We demonstrate how to use test case generation methods, such as covering arrays, as well as requirement falsification methods to automatically identify problematic test scenarios. The resulting framework can be used to increase the reliability of autonomous driving systems.
Key facts. Cited by 29 papers in the map (data through 13 Oct 2026). First posted on arXiv 18 Apr 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 7; 2022: 6; 2023: 5; 2024: 4; 2025: 1; 2026: 6.
29 papers.
Sort:
By area:
- 2024Few-Shot Adversarial Prompt Learning on Vision-Language Modelscited by 39
- 2021How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Reviewcited by 38
- 2021CausalAdv: Adversarial Robustness through the Lens of Causalitycited by 37
- 2021Can Offline Testing of Deep Neural Networks Replace Their Online Testing?cited by 24
- 2022SoK: On the Semantic AI Security in Autonomous Drivingcited by 22
- 2022Towards Lightweight Black-Box Attacks against Deep Neural Networkscited by 13
- 2021Finding Critical Scenarios for Automated Driving Systems: A Systematic Literature Reviewcited by 12
- 2022ANTI-CARLA: An Adversarial Testing Framework for Autonomous Vehicles in CARLAcited by 8
- 2021Part-X: A Family of Stochastic Algorithms for Search-Based Test Generation with Probabilistic Guaranteescited by 6
- 2022Systematic Training and Testing for Machine Learning Using Combinatorial Interaction Testingcited by 6
- 2023EpiTESTER: Testing Autonomous Vehicles with Epigenetic Algorithm and Attention Mechanismcited by 6
- 2023Adaptive Failure Search Using Critical States from Domain Expertscited by 4
17 more
- 2023Test & Evaluation Best Practices for Machine Learning-Enabled Systemscited by 4
- 2021Querying Labelled Data with Scenario Programs for Sim-to-Real Validationcited by 3
- 2023A Neurosymbolic Approach to the Verification of Temporal Logic Properties of Learning enabled Control Systemscited by 3
- 2026ADV-0: Closed-Loop Min-Max Adversarial Training for Long-Tail Robustness in Autonomous Drivingcited by 3
- 2026ICR-Drive: Instruction Counterfactual Robustness for End-to-End Language-Driven Autonomous Drivingcited by 3
- 2024Provable Traffic Rule Compliance in Safe Reinforcement Learning on the Open Seacited by 2
- 2024Reinforcement Learning for Online Testing of Autonomous Driving Systems: a Replication and Extension Studycited by 2
- 2022Rationale-aware Autonomous Driving Policy utilizing Safety Force Field implemented on CARLA Simulatorcited by 1
- 2026Grammar-Constrained Refinement of Safety Operational Rules Using Language in the Loop: What Could Go Wrongcited by 1
- 2021Analysis of E-commerce Ranking Signals via Signal Temporal Logiccited by 0
- 2022Evaluating Automated Driving Planner Robustness against Adversarial Influencecited by 0
- 2023Metric Learning Improves the Ability of Combinatorial Coverage Metrics to Anticipate Classification Errorcited by 0
- 2024Foundation Models for Rapid Autonomy Validationcited by 0
- 2025Context-aware, Ante-hoc Explanations of Driving Behaviourcited by 0
- 2026PPO guided Agentic Pipeline for Adaptive Prompt Selection and Test Case Generationcited by 0
- 2026FeedbackLLM: Metadata driven Multi-Agentic Language Agnostic Test Case Generator with Evolving prompt and Coverage Feedbackcited by 0
- 2026DreamTest: World-Model Surrogates for Search-Based Testing of Deep Reinforcement Learning Agentscited by 0
- 2026DreamTest: World-Model Surrogates for Search-Based Testing of Deep Reinforcement Learning Agents3 Oct 2026
- 2026FeedbackLLM: Metadata driven Multi-Agentic Language Agnostic Test Case Generator with Evolving prompt and Coverage Feedback2 May 2026
- 2026PPO guided Agentic Pipeline for Adaptive Prompt Selection and Test Case Generation1 May 2026
- 2026Grammar-Constrained Refinement of Safety Operational Rules Using Language in the Loop: What Could Go Wrong26 Apr 2026
- 2026ICR-Drive: Instruction Counterfactual Robustness for End-to-End Language-Driven Autonomous Driving7 Apr 2026
- 2026ADV-0: Closed-Loop Min-Max Adversarial Training for Long-Tail Robustness in Autonomous Driving16 Mar 2026
- 2025Context-aware, Ante-hoc Explanations of Driving Behaviour18 Nov 2025
- 2024Foundation Models for Rapid Autonomy Validation22 Oct 2024
- 2024Few-Shot Adversarial Prompt Learning on Vision-Language Models21 Mar 2024
- 2024Reinforcement Learning for Online Testing of Autonomous Driving Systems: a Replication and Extension Study20 Mar 2024
- 2024Provable Traffic Rule Compliance in Safe Reinforcement Learning on the Open Sea13 Feb 2024
- 2023EpiTESTER: Testing Autonomous Vehicles with Epigenetic Algorithm and Attention Mechanism30 Nov 2023
17 more
- 2023Test & Evaluation Best Practices for Machine Learning-Enabled Systems10 Oct 2023
- 2023Adaptive Failure Search Using Critical States from Domain Experts1 Apr 2023
- 2023A Neurosymbolic Approach to the Verification of Temporal Logic Properties of Learning enabled Control Systems7 Mar 2023
- 2023Metric Learning Improves the Ability of Combinatorial Coverage Metrics to Anticipate Classification Error28 Feb 2023
- 2022Rationale-aware Autonomous Driving Policy utilizing Safety Force Field implemented on CARLA Simulator18 Nov 2022
- 2022Towards Lightweight Black-Box Attacks against Deep Neural Networks29 Sep 2022
- 2022ANTI-CARLA: An Adversarial Testing Framework for Autonomous Vehicles in CARLA19 Jul 2022
- 2022Evaluating Automated Driving Planner Robustness against Adversarial Influence29 May 2022
- 2022SoK: On the Semantic AI Security in Autonomous Driving10 Mar 2022
- 2022Systematic Training and Testing for Machine Learning Using Combinatorial Interaction Testing28 Jan 2022
- 2021Querying Labelled Data with Scenario Programs for Sim-to-Real Validation1 Dec 2021
- 2021Part-X: A Family of Stochastic Algorithms for Search-Based Test Generation with Probabilistic Guarantees20 Oct 2021
- 2021Finding Critical Scenarios for Automated Driving Systems: A Systematic Literature Review16 Oct 2021
- 2021How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Review26 Jul 2021
- 2021CausalAdv: Adversarial Robustness through the Lens of Causality11 Jun 2021
- 2021Can Offline Testing of Deep Neural Networks Replace Their Online Testing?26 Jan 2021
- 2021Analysis of E-commerce Ranking Signals via Signal Temporal Logic14 Jan 2021
- 2026ADV-0: Closed-Loop Min-Max Adversarial Training for Long-Tail Robustness in Autonomous Drivingcited by 3
- 2024Reinforcement Learning for Online Testing of Autonomous Driving Systems: a Replication and Extension Studycited by 2
- 2022Rationale-aware Autonomous Driving Policy utilizing Safety Force Field implemented on CARLA Simulatorcited by 1
- 2022Evaluating Automated Driving Planner Robustness against Adversarial Influencecited by 0
- 2026ADV-0: Closed-Loop Min-Max Adversarial Training for Long-Tail Robustness in Autonomous Driving16 Mar 2026
- 2024Reinforcement Learning for Online Testing of Autonomous Driving Systems: a Replication and Extension Study20 Mar 2024
- 2022Rationale-aware Autonomous Driving Policy utilizing Safety Force Field implemented on CARLA Simulator18 Nov 2022
- 2022Evaluating Automated Driving Planner Robustness against Adversarial Influence29 May 2022
- 2021How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Reviewcited by 38
- 2021CausalAdv: Adversarial Robustness through the Lens of Causalitycited by 37
- 2021Can Offline Testing of Deep Neural Networks Replace Their Online Testing?cited by 24
- 2022SoK: On the Semantic AI Security in Autonomous Drivingcited by 22
- 2022Towards Lightweight Black-Box Attacks against Deep Neural Networkscited by 13
- 2021Finding Critical Scenarios for Automated Driving Systems: A Systematic Literature Reviewcited by 12
- 2022ANTI-CARLA: An Adversarial Testing Framework for Autonomous Vehicles in CARLAcited by 8
- 2021Part-X: A Family of Stochastic Algorithms for Search-Based Test Generation with Probabilistic Guaranteescited by 6
- 2022Systematic Training and Testing for Machine Learning Using Combinatorial Interaction Testingcited by 6
- 2023EpiTESTER: Testing Autonomous Vehicles with Epigenetic Algorithm and Attention Mechanismcited by 6
- 2023Adaptive Failure Search Using Critical States from Domain Expertscited by 4
- 2023Test & Evaluation Best Practices for Machine Learning-Enabled Systemscited by 4
12 most cited of 19 All 19 (JSON)
- 2026Grammar-Constrained Refinement of Safety Operational Rules Using Language in the Loop: What Could Go Wrong26 Apr 2026
- 2025Context-aware, Ante-hoc Explanations of Driving Behaviour18 Nov 2025
- 2024Foundation Models for Rapid Autonomy Validation22 Oct 2024
- 2023EpiTESTER: Testing Autonomous Vehicles with Epigenetic Algorithm and Attention Mechanism30 Nov 2023
- 2023Test & Evaluation Best Practices for Machine Learning-Enabled Systems10 Oct 2023
- 2023Adaptive Failure Search Using Critical States from Domain Experts1 Apr 2023
- 2023A Neurosymbolic Approach to the Verification of Temporal Logic Properties of Learning enabled Control Systems7 Mar 2023
- 2023Metric Learning Improves the Ability of Combinatorial Coverage Metrics to Anticipate Classification Error28 Feb 2023
- 2022Towards Lightweight Black-Box Attacks against Deep Neural Networks29 Sep 2022
- 2022ANTI-CARLA: An Adversarial Testing Framework for Autonomous Vehicles in CARLA19 Jul 2022
- 2022SoK: On the Semantic AI Security in Autonomous Driving10 Mar 2022
- 2022Systematic Training and Testing for Machine Learning Using Combinatorial Interaction Testing28 Jan 2022
12 newest of 19 All 19 (JSON)