LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions
Not on the map. Why?
Abstract (arXiv)
Lane detection (LD) is an essential component of autonomous driving systems, providing fundamental functionalities like adaptive cruise control and automated lane centering. Existing LD benchmarks primarily focus on evaluating common cases, neglecting the robustness of LD models against environmental illusions such as shadows and tire marks on the road. This research gap poses significant safety challenges since these illusions exist naturally in real-world traffic situations. For the first time, this paper studies the potential threats caused by these environmental illusions to LD and establishes the first comprehensive benchmark LanEvil for evaluating the robustness of LD against this natural corruption. We systematically design 14 prevalent yet critical types of environmental illusions (e.g., shadow, reflection) that cover a wide spectrum of real-world influencing factors in LD tasks. Based on real-world environments, we create 94 realistic and customizable 3D cases using the widely used CARLA simulator, resulting in a dataset comprising 90,292 sampled images. Through extensive experiments, we benchmark the robustness of popular LD methods using LanEvil, revealing substantial performance degradation (-5.37% Accuracy and -10.70% F1-Score on average), with shadow effects posing the greatest risk (-7.39% Accuracy). Additionally, we assess the performance of commercial auto-driving systems OpenPilot and Apollo through collaborative simulations, demonstrating that proposed environmental illusions can lead to incorrect decisions and potential traffic accidents. To defend against environmental illusions, we propose the Attention Area Mixing (AAM) approach using hard examples, which witness significant robustness improvement (+3.76%) under illumination effects. We hope our paper can contribute to advancing more robust auto-driving systems in the future. Website: https://lanevil.github.io/.
Key facts. Cited by 18 papers in the map (data through 7 Oct 2026). Builds on 61 of its 96 references that are in the map. First posted on arXiv 3 Jun 2024.
Builds on
61 of 96 references.
References · 61
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2017CARLA: An Open Urban Driving Simulatorcited by 2,431
- 2015Learning Deep Features for Discriminative Localizationcited by 2,430
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
- 2018BDD100K: A Diverse Driving Dataset for Heterogeneous Multitask Learningcited by 1,282
- 2017Grad-CAM++: Improved Visual Explanations for Deep Convolutional Networkscited by 936
38 more
- 2016Playing for Data: Ground Truth from Computer Gamescited by 816
- 2020Simple Copy-Paste is a Strong Data Augmentation Method for Instance Segmentationcited by 595
- 2019KonIQ-10k: An ecologically valid database for deep learning of blind image quality assessmentcited by 351
- 2021MetaDrive: Composing Diverse Driving Scenarios for Generalizable Reinforcement Learningcited by 281
- 2017Spatial As Deep: Spatial CNN for Traffic Scene Understandingcited by 187
- 2017Playing for Benchmarkscited by 169
- 2020Keep your Eyes on the Lane: Real-time Attention-guided Lane Detectioncited by 137
- 2023Robo3D: Towards Robust and Reliable 3D Perception against Corruptionscited by 128
- 2021Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical Worldcited by 127
- 2020Ultra Fast Structure-aware Deep Lane Detectioncited by 121
- 2020End-to-end Lane Shape Prediction with Transformerscited by 111
- 2018Transferable Adversarial Attacks for Image and Video Object Detectioncited by 109
- 2020PolyLaneNet: Lane Estimation via Deep Polynomial Regressioncited by 95
- 2022Rethinking Efficient Lane Detection via Curve Modelingcited by 87
- 2024VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Modelscited by 83
- 2020CurveLane-NAS: Unifying Lane-Sensitive Architecture Search and Adaptive Point Blendingcited by 80
- 2022Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detectioncited by 79
- 2021RobustART: Benchmarking Robustness on Architecture Design and Training Techniquescited by 78
- 2020Key Points Estimation and Point Instance Segmentation Approach for Lane Detectioncited by 77
- 2020RESA: Recurrent Feature-Shift Aggregator for Lane Detectioncited by 77
- 2022A Keypoint-based Global Association Network for Lane Detectioncited by 68
- 2020Efficient Adversarial Attacks for Visual Object Trackingcited by 66
- 2021Focus on Local: Detecting Lane Marker from Bottom Up via Key Pointcited by 65
- 2020Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attackcited by 64
- 2023X-Adv: Physical Adversarial Object Attacks against X-ray Prohibited Item Detectioncited by 58
- 2017VPGNet: Vanishing Point Guided Network for Lane and Road Marking Detection and Recognitioncited by 56
- 2022A Large-scale Multiple-objective Method for Black-box Attack against Object Detectioncited by 55
- 2024Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMscited by 48
- 2020End-to-End Lane Marker Detection via Row-wise Classificationcited by 47
- 2014Real time Detection of Lane Markers in Urban Streetscited by 41
- 2021A Comprehensive Evaluation Framework for Deep Model Robustnesscited by 41
- 2021Harnessing Perceptual Adversarial Patches for Crowd Countingcited by 39
- 2022Ultra Fast Deep Lane Detection with Hybrid Anchor Driven Ordinal Classificationcited by 39
- 2023SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentationcited by 39
- 2023Pre-trained Trojan Attacks for Visual Recognitioncited by 38
- 2023Diversifying the High-level Features for better Adversarial Transferabilitycited by 34
- 2019Attacking Vision-based Perception in End-to-End Autonomous Driving Modelscited by 31
- 2024Unlearning Backdoor Threats: Enhancing Backdoor Defense in Multimodal Contrastive Learning via Local Token Unlearningcited by 31
50 most cited of 61 All 61 (JSON)
Built on by
Citing papers per year: 2024: 5; 2025: 7; 2026: 6.
18 papers.
Sort:
By area:
- 2025Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Modelscited by 61
- 2024Visual Adversarial Attack on Vision-Language Models for Autonomous Drivingcited by 35
- 2024Compromising Embodied Agents with Contextual Backdoor Attackscited by 29
- 2025Bench2ADVLM: A Closed-Loop Benchmark for Vision-language Models in Autonomous Drivingcited by 8
- 2024Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threatscited by 6
- 2024Module-wise Adaptive Adversarial Training for End-to-end Autonomous Drivingcited by 4
- 2025MetAdv: A Unified and Interactive Adversarial Testing Platform for Autonomous Drivingcited by 3
- 2025Safety2Drive: Safety-Critical Scenario Benchmark for the Evaluation of Autonomous Drivingcited by 2
- 2025Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidancecited by 2
- 2025RoboView-Bias: Benchmarking Visual Bias in Embodied Agents for Robotic Manipulationcited by 2
- 2025Datasets for Lane Detection in Autonomous Driving: A Comprehensive Reviewcited by 1
- 2026TaCarla: A comprehensive benchmarking dataset for end-to-end autonomous drivingcited by 1
6 more
- 2026Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggerscited by 1
- 2026LLM-Generated Fault Scenarios for Evaluating Perception-Driven Lane Following in Autonomous Edge Systemscited by 1
- 2026Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspectivecited by 1
- 2024Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Modelscited by 0
- 2026GuardAD: Safeguarding Autonomous Driving MLLMs via Markovian Safety Logiccited by 0
- 2026Revisiting Shadow Detection from a Vision-Language Perspectivecited by 0
- 2026Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspective7 Jul 2026
- 2026Revisiting Shadow Detection from a Vision-Language Perspective12 May 2026
- 2026GuardAD: Safeguarding Autonomous Driving MLLMs via Markovian Safety Logic11 May 2026
- 2026Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers6 Apr 2026
- 2026LLM-Generated Fault Scenarios for Evaluating Perception-Driven Lane Following in Autonomous Edge Systems1 Apr 2026
- 2026TaCarla: A comprehensive benchmarking dataset for end-to-end autonomous driving26 Feb 2026
- 2025RoboView-Bias: Benchmarking Visual Bias in Embodied Agents for Robotic Manipulation26 Sep 2025
- 2025Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidance21 Aug 2025
- 2025MetAdv: A Unified and Interactive Adversarial Testing Platform for Autonomous Driving4 Aug 2025
- 2025Bench2ADVLM: A Closed-Loop Benchmark for Vision-language Models in Autonomous Driving4 Aug 2025
- 2025Safety2Drive: Safety-Critical Scenario Benchmark for the Evaluation of Autonomous Driving20 May 2025
- 2025Datasets for Lane Detection in Autonomous Driving: A Comprehensive Review11 Apr 2025
6 more
- 2025Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models16 Feb 2025
- 2024Visual Adversarial Attack on Vision-Language Models for Autonomous Driving27 Nov 2024
- 2024Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models7 Oct 2024
- 2024Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats29 Sep 2024
- 2024Module-wise Adaptive Adversarial Training for End-to-end Autonomous Driving11 Sep 2024
- 2024Compromising Embodied Agents with Contextual Backdoor Attacks6 Aug 2024
- 2024Module-wise Adaptive Adversarial Training for End-to-end Autonomous Drivingcited by 4
- 2025MetAdv: A Unified and Interactive Adversarial Testing Platform for Autonomous Drivingcited by 3
- 2025Safety2Drive: Safety-Critical Scenario Benchmark for the Evaluation of Autonomous Drivingcited by 2
- 2026TaCarla: A comprehensive benchmarking dataset for end-to-end autonomous drivingcited by 1
- 2026Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspectivecited by 1
- 2026GuardAD: Safeguarding Autonomous Driving MLLMs via Markovian Safety Logiccited by 0
- 2026Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspective7 Jul 2026
- 2026GuardAD: Safeguarding Autonomous Driving MLLMs via Markovian Safety Logic11 May 2026
- 2026TaCarla: A comprehensive benchmarking dataset for end-to-end autonomous driving26 Feb 2026
- 2025MetAdv: A Unified and Interactive Adversarial Testing Platform for Autonomous Driving4 Aug 2025
- 2025Safety2Drive: Safety-Critical Scenario Benchmark for the Evaluation of Autonomous Driving20 May 2025
- 2024Module-wise Adaptive Adversarial Training for End-to-end Autonomous Driving11 Sep 2024
- 2025Bench2ADVLM: A Closed-Loop Benchmark for Vision-language Models in Autonomous Drivingcited by 8
- 2026Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggerscited by 1
- 2024Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Modelscited by 0
- 2026Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers6 Apr 2026
- 2025Bench2ADVLM: A Closed-Loop Benchmark for Vision-language Models in Autonomous Driving4 Aug 2025
- 2024Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models7 Oct 2024
- 2025Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidancecited by 2
- 2025Datasets for Lane Detection in Autonomous Driving: A Comprehensive Reviewcited by 1
- 2026LLM-Generated Fault Scenarios for Evaluating Perception-Driven Lane Following in Autonomous Edge Systemscited by 1
- 2026Revisiting Shadow Detection from a Vision-Language Perspectivecited by 0
- 2026Revisiting Shadow Detection from a Vision-Language Perspective12 May 2026
- 2026LLM-Generated Fault Scenarios for Evaluating Perception-Driven Lane Following in Autonomous Edge Systems1 Apr 2026
- 2025Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidance21 Aug 2025
- 2025Datasets for Lane Detection in Autonomous Driving: A Comprehensive Review11 Apr 2025