{"id":"https://openalex.org/W4416851495","doi":"https://doi.org/10.1145/3733800.3763262","title":"Exploring the Robustness of Vision-Language-Action Models against Sensor Attacks","display_name":"Exploring the Robustness of Vision-Language-Action Models against Sensor Attacks","publication_year":2025,"publication_date":"2025-10-13","ids":{"openalex":"https://openalex.org/W4416851495","doi":"https://doi.org/10.1145/3733800.3763262"},"language":null,"primary_location":{"id":"doi:10.1145/3733800.3763262","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733800.3763262","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 Workshop on Large AI Systems and Models with Privacy and Security Analysis","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3733800.3763262","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024092507","display_name":"Xuancun Lu","orcid":"https://orcid.org/0009-0008-5596-3839"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuancun Lu","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0008-5596-3839","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007019714","display_name":"Jiaxiang Chen","orcid":"https://orcid.org/0009-0000-3202-2878"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiaxiang Chen","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0000-3202-2878","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101689148","display_name":"Shilin Xiao","orcid":"https://orcid.org/0009-0008-1319-0428"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shilin Xiao","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0008-1319-0428","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038115411","display_name":"Zizhi Jin","orcid":"https://orcid.org/0000-0003-3251-456X"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zizhi Jin","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-3251-456X","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001201289","display_name":"Ruochen Zhou","orcid":"https://orcid.org/0009-0006-4510-2571"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Ruochen Zhou","raw_affiliation_strings":["Hong Kong University of Science and Technology, Hong Kong, Hong Kong"],"raw_orcid":"https://orcid.org/0009-0006-4510-2571","affiliations":[{"raw_affiliation_string":"Hong Kong University of Science and Technology, Hong Kong, Hong Kong","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017116027","display_name":"Xiaoyu Ji","orcid":"https://orcid.org/0000-0002-1101-0007"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoyu Ji","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-1101-0007","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060351020","display_name":"Wenyuan Xu","orcid":"https://orcid.org/0000-0002-5043-9148"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenyuan Xu","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-5043-9148","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.7588,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.89728057,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"11","last_page":"18"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8669999837875366,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8669999837875366,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.012600000016391277,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.00989999994635582,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.869700014591217},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.7664999961853027},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.36320000886917114},{"id":"https://openalex.org/keywords/robot","display_name":"Robot","score":0.357699990272522},{"id":"https://openalex.org/keywords/wireless-sensor-network","display_name":"Wireless sensor network","score":0.3343999981880188}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.869700014591217},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.7664999961853027},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6254000067710876},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3855000138282776},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.36320000886917114},{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.357699990272522},{"id":"https://openalex.org/C24590314","wikidata":"https://www.wikidata.org/wiki/Q336038","display_name":"Wireless sensor network","level":2,"score":0.3343999981880188},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3172000050544739},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2890999913215637},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2879999876022339},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.26109999418258667},{"id":"https://openalex.org/C74763872","wikidata":"https://www.wikidata.org/wiki/Q5276157","display_name":"Digital sensors","level":2,"score":0.2572000026702881}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3733800.3763262","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733800.3763262","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 Workshop on Large AI Systems and Models with Privacy and Security Analysis","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3733800.3763262","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733800.3763262","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 Workshop on Large AI Systems and Models with Privacy and Security Analysis","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W2194775991","https://openalex.org/W3154528133","https://openalex.org/W4300824008","https://openalex.org/W4327519267","https://openalex.org/W4385403811","https://openalex.org/W4388294983","https://openalex.org/W4414051084","https://openalex.org/W4414079054"],"related_works":[],"abstract_inverted_index":{"The":[0],"Vision-Language-Action":[1],"(VLA)":[2],"models":[3,34,84,117,156,173],"enhance":[4],"the":[5,58,71,78,92,113,181,194,207,224],"ability":[6],"of":[7,57,82,94,115,154,183,210],"robots":[8],"to":[9,36,45,111,177,205],"perform":[10],"complex":[11],"tasks":[12,162,187],"and":[13,30,67,80,108,135,144,163,188,201],"are":[14],"widely":[15],"considered":[16],"a":[17,62],"promising":[18],"pathway":[19],"toward":[20],"achieving":[21],"Artificial":[22],"General":[23],"Intelligence":[24],"(AGI).":[25],"By":[26],"integrating":[27],"visual,":[28],"language,":[29],"action":[31],"modalities,":[32],"VLA":[33,83,116,133,155,172,211],"aim":[35],"establish":[37],"an":[38,106],"end-to-end":[39,109],"strategy":[40],"from":[41],"raw":[42],"sensor":[43,55,96,119,139,178],"perception":[44,56],"corresponding":[46],"robotic":[47],"actions.":[48],"Under":[49],"this":[50,102],"direct":[51],"perception-to-action":[52],"mechanism,":[53],"robust":[54],"physical":[59,125],"world":[60],"becomes":[61],"primary":[63],"prerequisite":[64],"for":[65,197],"secure":[66],"reliable":[68,208],"deployment":[69,209],"in":[70,132,213],"real":[72],"world.":[73],"While":[74],"recent":[75],"studies":[76],"on":[77,88],"robustness":[79,114,152,199],"security":[81],"have":[85],"primarily":[86],"focused":[87],"digital":[89],"input":[90],"perturbations,":[91],"impact":[93],"physical-world":[95],"interference":[97],"remains":[98],"underexplored.":[99],"To":[100],"bridge":[101],"gap,":[103],"we":[104,122],"conduct":[105,150],"automatic":[107],"framework":[110],"evaluate":[112],"against":[118],"attacks.":[120],"Specifically,":[121],"review":[123],"existing":[124],"attack":[126,165],"techniques":[127],"targeting":[128,142,146],"sensors":[129],"commonly":[130],"used":[131],"systems":[134,212],"simulate":[136],"eight":[137],"typical":[138],"attacks":[140],"(six":[141],"cameras":[143],"two":[145],"microphones).":[147],"We":[148],"then":[149],"large-scale":[151],"evaluations":[153],"with":[157,180],"diverse":[158],"architectures,":[159],"considering":[160],"multiple":[161],"varying":[164,185],"intensities.":[166],"Experimental":[167],"results":[168],"indicate":[169],"that":[170],"current":[171],"can":[174],"be":[175],"sensitive":[176],"attacks,":[179],"degree":[182],"vulnerability":[184],"across":[186],"model":[189],"types.":[190],"Our":[191],"findings":[192],"highlight":[193],"urgent":[195],"need":[196],"systematic":[198],"assessment":[200],"potential":[202],"mitigation":[203],"strategies":[204],"ensure":[206],"real-world":[214],"environments.":[215],"For":[216],"more":[217],"information,":[218],"please":[219],"visit":[220],"our":[221],"project":[222],"at":[223],"following":[225],"link:":[226],"https://zjushine.github.io/lamps-vla-robustness.github.io/":[227]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-12-01T00:00:00"}