Slashdot Mirror


Researchers Trick Tesla Autopilot Into Steering Into Oncoming Traffic (arstechnica.com)

An anonymous reader quotes a report from Ars Technica: Researchers have devised a simple attack that might cause a Tesla to automatically steer into oncoming traffic under certain conditions. The proof-of-concept exploit works not by hacking into the car's onboard computing system. Instead, it works by using small, inconspicuous stickers that trick the Enhanced Autopilot of a Model S 75 into detecting and then following a change in the current lane. Researchers from Tencent's Keen Security Lab recently reverse-engineered several of Tesla's automated processes to see how they reacted when environmental variables changed. One of the most striking discoveries was a way to cause Autopilot to steer into oncoming traffic. The attack worked by carefully affixing three stickers to the road. The stickers were nearly invisible to drivers, but machine-learning algorithms used by by the Autopilot detected them as a line that indicated the lane was shifting to the left. As a result, Autopilot steered in that direction.

The researchers noted that Autopilot uses a variety of measures to prevent incorrect detections. The measures include the position of road shoulders, lane histories, and the size and distance of various object. [A section of the researchers' 37-page report] showed how researchers could tamper with a Tesla's autowiper system to activate wipers on when rain wasn't falling. Unlike traditional autowiper systems -- which use optical sensors to detect moisture -- Tesla's system uses a suite of cameras that feeds data into an artificial intelligence network to determine when wipers should be turned on. The researchers found that -- in much the way it's easy for small changes in an image to throw off artificial intelligence-based image recognition (for instance, changes that cause an AI system to mistake a panda for a gibbon) -- it wasn't hard to trick Tesla's autowiper feature into thinking rain was falling even when it was not. So far, the researchers have only been able to fool autowiper when they feed images directly into the system. Eventually, they said, it may be possible for attackers to display an "adversarial image" that's displayed on road signs or other cars that do the same thing.
In a statement, Tesla officials said that the vulnerabilities addressed in the report have been fixed via security update in 2017, "followed by another comprehensive security update in 2018, both of which we released before this group reported this research to us." They added: "The rest of the findings are all based on scenarios in which the physical environment around the vehicle is artificially altered to make the automatic windshield wipers or Autopilot system behave differently, which is not a realistic concern given that a driver can easily override Autopilot at any time by using the steering wheel or brakes and should always be prepared to do so and can manually operate the windshield wiper settings at all times."

10 of 186 comments (clear)

  1. Film at 11 by MrLogic17 · · Score: 4, Insightful

    So, optical illusions fool a driver. They just fund a kind that fools a digital driver. Film at 11

    Because machines "think" very differently from people, the optical illusions will be very different. No surprise there,

    Next we'll get a headline that if you put a number sticker over speed limit signs, human drivers can be tricked into driving at the wrong speed - even though very clearly the stickers have the wrong UV patterns and react to LIDAR clearly in an altered way.

    1. Re:Film at 11 by Junta · · Score: 5, Insightful

      The difference being a human that sees lane markers leading into active oncoming traffic will decide there are shenigans and not follow.

      It points to a big gap in machine learning strategies in general: Training generally happens focused on positive correlations and not a lot of injection of maliciously designed data. So a well trained model is dumb and just says 'training says always follow lines' and follows it right head on into traffic.

      This is also a sign of likely problems in road construction, where markings are frequently very messed up.

      This is not 'a machine can be fooled like a human', it's a reminder that the machine is still a *lot* dumber than a human.

      --
      XML is like violence. If it doesn't solve the problem, use more.
    2. Re:Film at 11 by larryjoe · · Score: 4, Informative

      The difference being a human that sees lane markers leading into active oncoming traffic will decide there are shenigans and not follow.

      Complete bollocks. Care to set up a situation like that and see how many drivers follow the dots blindly?

      Unfortunately this situation occurs quite frequently at road construction sites where new lanes are overlaid over existing lanes. The old and new sets of lane markings make lane localization difficult at times even for humans to know where the true lane lies. Often in these cases, the human will follow the preceding and surrounding traffic in an attempt to avoid collisions, even if the true lane appears to be otherwise.

  2. Misleading headline by honestmonkey · · Score: 5, Informative

    They, in fact, did not "steer a Tesla into oncoming traffic", but instead made the software "think" there was a lane line where there was none. The car did go the wrong way (or would have if they'd let it), but there was no traffic. They even said, if there had been cars there, the Tesla likely would have noticed them and not blithely crashed head on.

    --
    Everything you know is wrong, Just forget the words and sing along.
    1. Re:Misleading headline by Shotgun · · Score: 4, Insightful

      They even said, if there had been cars there, the Tesla likely would have noticed them and not blithely crashed head on.

      And if the AoA sensor was reading wrong, the pilot likely would have taken control and not let the plane crash. Those "likely" sure are dangerous.

      --
      Aah, change is good. -- Rafiki
      Yeah, but it ain't easy. -- Simba
  3. My research indicates... by bravehamster · · Score: 4, Insightful

    I found that it's super easy to make human drivers crash with a simple $5 laser.

    It's amazing how many of our systems only work with the underlying assumption that we're not actively trying to murder each other at any given moment.

    --
    ---- El diablo esta en mis pantalones! Mire, mire!
  4. Re:True But..... by Anonymous Coward · · Score: 3, Insightful

    Real airline pilots have tons of training, understand the limits of the systems, and are literally PAID over six figures to do the terribly boring job of monitoring the system. Tesla owners could have zero training, are certainly not privy to the actual system limitations, and are shown tons of marketing indicating the main benefit of autopilot is the ability to NOT pay attention.

    But I can see how they are "basically the same thing".

  5. Re:Lidar hacking would be worse by dromgodis · · Score: 3, Funny
  6. Like sitting beside a first-time teen driver by clawsoon · · Score: 4, Insightful

    a driver can easily override Autopilot at any time by using the steering wheel or brakes and should always be prepared to do so

    You're not in control, but you have to be constantly ready to take control. You don't have insight into its mental processes so you never know what it's about to do, but you have to be constantly ready to react to what it just did.

    And people find driving with Autopilot to be less stressful than driving without it? I guess I'm different from most people.

    1. Re:Like sitting beside a first-time teen driver by Anonymous Coward · · Score: 3, Informative

      While "autopilot" is engaged, you do have visibility to "what the car sees" on the screen. That tells you what obstacles it sees as well as where it thinks the vehicle lanes are. If they don't seem to make sense to what you see, then it's time to take over.

      Like the "autopilot" in planes, when the cruise control take over, it reduces cognitive load because the driver doesn't need to pay attention to as many things. That translates into less stress and the ability to pay attention for longer.

      If the driver does other things instead, that's really the driver's fault. Though Tesla's marketing isn't really helping on that front, either.