Towards Benchmarking and Assessing the Safety and Robustness of Autonomous Driving on Safety-critical Scenarios
On the map: End-to-end autonomous driving → Adversarial scenarios and safety testing
Abstract (arXiv)
Autonomous driving has made significant progress in both academia and industry, including performance improvements in perception task and the development of end-to-end autonomous driving systems. However, the safety and robustness assessment of autonomous driving has not received sufficient attention. Current evaluations of autonomous driving are typically conducted in natural driving scenarios. However, many accidents often occur in edge cases, also known as safety-critical scenarios. These safety-critical scenarios are difficult to collect, and there is currently no clear definition of what constitutes a safety-critical scenario. In this work, we explore the safety and robustness of autonomous driving in safety-critical scenarios. First, we provide a definition of safety-critical scenarios, including static traffic scenarios such as adversarial attack scenarios and natural distribution shifts, as well as dynamic traffic scenarios such as accident scenarios. Then, we develop an autonomous driving safety testing platform to comprehensively evaluate autonomous driving systems, encompassing not only the assessment of perception modules but also system-level evaluations. Our work systematically constructs a safety verification process for autonomous driving, providing technical support for the industry to establish standardized test framework and reduce risks in real-world road deployment.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Adversarial scenarios and safety testing, one of 9 directions in End-to-end autonomous driving. Builds on 68 of its 94 references that are in the map. First posted on arXiv 31 Mar 2025.
Builds on
68 of 94 references.
Closest ancestors · 7
Same direction, newest first
- 2024Adversarial Safety-Critical Scenario Generation using Naturalistic Human Driving Priors6 Aug
- 2024CaDRE: Controllable and Diverse Generation of Safety-Critical Driving Scenarios using Real-World Trajectories19 Mar
- 2023CAT: Closed-loop Adversarial Training for Safe End-to-End Driving19 Oct
- 2022SafeBench: A Benchmarking Platform for Safety Evaluation of Autonomous Vehicles20 Jun
- 2021Generating Useful Accident-Prone Driving Scenarios via a Learned Traffic Prior9 Dec
- 2021Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks17 Jun
- 2021Corner Case Generation and Analysis for Safety Assessment of Autonomous Vehicles6 Feb
Other references · 61
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2019nuScenes: A multimodal dataset for autonomous drivingcited by 4,485
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2017CARLA: An Open Urban Driving Simulatorcited by 2,431
- 2022Planning-oriented Autonomous Drivingcited by 1,068
- 2016Universal adversarial perturbationscited by 774
- 2023GAIA-1: A Generative World Model for Autonomous Drivingcited by 618
- 2023VAD: Vectorized Scene Representation for Efficient Autonomous Drivingcited by 613
- 2017Adversarial Patchcited by 514
- 2023End-to-end Autonomous Driving: Challenges and Frontierscited by 485
38 more
- 2022TransFusion: Robust LiDAR-Camera Fusion for 3D Object Detection with Transformerscited by 464
- 2014Understanding Deep Image Representations by Inverting Themcited by 399
- 2023LMDrive: Closed-Loop End-to-End Driving with Large Language Modelscited by 301
- 2021MetaDrive: Composing Diverse Driving Scenarios for Generalizable Reinforcement Learningcited by 281
- 2023MagicDrive: Street View Generation with Diverse 3D Geometry Controlcited by 250
- 2022Trajectory-guided Control Prediction for End-to-end Autonomous Driving: A Simple yet Strong Baselinecited by 247
- 2021Open-Ended Learning Leads to Generally Capable Agentscited by 177
- 2023Panacea: Panoramic and Controllable Video Generation for Autonomous Drivingcited by 165
- 2021AdvSim: Generating Safety-Critical Scenarios for Self-Driving Vehiclescited by 132
- 2021Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical Worldcited by 127
- 2023Dolphins: Multimodal Language Model for Drivingcited by 124
- 2025Are VLMs Ready for Autonomous Driving? An Empirical Study from the Reliability, Data, and Metric Perspectivescited by 120
- 2023Benchmarking Robustness of 3D Object Detection to Common Corruptions in Autonomous Drivingcited by 112
- 2022Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenoncited by 101
- 2022A Survey on Safety-Critical Driving Scenario Generation -- A Methodological Perspectivecited by 100
- 2022CODA: A Real-World Road Corner Case Dataset for Object Detection in Autonomous Drivingcited by 100
- 2024DriveArena: A Closed-loop Generative Simulation Platform for Autonomous Drivingcited by 98
- 2022KING: Generating Safety-Critical Driving Scenarios for Robust Imitation via Kinematics Gradientscited by 95
- 2024ChatScene: Knowledge-Enabled Safety-Critical Scenario Generation for Autonomous Vehiclescited by 92
- 2024Editable Scene Simulation for Autonomous Driving via Collaborative LLM-Agentscited by 91
- 2022On Adversarial Robustness of Trajectory Prediction for Autonomous Vehiclescited by 89
- 2021Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blinkcited by 75
- 2024Automated Evaluation of Large Vision-Language Models on Self-driving Corner Casescited by 75
- 2020Learning to Collide: An Adaptive Safety-Critical Scenarios Generating Methodcited by 74
- 2023ScenarioNet: Open-Source Platform for Large-Scale Traffic Scenario Simulation and Modelingcited by 60
- 2020SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbationscited by 50
- 2022AdvDO: Realistic Adversarial Attacks for Trajectory Predictioncited by 48
- 2021Optical Adversarial Attackcited by 43
- 2020Adversarial Evaluation of Autonomous Vehicles in Lane-Change Scenarioscited by 42
- 2023RoboBEV: Towards Robust Bird's Eye View Perception under Corruptionscited by 42
- 2019SUMMIT: A Simulator for Urban Driving in Massive Mixed Trafficcited by 39
- 2020Physical Adversarial Attack on Vehicle Detector in the Carla Simulatorcited by 38
- 2023Understanding the Robustness of 3D Object Detection with Bird's-Eye-View Representations in Autonomous Drivingcited by 37
- 2023Does Physical Adversarial Example Really Matter to Autonomous Driving? Towards System-Level Effect of Adversarial Object Evasion Attackcited by 37
- 2019Failure-Scenario Maker for Rule-Based Agent using Multi-agent Adversarial Reinforcement Learning and its Application to Autonomous Drivingcited by 36
- 2021An Application-Driven Conceptualization of Corner Cases for Perception in Highly Automated Drivingcited by 33
- 2021Pylot: A Modular Platform for Exploring Latency-Accuracy Tradeoffs in Autonomous Vehiclescited by 33
- 2024Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Drivingcited by 32
50 most cited of 61 All 61 (JSON)
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025Safety2Drive: Safety-Critical Scenario Benchmark for the Evaluation of Autonomous Driving
- 2026SaFeR: Safety-Critical Scenario Generation for Autonomous Driving Test via Feasibility-Constrained Token Resampling
- 2025AuthSim: Towards Authentic and Effective Safety-critical Scenario Generation for Autonomous Driving Tests
- 2025Context-aware Risk Assessment and Its Application in Autonomous Driving
- 2026HiDrive: A Closed-Loop Benchmark for High-Level Autonomous Driving
- 2024Training Adversarial yet Safe Agent to Characterize Safety Performance of Highly Automated Vehicles
- 2025Advancing Autonomous Driving System Testing: Demands, Challenges, and Future Directions
- 2021Evaluating Robustness over High Level Driving Instruction for Autonomous Driving