Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspective
On the map: End-to-end autonomous driving → VLMs for autonomous driving
Abstract (arXiv)
Environmental illusions (eg., shadows, reflections, and tire marks) are naturally existing yet overlooked phenomena in real-world driving environments. They can disturb visual perception, leading to misinterpretation of the scene and posing serious safety risks to autonomous driving (AD) systems. However, existing researches largely overlook these phenomena, leaving a critical gap. To address this issue, we study AD robustness through the lane perception perspective, a fundamental task supporting core functions like cruise control and lane centering. We focus on two representative models: conventional lane detection (LD) and vision-language model-based systems (ADVLMs). In this work, we introduce the first benchmark, LanEvil++, for evaluating the robustness of lane perception under environmental illusions. LanEvil++ encompasses 14 types of illusions and leverages the CARLA simulator to generate 94 high-fidelity, fully controllable 3D scenes, yielding a dataset of 90,292 annotated images, 1,596 video clips, and 41,855 visual question answering pairs. Extensive evaluations demonstrate that environmental illusions substantially degrade the performance of state-of-the-art LD methods. On average, LD models experience a 5.27% drop in Accuracy and a 10.49% decline in F1-score, while ADVLMs show a 2.03% reduction in GPT-score and a 0.75% drop in Language-score. Among all illusions, shadows emerge as the most disruptive factor, reducing accuracy by up to 7.20%. Furthermore, closed-loop simulations reveal that these illusions can lead to incorrect driving decisions. Complementary real-world case studies highlight safety-critical failures in actual traffic scenes. To enhance robustness, we propose the Multimodal Illusion Defense Approach (MIDA). MIDA achieves substantial gains under challenging conditions, boosting robustness by 4.23% on LD models and 3.82% on ADVLMs.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in VLMs for autonomous driving, one of 9 directions in End-to-end autonomous driving. Builds on 96 of its 137 references that are in the map. First posted on arXiv 7 Jul 2026.
Builds on
96 of 137 references.
Closest ancestors · 4
Same direction, newest first
- 2025Are VLMs Ready for Autonomous Driving? An Empirical Study from the Reliability, Data, and Metric Perspectives7 Jan
- 2023DriveLM: Driving with Graph Visual Question Answering21 Dec
- 2023Reason2Drive: Towards Interpretable and Chain-based Reasoning for Autonomous Driving6 Dec
- 2023Dolphins: Multimodal Language Model for Driving1 Dec
Other references · 92
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2019Scalability in Perception for Autonomous Driving: Waymo Open Datasetcited by 2,436
- 2017CARLA: An Open Urban Driving Simulatorcited by 2,431
- 2014CIDEr: Consensus-based Image Description Evaluationcited by 2,027
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
- 2018BDD100K: A Diverse Driving Dataset for Heterogeneous Multitask Learningcited by 1,282
- 2016Playing for Data: Ground Truth from Computer Gamescited by 816
38 more
- 2020Simple Copy-Paste is a Strong Data Augmentation Method for Instance Segmentationcited by 595
- 2023DriveGPT4: Interpretable End-to-end Autonomous Driving via Large Language Modelcited by 455
- 2019KonIQ-10k: An ecologically valid database for deep learning of blind image quality assessmentcited by 351
- 2023GPT-Driver: Learning to Drive with GPTcited by 344
- 2023LMDrive: Closed-Loop End-to-End Driving with Large Language Modelscited by 301
- 2021MetaDrive: Composing Diverse Driving Scenarios for Generalizable Reinforcement Learningcited by 281
- 2023NuScenes-QA: A Multi-modal Visual Question Answering Benchmark for Autonomous Driving Scenariocited by 258
- 2023DriveMLM: Aligning Multi-Modal Large Language Models with Behavioral Planning States for Autonomous Drivingcited by 233
- 2023Driving with LLMs: Fusing Object-Level Vector Modality for Explainable Autonomous Drivingcited by 231
- 2017Spatial As Deep: Spatial CNN for Traffic Scene Understandingcited by 187
- 2017Playing for Benchmarkscited by 169
- 2023A Language Agent for Autonomous Drivingcited by 161
- 2023Drive Like a Human: Rethinking Autonomous Driving with Large Language Modelscited by 158
- 2025OmniDrive: A Holistic Vision-Language Dataset for Autonomous Driving with Counterfactual Reasoningcited by 142
- 2020Keep your Eyes on the Lane: Real-time Attention-guided Lane Detectioncited by 137
- 2018Towards End-to-End Lane Detection: an Instance Segmentation Approachcited by 129
- 2023Robo3D: Towards Robust and Reliable 3D Perception against Corruptionscited by 128
- 2021Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical Worldcited by 127
- 2020Ultra Fast Structure-aware Deep Lane Detectioncited by 121
- 2023Benchmarking Robustness of 3D Object Detection to Common Corruptions in Autonomous Drivingcited by 112
- 2023BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learningcited by 112
- 2020End-to-end Lane Shape Prediction with Transformerscited by 111
- 2018Transferable Adversarial Attacks for Image and Video Object Detectioncited by 109
- 2024Jailbreak Vision Language Models via Bi-Modal Adversarial Promptcited by 103
- 2020PolyLaneNet: Lane Estimation via Deep Polynomial Regressioncited by 95
- 2022Rethinking Efficient Lane Detection via Curve Modelingcited by 87
- 2024VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Modelscited by 83
- 2022CLRNet: Cross Layer Refinement Network for Lane Detectioncited by 82
- 2020CurveLane-NAS: Unifying Lane-Sensitive Architecture Search and Adaptive Point Blendingcited by 80
- 2022Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detectioncited by 79
- 2021RobustART: Benchmarking Robustness on Architecture Design and Training Techniquescited by 78
- 2020Key Points Estimation and Point Instance Segmentation Approach for Lane Detectioncited by 77
- 2020RESA: Recurrent Feature-Shift Aggregator for Lane Detectioncited by 77
- 2022A Keypoint-based Global Association Network for Lane Detectioncited by 68
- 2020Efficient Adversarial Attacks for Visual Object Trackingcited by 66
- 2021Focus on Local: Detecting Lane Marker from Bottom Up via Key Pointcited by 65
- 2020Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attackcited by 64
- 2024Fight Back Against Jailbreaking via Prompt Adversarial Tuningcited by 63
50 most cited of 92 All 92 (JSON)
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2021On Robustness of Lane Detection Models to Physical-World Adversarial Attacks in Autonomous Driving
- 2026The Constant Eye: Benchmarking and Bridging Appearance Robustness in Autonomous Driving
- 2025Progressive Bird's Eye View Perception for Safety-Critical Autonomous Driving: A Comprehensive Survey
- 2026Towards Reliable Vision-Language Models for Autonomous Driving
- 2025DriveSOTIF: Advancing Perception SOTIF Through Multimodal Large Language Models
- 2025LightEMMA: A Longitudinal Evaluation of Vision-Language Models for Autonomous Driving
- 2023LaneSegNet: Map Learning with Lane Segment Perception for Autonomous Driving
- 2024XLD: A Cross-Lane Dataset for Benchmarking Novel Driving View Synthesis