{"id":"https://openalex.org/W7164417979","doi":"https://doi.org/10.48550/arxiv.2606.11535","title":"Adversarial Attacks on Learned Policies for Surgical Robotic Tasks","display_name":"Adversarial Attacks on Learned Policies for Surgical Robotic Tasks","publication_year":2026,"publication_date":"2026-06-10","ids":{"openalex":"https://openalex.org/W7164417979","doi":"https://doi.org/10.48550/arxiv.2606.11535"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.11535","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.11535","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.11535","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023878608","display_name":"Shutong Jin","orcid":"https://orcid.org/0000-0003-0611-4239"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jin, Shutong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138410723","display_name":"Ziyang Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Ziyang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138419399","display_name":"Preethi Satish","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Satish, Preethi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138427680","display_name":"Paavan Gupta","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gupta, Paavan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018027629","display_name":"Florian T. Pokorny","orcid":"https://orcid.org/0000-0003-1114-6040"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pokorny, Florian T.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138403150","display_name":"Ken Goldberg","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Goldberg, Ken","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.97079998254776,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.97079998254776,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.00279999990016222,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11636","display_name":"Artificial Intelligence in Healthcare and Education","score":0.0020000000949949026,"subfield":{"id":"https://openalex.org/subfields/2718","display_name":"Health Informatics"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9027000069618225},{"id":"https://openalex.org/keywords/interrupt","display_name":"Interrupt","score":0.4853000044822693},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.45500001311302185},{"id":"https://openalex.org/keywords/robot","display_name":"Robot","score":0.45159998536109924},{"id":"https://openalex.org/keywords/reduction","display_name":"Reduction (mathematics)","score":0.29660001397132874},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.29580000042915344}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9027000069618225},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5275999903678894},{"id":"https://openalex.org/C41661131","wikidata":"https://www.wikidata.org/wiki/Q220764","display_name":"Interrupt","level":3,"score":0.4853000044822693},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.45500001311302185},{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.45159998536109924},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4081000089645386},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39089998602867126},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3231000006198883},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.29660001397132874},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.29580000042915344},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.27140000462532043},{"id":"https://openalex.org/C2776608160","wikidata":"https://www.wikidata.org/wiki/Q4785462","display_name":"Natural (archaeology)","level":2,"score":0.2700999975204468},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.266400009393692},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.2660999894142151},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.26089999079704285}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.11535","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.11535","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.11535","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.11535","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.4074304401874542,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Learning-based":[0],"policies":[1,48,157],"are":[2],"being":[3],"considered":[4],"to":[5,22,27,32,46,90,136],"augment":[6],"the":[7,16,40],"dexterity":[8],"of":[9,43,123],"human":[10],"surgeons":[11],"in":[12,49,163,168],"robot-assisted":[13],"surgery.":[14],"Can":[15],"end-to-end":[17,108],"mapping":[18],"from":[19,144],"visual":[20,62,130],"observations":[21],"robot":[23],"actions":[24,76],"be":[25,159],"vulnerable":[26],"adversarial":[28,44,83,125],"attacks,":[29,59,70],"potentially":[30],"leading":[31],"patient":[33],"injury?":[34],"In":[35,116],"this":[36],"paper,":[37],"we":[38,118],"present":[39],"first":[41],"study":[42],"threats":[45],"learning-based":[47],"surgical":[50,99,169],"robotics.":[51],"We":[52,80],"investigate":[53],"two":[54,98],"threat":[55],"modes:":[56],"(a)":[57],"disruptive":[58],"where":[60,71],"imperceptible":[61],"perturbations":[63,73],"interrupt":[64],"policy":[65,75,91,109],"execution,":[66],"and":[67,93,102,114,152],"(b)":[68],"steering":[69],"such":[72,132],"steer":[74],"toward":[77],"attacker-specified":[78],"directions.":[79],"formulate":[81],"three":[82,107],"attack":[84],"methods,":[85],"each":[86],"with":[87],"increasing":[88],"access":[89],"information,":[92],"evaluate":[94],"their":[95],"impact":[96],"on":[97],"subtasks:":[100],"debridement":[101,151],"suturing.":[103],"Our":[104],"evaluation":[105],"covers":[106],"architectures:":[110],"ACT,":[111],"Diffusion":[112],"Policy,":[113],"Pi0.":[115],"addition,":[117],"introduce":[119],"a":[120],"new":[121],"class":[122],"photometric":[124],"attacks":[126],"that":[127,155],"mimic":[128],"natural":[129],"changes,":[131],"as":[133],"lighting":[134],"variations,":[135],"generate":[137],"effective":[138],"yet":[139],"visually":[140],"plausible":[141],"perturbations.":[142],"Results":[143],"560":[145],"physical":[146],"experiments":[147],"using":[148],"phantoms":[149],"for":[150],"suturing":[153],"suggest":[154],"state-of-the-art":[156],"can":[158],"significantly":[160],"disrupted,":[161],"resulting":[162],"an":[164],"average":[165],"61%":[166],"reduction":[167],"subtask":[170],"success":[171],"rates.":[172],"Project":[173],"page:":[174],"https://sites.google.com/view/adversary-surgery":[175]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-12T00:00:00"}