- Malfunction of sensors - False positive and false negative in prediction - Probabilistic planning and decision making - Training in closed dataset is impossible to deal with unlimited, unpredictable scenes in open envs - Adversarial attack on purpose - Mixed self-driving and human driving makes the case even more complicated - ……