This paper investigates runtime monitoring of perception systems. Perception is a critical component of high-integrity applications of robotics and autonomous systems, such as self-driving cars. In these applications, failure of perception systems may put human life at risk, and a broad adoption of these technologies requires the development of methodologies to guarantee and monitor safe operation. Despite the paramount importance of perception, currently there is no formal approach for system-level perception monitoring. In this paper, we formalize the problem of runtime fault detection and identification in perception systems and present a framework to model diagnostic information using a diagnostic graph. We then provide a set of deterministic, probabilistic, and learning-based algorithms that use diagnostic graphs to perform fault detection and identification. Moreover, we investigate fundamental limits and provide deterministic and probabilistic guarantees on the fault detection and identification results. We conclude the paper with an extensive experimental evaluation, which recreates several realistic failure modes in the LGSVL open-source autonomous driving simulator, and applies the proposed system monitors to a state-of-the-art autonomous driving software stack (Baidu's Apollo Auto). The results show that the proposed system monitors outperform baselines, have the potential of preventing accidents in realistic autonomous driving scenarios, and incur a negligible computational overhead.
翻译:本文调查了感知系统的运行时间监测。 感知是机器人和自主系统(如自行驾驶的汽车)高完整性应用的关键组成部分。 在这些应用中,感知系统的故障可能危及人的生命,而广泛采用这些技术需要制定保证和监测安全操作的方法。 尽管感知至关重要,但目前没有系统一级感知监测的正式方法。 在本文中,我们正式确定了在感知系统中运行时间发现和识别错漏的问题,并提出了一个使用诊断图进行模型诊断信息的框架。 然后,我们提供了一套确定性、概率性和基于学习的算法,使用诊断图进行错觉和识别。此外,我们调查基本限度,提供错觉发现和识别结果的确定性和概率性保障。我们以广泛的实验性评价来结束文件,在LGSVL公开源自主驱动模拟器中重新创建了几种现实的失灵模式,并将拟议的系统监测器应用到一个最先进的自主驱动软件堆(Baidu's develimical assimational complainal assessional disal resulations)。结果显示, 一种不现实的自动计算模型。