TrajRS: Towards Certified Robustness in Pedestrian Trajectory Prediction
Not on the map. Why?
Abstract (arXiv)
The robustness of trajectory prediction models is crucial for developing safe autonomous driving systems. Adversarial attacks on trajectory prediction can significantly impair the accuracy of predicted trajectories, leading to hazardous driving behaviors. While heuristic defense strategies have been implemented to enhance the robustness of trajectory prediction models, these measures often fail against more sophisticated, targeted adversarial attacks. Hence, there is a pressing need to establish verifiable safety assurances for trajectory prediction models. In this paper, we extend the traditional Randomized Smoothing framework to "TrajRS", which provides a certified robust radius for smoothed trajectory predictors. We clarify and expand the formal definitions of robustness in trajectory prediction and tailor the practical TrajRS scheme specifically to "robustness for the optimal prediction" and "robustness for all possible predictions". An extensive set of experiments demonstrates that TrajRS effectively achieves robustness certification for all smoothed pedestrian trajectory predictors in this work.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 25 of its 39 references that are in the map. First posted on arXiv 27 Jun 2026.
Builds on
25 of 39 references.
References · 25
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,268
- 2018Social GAN: Socially Acceptable Trajectories with Generative Adversarial Networkscited by 690
- 2018Certified Robustness to Adversarial Examples with Differential Privacycited by 468
- 2021AgentFormer: Agent-Aware Transformers for Socio-Temporal Multi-Agent Forecastingcited by 331
- 2020Social-STGCNN: A Social Spatio-Temporal Graph Convolutional Neural Network for Human Trajectory Predictioncited by 325
- 2018SoPhie: An Attentive GAN for Predicting Paths Compliant to Social and Physical Constraintscited by 298
- 2019CoverNet: Multimodal Behavior Prediction using Trajectory Setscited by 259
- 2022Stochastic Trajectory Prediction via Motion Indeterminacy Diffusioncited by 185
- 2018Certified Adversarial Robustness with Additive Noisecited by 180
- 2022On Adversarial Robustness of Trajectory Prediction for Autonomous Vehiclescited by 90
13 more
- 2022Remember Intentions: Retrospective-Memory-based Trajectory Predictioncited by 86
- 2019Conditional Generative Neural System for Probabilistic Trajectory Predictioncited by 76
- 2022AdvDO: Realistic Adversarial Attacks for Trajectory Predictioncited by 49
- 2022Non-Probability Sampling Network for Stochastic Human Trajectory Predictioncited by 46
- 2022Enhancing Adversarial Training with Second-Order Statistics of Weightscited by 42
- 2025MoFlow: One-Step Flow Matching for Human Trajectory Forecasting via Implicit Maximum Likelihood Estimation based Distillationcited by 31
- 2022Semi-supervised Semantics-guided Adversarial Training for Trajectory Predictioncited by 12
- 2025Multi-modal Knowledge Distillation-based Human Trajectory Forecastingcited by 10
- 2023TrajPAC: Towards Robustness Verification of Pedestrian Trajectory Prediction Modelscited by 8
- 2025SocialMOIF: Multi-Order Intention Fusion for Pedestrian Trajectory Predictioncited by 7
- 2024Certified Human Trajectory Predictioncited by 6
- 2025CluCERT: Certifying LLM Robustness via Clustering-Guided Denoising Smoothingcited by 6
- 2025Reconcile Certified Robustness and Accuracy for DNN-based Smoothed Majority Vote Classifiercited by 2
Built on by
Not cited yet.