Defenses against Evasion Attacks in the Eyes of Automotive Industry: Review from a Practical Perspective

Evasion attacks targeting perception systems, particularly image processing, pose a significant threat to the security, safety, and reliability of automated driving (AD). While a variety of defense methods have been proposed from research side, selecting a suitable one for industry use cases remains a challenge: Surveys and evaluations of state-of-the-art methods concentrate mostly on methodological instead of functional differences, and fail to draw a connection to defined industry requirements. The leaps in perception system complexity and automotive security standardization activities have widened this gap alarmingly. This survey aims to bridge concurrent research and novel practical application demands. For this we derive a concrete set of practical requirements from existing industry standards and automotive-specific requirements. This results in a novel, life-cycle inspired taxonomy and evaluation criteria for defense methods tailored to the industry applicability perspective. Lastly, we demonstrate the approach by reviewing and comparing a broad range of 78 state-of-the-art defense methods from literature in light of these requirements. We hope this work fosters research on defense method evaluation, and helps to bridge the gap between research and fast adoption in the automotive domain.