{"id":"https://openalex.org/W7164910410","doi":"https://doi.org/10.48550/arxiv.2606.16788","title":"SoK: Security and Privacy of Foundation-Model-Powered Robots","display_name":"SoK: Security and Privacy of Foundation-Model-Powered Robots","publication_year":2026,"publication_date":"2026-06-15","ids":{"openalex":"https://openalex.org/W7164910410","doi":"https://doi.org/10.48550/arxiv.2606.16788"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.16788","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16788","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.16788","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138715465","display_name":"Xueluan Gong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gong, Xueluan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138739639","display_name":"Chen Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Chen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138715397","display_name":"Jinxin Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Jinxin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138725998","display_name":"Qian Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Qian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138692660","display_name":"Kwok-Yan Lam","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lam, Kwok-Yan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10709","display_name":"Social Robot Interaction and HRI","score":0.33629998564720154,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10709","display_name":"Social Robot Interaction and HRI","score":0.33629998564720154,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.07689999788999557,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.04749999940395355,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robot","display_name":"Robot","score":0.5267999768257141},{"id":"https://openalex.org/keywords/corporate-governance","display_name":"Corporate governance","score":0.5103999972343445},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.478300005197525},{"id":"https://openalex.org/keywords/embodied-cognition","display_name":"Embodied cognition","score":0.43059998750686646},{"id":"https://openalex.org/keywords/foundation","display_name":"Foundation (evidence)","score":0.4032999873161316},{"id":"https://openalex.org/keywords/robotics","display_name":"Robotics","score":0.40310001373291016},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.396699994802475}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6301000118255615},{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.5267999768257141},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.5103999972343445},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.478300005197525},{"id":"https://openalex.org/C100609095","wikidata":"https://www.wikidata.org/wiki/Q1335050","display_name":"Embodied cognition","level":2,"score":0.43059998750686646},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41819998621940613},{"id":"https://openalex.org/C2780966255","wikidata":"https://www.wikidata.org/wiki/Q5474306","display_name":"Foundation (evidence)","level":2,"score":0.4032999873161316},{"id":"https://openalex.org/C34413123","wikidata":"https://www.wikidata.org/wiki/Q170978","display_name":"Robotics","level":3,"score":0.40310001373291016},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.396699994802475},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.3831000030040741},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.33820000290870667},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3361000120639801},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.322299987077713},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.3190999925136566},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3149999976158142},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3107999861240387},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.29670000076293945},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.29600000381469727},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2881999909877777},{"id":"https://openalex.org/C2778464652","wikidata":"https://www.wikidata.org/wiki/Q309849","display_name":"Open research","level":2,"score":0.2669999897480011},{"id":"https://openalex.org/C169087156","wikidata":"https://www.wikidata.org/wiki/Q2131593","display_name":"Framing (construction)","level":2,"score":0.25589999556541443},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.25440001487731934}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.16788","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16788","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.16788","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16788","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Foundation":[0,116],"models":[1],"are":[2,197],"reshaping":[3],"robotics":[4],"by":[5,176],"enabling":[6],"robots":[7],"to":[8,38,199,216],"interpret":[9],"open-ended":[10],"instructions,":[11],"reason":[12],"over":[13],"multimodal":[14],"contexts,":[15],"and":[16,28,44,86,128,154,173,179,193,213,225],"operate":[17],"in":[18],"complex,":[19],"open-world":[20],"environments.":[21],"However,":[22],"their":[23],"integration":[24],"also":[25],"introduces":[26],"security":[27],"privacy":[29],"(S&P)":[30],"risks":[31,78],"that":[32,142,196],"extend":[33],"beyond":[34],"the":[35,69,105,115],"FMs":[36],"themselves":[37],"embodied":[39],"execution":[40],"pipelines,":[41],"supporting":[42],"ecosystems,":[43],"broader":[45],"governance":[46],"impacts.":[47],"Existing":[48],"literature":[49],"reviews":[50],"provide":[51,217],"valuable":[52],"insights":[53],"but":[54],"often":[55],"focus":[56],"on":[57,134,206],"specific":[58],"FM":[59],"types,":[60],"risk":[61],"categories,":[62],"mitigation":[63],"strategies,":[64],"or":[65],"trust":[66,150],"boundaries.":[67],"Consequently,":[68],"field":[70],"lacks":[71],"a":[72,97,139,202,218],"unified":[73],"structure":[74],"for":[75,103,221],"analyzing":[76,104],"where":[77,87],"originate,":[79],"how":[80],"they":[81],"propagate":[82],"across":[83],"robotic":[84,229],"systems,":[85],"mitigations":[88],"should":[89],"intervene.":[90],"To":[91],"address":[92],"this":[93,135,177],"gap,":[94],"we":[95,137,181,209],"propose":[96],"progressive":[98],"F-E-S-G":[99,149],"structural":[100],"boundary":[101],"framework":[102,111,178],"S&P":[106],"of":[107],"FM-powered":[108,228],"robots.":[109],"The":[110],"comprises":[112],"four":[113],"layers:":[114],"model":[117],"layer":[118,122,126,131],"(F),":[119],"Embodied":[120],"system":[121,171],"(E),":[123],"Supporting":[124],"ecosystem":[125],"(S),":[127],"Governance":[129],"impact":[130],"(G).":[132],"Building":[133],"structure,":[136],"develop":[138],"multi-level":[140],"taxonomy":[141],"organizes":[143],"prior":[144],"studies":[145],"along":[146],"three":[147],"levels:":[148],"boundary,":[151],"security-privacy":[152],"concerns,":[153],"risk-mitigation":[155],"perspectives.":[156],"We":[157],"further":[158],"annotate":[159],"each":[160],"study":[161],"using":[162],"fine-grained":[163],"coding":[164],"attributes,":[165],"including":[166],"target,":[167],"lifecycle":[168],"stage,":[169],"mechanism,":[170],"access,":[172],"effect.":[174],"Guided":[175],"taxonomy,":[180],"systematize":[182],"96":[183],"papers.":[184],"Our":[185],"analysis":[186],"uncovers":[187],"multiple":[188],"threat":[189],"patterns,":[190],"defense":[191],"mismatches,":[192],"evaluation":[194],"gaps":[195],"difficult":[198],"identify":[200,210],"from":[201],"single-boundary":[203],"perspective.":[204],"Based":[205],"these":[207],"findings,":[208],"open":[211],"challenges":[212],"future":[214],"directions":[215],"research":[219],"agenda":[220],"developing":[222],"secure,":[223],"privacy-preserving,":[224],"responsibly":[226],"governed":[227],"systems.":[230]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-17T00:00:00"}