Evaluating Autonomous Vehicle Resilience

Black Hat USA 2025 · Day 1 · Briefings

Zoox's product security team applied fuzzing techniques borrowed from software security to the teleoperation system of their autonomous robotaxi fleet. By generating over 50,000 mutated driving scenario variants from real-world data and running them in high-fidelity simulation, the team uncovered safety-critical edge cases — including collisions caused by a subtle bug in the AI's prediction module — that would have been impossible to find through manual testing. ---

AI review

Zoox applies fuzzing to AV teleoperation and finds a real prediction-module bug — credit where it's due, the methodology transfer is legitimate. But this is a product security war story from an insider with limited disclosure, not a generalizable research contribution. The field learns the concept; only Zoox gets the fix.

Watch on YouTube