Secure Control of Connected and Automated Vehicles Using Trust-Aware Robust Event-Triggered Control Barrier Functions
H M Sabbir Ahmad, Ehsan Sabouni, Akua Dickson, Wei Xiao, Christos G. Cassandras, Wenchao Li
TL;DR
This work tackles secure, decentralized coordination of CAVs at conflict zones under V2X and sensing uncertainties and adversarial threats. It introduces a trust-aware robust event-triggered control framework based on Control Barrier Functions, where per-vehicle trust modulates safety constraints and an attack mitigation strategy preserves safety while restoring normal traffic flow. The approach provides formal forward-invariance guarantees and demonstrates improved throughput and energy performance in SUMO and CARLA simulations, along with resilience to Sybil and Bias Injection attacks and protection against false positives. The framework is designed to be largely agnostic to the specific trust implementation and can be complemented by standard cryptographic measures for defense-in-depth, offering a scalable path to safer real-world CAV networks.
Abstract
We address the security of a network of Connected and Automated Vehicles (CAVs) cooperating to safely navigate through a conflict area (e.g., traffic intersections, merging roadways, roundabouts). Previous studies have shown that such a network can be targeted by adversarial attacks causing traffic jams or safety violations ending in collisions. We focus on attacks targeting the V2X communication network used to share vehicle data and consider as well uncertainties due to noise in sensor measurements and communication channels. To combat these, motivated by recent work on the safe control of CAVs, we propose a trust-aware robust event-triggered decentralized control and coordination framework that can provably guarantee safety. We maintain a trust metric for each vehicle in the network computed based on their behavior and used to balance the tradeoff between conservativeness (when deeming every vehicle as untrustworthy) and guaranteed safety and security. It is important to highlight that our framework is invariant to the specific choice of the trust framework. Based on this framework, we propose an attack detection and mitigation scheme which has twofold benefits: (i) the trust framework is immune to false positives, and (ii) it provably guarantees safety against false positive cases. We use extensive simulations (in SUMO and CARLA) to validate the theoretical guarantees and demonstrate the efficacy of our proposed scheme to detect and mitigate adversarial attacks.
