{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T16:04:41Z","timestamp":1781366681621,"version":"3.54.1"},"reference-count":38,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100004012","name":"Jane and Aatos Erkko Foundation","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100004012","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/access.2025.3595424","type":"journal-article","created":{"date-parts":[[2025,8,4]],"date-time":"2025-08-04T18:46:18Z","timestamp":1754333178000},"page":"137505-137513","source":"Crossref","is-referenced-by-count":3,"title":["From Prompts to Motors: Man-in-the-Middle Attacks on LLM-Enabled Vacuum Robots"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1458-3836","authenticated-orcid":false,"given":"Asif","family":"Shaikh","sequence":"first","affiliation":[{"name":"Faculty of Information Technology and Communication Sciences, Tampere University, Tampere, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ayg\u00fcn","family":"Varol","sequence":"additional","affiliation":[{"name":"Faculty of Information Technology and Communication Sciences, Tampere University, Tampere, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2216-7296","authenticated-orcid":false,"given":"Johanna","family":"Virkki","sequence":"additional","affiliation":[{"name":"Faculty of Information Technology and Communication Sciences, Tampere University, Tampere, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/s11370-024-00550-5"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/lra.2025.3531153"},{"key":"ref3","article-title":"LLM-based human-robot collaboration framework for manipulation tasks","author":"Liu","year":"2023","journal-title":"arXiv:2308.14972"},{"key":"ref4","article-title":"Towards human awareness in robot task planning with large language models","author":"Liu","year":"2024","journal-title":"arXiv:2404.11267"},{"key":"ref5","article-title":"Nadine: An LLM-driven intelligent social robot with affective capabilities and human-like memory","author":"Kang","year":"2024","journal-title":"arXiv:2405.20189"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/sii58957.2024.10417171"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/wrcsara64167.2024.10685831"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/icocet63343.2024.10730448"},{"key":"ref9","volume-title":"Unitree Go2 Robot Dog","year":"2025"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/s10514-023-10139-z"},{"key":"ref11","volume-title":"Chinese Robot Vacuum Cleaner Company Reveals Model With an AI-powered Arm","year":"2025"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3582269.3615599"},{"key":"ref13","article-title":"ProPILE: Probing privacy leakage in large language models","author":"Kim","year":"2023","journal-title":"arXiv:2307.01881"},{"key":"ref14","article-title":"Automatically auditing large language models via discrete optimization","author":"Jones","year":"2023","journal-title":"arXiv:2303.04381"},{"key":"ref15","article-title":"DecodingTrust: A comprehensive assessment of trustworthiness in GPT models","author":"Wang","year":"2023","journal-title":"arXiv:2306.11698"},{"key":"ref16","article-title":"Jailbreaking LLM-controlled robots","author":"Robey","year":"2024","journal-title":"arXiv:2410.13691"},{"key":"ref17","article-title":"On the vulnerability of LLM\/VLM-controlled robotics","author":"Wu","year":"2024","journal-title":"arXiv:2402.10340"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3664647.3680616"},{"key":"ref19","article-title":"The dark side of function calling: Pathways to jailbreaking large language models","author":"Wu","year":"2024","journal-title":"arXiv:2407.17915"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-acl.1294"},{"key":"ref21","article-title":"Efficient LLM-jailbreaking by introducing visual modality","author":"Niu","year":"2024","journal-title":"arXiv:2405.20015"},{"key":"ref22","article-title":"Jailbreaking text-to-image models with LLM-based agents","author":"Dong","year":"2024","journal-title":"arXiv:2408.00523v2"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-naacl.269"},{"key":"ref24","article-title":"Jailbreaking black box large language models in twenty queries","author":"Chao","year":"2023","journal-title":"arXiv:2310.08419"},{"key":"ref25","article-title":"Can we trust embodied agents? Exploring backdoor attacks against embodied LLM-based decision-making systems","author":"Jiao","year":"2024","journal-title":"arXiv:2405.20774"},{"key":"ref26","article-title":"Denial-of-service poisoning attacks against large language models","author":"Gao","year":"2024","journal-title":"arXiv:2410.10760"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.5267\/j.ijdns.2019.1.001"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.5220\/0013289700003899"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3583740.3626809"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-84996-510-1_13"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/meco62516.2024.10577803"},{"key":"ref32","volume-title":"Ecovacs Home Robots Can Be Hacked to Spy on Their Owners, Researchers Say","year":"2025"},{"key":"ref33","article-title":"Safety guardrails for LLM-enabled robots","author":"Ravichandran","year":"2025","journal-title":"arXiv:2503.07885"},{"key":"ref34","article-title":"A survey of attacks on large language models","author":"Xu","year":"2025","journal-title":"arXiv:2505.12567"},{"key":"ref35","article-title":"Agent security bench (ASB): Formalizing and benchmarking attacks and defenses in LLM-based agents","author":"Zhang","year":"2024","journal-title":"arXiv:2410.02644"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ISSREW63542.2024.00103"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.2991\/978-94-6463-540-9_65"},{"key":"ref38","volume-title":"HardPwn 2024: A Researcher\u2019s Passion for Hacking IoT Devices","year":"2024"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/10820123\/11108294.pdf?arnumber=11108294","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,11]],"date-time":"2025-08-11T17:44:32Z","timestamp":1754934272000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11108294\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":38,"URL":"https:\/\/doi.org\/10.1109\/access.2025.3595424","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}