Explainable and Trustworthy Traffic Sign Detection for Safe Autonomous Driving: An Inductive Logic Programming Approach
Not on the map. Why?
Abstract (arXiv)
Traffic sign detection is a critical task in the operation of Autonomous Vehicles (AV), as it ensures the safety of all road users. Current DNN-based sign classification systems rely on pixel-level features to detect traffic signs and can be susceptible to adversarial attacks. These attacks involve small, imperceptible changes to a sign that can cause traditional classifiers to misidentify the sign. We propose an Inductive Logic Programming (ILP) based approach for stop sign detection in AVs to address this issue. This method utilises high-level features of a sign, such as its shape, colour, and text, to detect categories of traffic signs. This approach is more robust against adversarial attacks, as it mimics human-like perception and is less susceptible to the limitations of current DNN classifiers. We consider two adversarial attacking methods to evaluate our approach: Robust Physical Perturbation (PR2) and Adversarial Camouflage (AdvCam). These attacks are able to deceive DNN classifiers, causing them to misidentify stop signs as other signs with high confidence. The results show that the proposed ILP-based technique is able to correctly identify all targeted stop signs, even in the presence of PR2 and ADvCam attacks. The proposed learning method is also efficient as it requires minimal training data. Moreover, it is fully explainable, making it possible to debug AVs.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 14 of its 35 references that are in the map. First posted on arXiv 30 Aug 2023.
Builds on
14 of 35 references.
References · 14
- 2013Intriguing properties of neural networkscited by 5,114
- 2016Adversarial examples in the physical worldcited by 1,762
- 2019Fooling automated surveillance cameras: adversarial patches to attack person detectioncited by 268
- 2020A Review on Generative Adversarial Networks: Algorithms, Theory, and Applicationscited by 209
- 2018Physical Adversarial Examples for Object Detectorscited by 163
- 2017On the Robustness of Semantic Segmentation Models to Adversarial Attackscited by 126
- 2020Adversarial Camouflage: Hiding Physical-World Attacks with Natural Stylescited by 126
- 2017Universal Adversarial Perturbations Against Semantic Image Segmentationcited by 92
- 2020An Analysis of Adversarial Attacks and Defenses on Autonomous Driving Modelscited by 67
- 2020Neurosymbolic Reinforcement Learning with Formally Verified Explorationcited by 49
- 2020Turning 30: New Ideas in Inductive Logic Programmingcited by 42
- 2019Fooling a Real Car with Adversarial Traffic Signscited by 29
Built on by
Citing papers per year: 2024: 2; 2025: 0; 2026: 1.
3 papers.
- 2024Explainable AI for Safe and Trustworthy Autonomous Driving: A Systematic Reviewcited by 52
- 2024Real-Time Incremental Explanations for Object Detectors in Autonomous Drivingcited by 1
- 2026Correcting Autonomous Driving Object Detection Misclassifications with Automated Commonsense Reasoningcited by 0
- 2026Correcting Autonomous Driving Object Detection Misclassifications with Automated Commonsense Reasoning7 Jan 2026
- 2024Real-Time Incremental Explanations for Object Detectors in Autonomous Driving21 Aug 2024
- 2024Explainable AI for Safe and Trustworthy Autonomous Driving: A Systematic Review8 Feb 2024