mlsanityData to 14 Oct 2026

Safety2Drive: Safety-Critical Scenario Benchmark for the Evaluation of Autonomous Driving

arXiv 2505.13872 ↗First posted 20 May 2025cs.RO cs.AIcited by 2

On the map: End-to-end autonomous driving → Adversarial scenarios and safety testing

Abstract (arXiv)

Autonomous Driving (AD) systems demand the high levels of safety assurance. Despite significant advancements in AD demonstrated on open-source benchmarks like Longest6 and Bench2Drive, existing datasets still lack regulatory-compliant scenario libraries for closed-loop testing to comprehensively evaluate the functional safety of AD. Meanwhile, real-world AD accidents are underrepresented in current driving datasets. This scarcity leads to inadequate evaluation of AD performance, posing risks to safety validation and practical deployment. To address these challenges, we propose Safety2Drive, a safety-critical scenario library designed to evaluate AD systems. Safety2Drive offers three key contributions. (1) Safety2Drive comprehensively covers the test items required by standard regulations and contains 70 AD function test items. (2) Safety2Drive supports the safety-critical scenario generalization. It has the ability to inject safety threats such as natural environment corruptions and adversarial attacks cross camera and LiDAR sensors. (3) Safety2Drive supports multi-dimensional evaluation. In addition to the evaluation of AD systems, it also supports the evaluation of various perception tasks, such as object detection and lane detection. Safety2Drive provides a paradigm from scenario construction to validation, establishing a standardized test framework for the safe deployment of AD.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Adversarial scenarios and safety testing, one of 9 directions in End-to-end autonomous driving. Builds on 36 of its 51 references that are in the map. First posted on arXiv 20 May 2025.

Builds on

36 of 51 references.

Closest ancestors · 2

Same direction, newest first

  1. 2024Adversarial Safety-Critical Scenario Generation using Naturalistic Human Driving Priors6 Aug
  2. 2022SafeBench: A Benchmarking Platform for Safety Evaluation of Autonomous Vehicles20 Jun

Other references · 34

  1. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  2. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  3. 2019nuScenes: A multimodal dataset for autonomous drivingcited by 4,523
  4. 2019Scalability in Perception for Autonomous Driving: Waymo Open Datasetcited by 2,451
  5. 2018PointPillars: Fast Encoders for Object Detection from Point Cloudscited by 1,715
  6. 2022Planning-oriented Autonomous Drivingcited by 1,087
  7. 2022BEVFusion: Multi-Task Multi-Sensor Fusion with Unified Bird's-Eye View Representationcited by 850
  8. 2023VAD: Vectorized Scene Representation for Efficient Autonomous Drivingcited by 622
  9. 2017Adversarial Patchcited by 517
  10. 2022TransFuser: Imitation with Transformer-Based Sensor Fusion for Autonomous Drivingcited by 485
  11. 2014Understanding Deep Image Representations by Inverting Themcited by 403
  12. 2024Bench2Drive: Towards Multi-Ability Benchmarking of Closed-Loop End-To-End Autonomous Drivingcited by 252
22 more
  1. 2023Rethinking the Open-Loop Evaluation of End-to-End Autonomous Driving in nuScenescited by 191
  2. 2023Think Twice before Driving: Towards Scalable Decoders for End-to-End Autonomous Drivingcited by 169
  3. 2020PnPNet: End-to-End Perception and Prediction with Tracking in the Loopcited by 144
  4. 2020Human Trajectory Forecasting in Crowds: A Deep Learning Perspectivecited by 129
  5. 2021Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical Worldcited by 127
  6. 2022CODA: A Real-World Road Corner Case Dataset for Object Detection in Autonomous Drivingcited by 100
  7. 2022Adversarial Texture for Fooling Person Detectors in the Physical Worldcited by 96
  8. 2024ChatScene: Knowledge-Enabled Safety-Critical Scenario Generation for Autonomous Vehiclescited by 93
  9. 2022CLRNet: Cross Layer Refinement Network for Lane Detectioncited by 82
  10. 2024CarLLaVA: Vision language models for camera-only closed-loop drivingcited by 57
  11. 2022AdvDO: Realistic Adversarial Attacks for Trajectory Predictioncited by 49
  12. 2024Continuously Learning, Adapting, and Improving: A Dual-Process Approach to Autonomous Drivingcited by 41
  13. 2024Benchmarking and Improving Bird's Eye View Perception Robustness in Autonomous Drivingcited by 41
  14. 2024Towards Robust Physical-world Backdoor Attacks on Lane Detectioncited by 26
  15. 2022SoK: On the Semantic AI Security in Autonomous Drivingcited by 22
  16. 2024LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusionscited by 18
  17. 2024MultiCorrupt: A Multi-Modal Robustness Dataset and Benchmark of LiDAR-Camera Fusion for 3D Object Detectioncited by 17
  18. 2023Attacking by Aligning: Clean-Label Backdoor Attacks on Object Detectioncited by 11
  19. 2023Adversarial Backdoor Attack by Naturalistic Data Poisoning on Trajectory Prediction in Autonomous Drivingcited by 6
  20. 2024R2-Bench: Benchmarking the Robustness of Referring Perception Models under Perturbationscited by 6
  21. 2024Revisiting Physical-World Adversarial Attack on Traffic Sign Recognition: A Commercial Systems Perspectivecited by 6
  22. 2024ISS-Scenario: Scenario-based Testing in CARLAcited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Towards Benchmarking and Assessing the Safety and Robustness of Autonomous Driving on Safety-critical Scenarios
  2. 2026Safe2Drive: Evaluating Safe Driving Behaviors of E2E Autonomous Driving Models
  3. 2025SAFE: Harnessing LLM for Scenario-Driven ADS Testing from Multimodal Crash Data ↗
  4. 2023SAFR-AV: Safety Analysis of Autonomous Vehicles using Real World Data -- An end-to-end solution for real world data driven scenario-based testing for pre-certification of AV stacks
  5. 2026HiDrive: A Closed-Loop Benchmark for High-Level Autonomous Driving
  6. 2025Advancing Autonomous Driving System Testing: Demands, Challenges, and Future Directions
  7. 2026Fail2Drive: Benchmarking Closed-Loop Driving Generalization
  8. 2024NeuroNCAP: Photorealistic Closed-loop Safety Testing for Autonomous Driving