Robot security: visual attacks that redirect vision-language-action policiesExpert
Enhancing Visual Task-Redirection Attacks on Vision-Language-Action Models via Closed-Loop Optimization
A printed image stuck on a wall made a real robot arm running a GR00T-based policy pick up a watch instead of the toy bee it was told to fetch in 8 of 15 trials, double the 4 of 15 of the earlier attack method, according to a preprint from Sun Yat-sen University and partners. In simulation the closed-loop attack, TRACO, redirected five VLA models in 85.2% of runs on seen layouts against 46.9% before.