TrajRS Enhances Certified Robustness for Pedestrian Trajectory Prediction

Liang Zhang, Gaojie Jin, Yao Shi, Quanzhi Li, Cheng-Chao Huang, David N. Jansen, Lijun Zhang· June 30, 2026 View original

▶ The 2-minute explainer

Summary

TrajRS extends Randomized Smoothing to provide certified robust radii for pedestrian trajectory predictors, enhancing safety in autonomous driving systems. It clarifies robustness definitions and offers a practical scheme for both optimal and all possible predictions, demonstrating effective robustness certification against adversarial attacks.

This paper introduces TrajRS, a significant advancement in ensuring the safety and reliability of autonomous driving systems by improving the robustness of trajectory prediction models. Adversarial attacks can severely compromise these models, leading to inaccurate predictions and potentially dangerous driving behaviors. While existing heuristic defenses offer some protection, they often fall short against sophisticated, targeted attacks. TrajRS addresses this by extending the Randomized Smoothing framework to provide a certified robust radius for smoothed trajectory predictors. The research formally defines and expands upon robustness in trajectory prediction, tailoring the TrajRS scheme to ensure "robustness for the optimal prediction" and "robustness for all possible predictions." Extensive experiments confirm that TrajRS effectively achieves robustness certification for various smoothed pedestrian trajectory predictors, marking a crucial step towards verifiable safety assurances in autonomous vehicles.

Why it matters

For professionals in autonomous vehicle development, this research offers a method to build more verifiably safe and robust trajectory prediction systems, directly addressing a critical challenge in deploying self-driving technology.

How to implement this in your domain

  1. 1Evaluate TrajRS as a potential defense mechanism against adversarial attacks on your autonomous driving trajectory prediction models.
  2. 2Integrate the certified robust radius concept into your safety assurance and validation processes for AI components.
  3. 3Explore applying Randomized Smoothing techniques, as extended by TrajRS, to other critical perception or prediction tasks in autonomous systems.
  4. 4Collaborate with research teams to adapt and implement TrajRS for specific operational design domains and sensor modalities.

Who benefits

AutomotiveRoboticsTransportationDefenseAI Safety

Key takeaways

  • TrajRS provides certified robustness for pedestrian trajectory prediction models.
  • It extends Randomized Smoothing for verifiable safety assurances.
  • The framework addresses sophisticated adversarial attacks in autonomous driving.
  • TrajRS improves robustness for both optimal and all possible predictions.

Original post by Liang Zhang, Gaojie Jin, Yao Shi, Quanzhi Li, Cheng-Chao Huang, David N. Jansen, Lijun Zhang

"arXiv:2606.28716v1 Announce Type: new Abstract: The robustness of trajectory prediction models is crucial for developing safe autonomous driving systems. Adversarial attacks on trajectory prediction can significantly impair the accuracy of predicted trajectories, leading to hazar…"

View on X

Originally posted by Liang Zhang, Gaojie Jin, Yao Shi, Quanzhi Li, Cheng-Chao Huang, David N. Jansen, Lijun Zhang on X · view source

Want to go deeper?

Turn these trends into skills with Learnijoy's hands-on AI & tech courses.

Explore courses