{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,7]],"date-time":"2026-03-07T18:29:52Z","timestamp":1772908192515,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":42,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,10,13]]},"DOI":"10.1145\/3733800.3763262","type":"proceedings-article","created":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T10:39:10Z","timestamp":1764585550000},"page":"11-18","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Exploring the Robustness of Vision-Language-Action Models against Sensor Attacks"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-5596-3839","authenticated-orcid":false,"given":"Xuancun","family":"Lu","sequence":"first","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-3202-2878","authenticated-orcid":false,"given":"Jiaxiang","family":"Chen","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-1319-0428","authenticated-orcid":false,"given":"Shilin","family":"Xiao","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3251-456X","authenticated-orcid":false,"given":"Zizhi","family":"Jin","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-4510-2571","authenticated-orcid":false,"given":"Ruochen","family":"Zhou","sequence":"additional","affiliation":[{"name":"Hong Kong University of Science and Technology, Hong Kong, Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1101-0007","authenticated-orcid":false,"given":"Xiaoyu","family":"Ji","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5043-9148","authenticated-orcid":false,"given":"Wenyuan","family":"Xu","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,12]]},"reference":[{"key":"e_1_3_3_1_2_2","unstructured":"1X Technologies. 2025. NEO Gamma | 1X. https:\/\/www.1x.tech\/neo."},{"key":"e_1_3_3_1_3_2","unstructured":"Jean-Baptiste Alayrac Jeff Donahue Pauline Luc Antoine Miech Iain Barr Yana Hasson Karel Lenc Arthur Mensch Katherine Millican Malcolm Reynolds et\u00a0al. 2022. Flamingo: a visual language model for few-shot learning. Advances in neural information processing systems 35 (2022) 23716\u201323736."},{"key":"e_1_3_3_1_4_2","unstructured":"Shuai Bai Keqin Chen Xuejing Liu Jialin Wang Wenbin Ge Sibo Song Kai Dang Peng Wang Shijie Wang Jun Tang et\u00a0al. 2025. Qwen2. 5-vl technical report. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2502.13923 (2025)."},{"key":"e_1_3_3_1_5_2","unstructured":"Lucas Beyer Andreas Steiner Andr\u00e9\u00a0Susano Pinto Alexander Kolesnikov Xiao Wang Daniel Salz Maxim Neumann Ibrahim Alabdulmohsin Michael Tschannen Emanuele Bugliarello et\u00a0al. 2024. Paligemma: A versatile 3b vlm for transfer. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2407.07726 (2024)."},{"key":"e_1_3_3_1_6_2","unstructured":"Johan Bjorck Fernando Casta\u00f1eda Nikita Cherniadev Xingye Da Runyu Ding Linxi Fan Yu Fang Dieter Fox Fengyuan Hu Spencer Huang et\u00a0al. 2025. Gr00t n1: An open foundation model for generalist humanoid robots. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2503.14734 (2025)."},{"key":"e_1_3_3_1_7_2","doi-asserted-by":"crossref","unstructured":"Kevin Black Noah Brown Danny Driess Adnan Esmail Michael Equi Chelsea Finn Niccolo Fusai Lachy Groom Karol Hausman Brian Ichter et\u00a0al. 2024. \\(\\pi {_{-}\\!}0\\): A Vision-Language-Action Flow Model for General Robot Control. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2410.24164 (2024).","DOI":"10.15607\/RSS.2025.XXI.010"},{"key":"e_1_3_3_1_8_2","unstructured":"Anthony Brohan Noah Brown Justice Carbajal Yevgen Chebotar Xi Chen Krzysztof Choromanski Tianli Ding Danny Driess Avinava Dubey Chelsea Finn et\u00a0al. 2023. Rt-2: Vision-language-action models transfer web knowledge to robotic control. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2307.15818 (2023)."},{"key":"e_1_3_3_1_9_2","unstructured":"Hao Cheng Erjia Xiao Chengyuan Yu Zhao Yao Jiahang Cao Qiang Zhang Jiaxu Wang Mengshu Sun Kaidi Xu Jindong Gu et\u00a0al. 2024. Manipulation Facing Threats: Evaluating Physical Vulnerabilities in End-to-End Vision Language Action Models. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2409.13174 (2024)."},{"key":"e_1_3_3_1_10_2","doi-asserted-by":"crossref","unstructured":"Cheng Chi Zhenjia Xu Siyuan Feng Eric Cousineau Yilun Du Benjamin Burchfiel Russ Tedrake and Shuran Song. 2023. Diffusion policy: Visuomotor policy learning via action diffusion. The International Journal of Robotics Research (2023) 02783649241273668.","DOI":"10.15607\/RSS.2023.XIX.026"},{"key":"e_1_3_3_1_11_2","unstructured":"Aakanksha Chowdhery Sharan Narang Jacob Devlin Maarten Bosma Gaurav Mishra Adam Roberts Paul Barham Hyung\u00a0Won Chung Charles Sutton Sebastian Gehrmann et\u00a0al. 2023. Palm: Scaling language modeling with pathways. Journal of Machine Learning Research 24 240 (2023) 1\u2013113."},{"key":"e_1_3_3_1_12_2","unstructured":"Alexey Dosovitskiy Lucas Beyer Alexander Kolesnikov Dirk Weissenborn Xiaohua Zhai Thomas Unterthiner Mostafa Dehghani Matthias Minderer Georg Heigold Sylvain Gelly et\u00a0al. 2020. An image is worth 16x16 words: Transformers for image recognition at scale. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2010.11929 (2020)."},{"key":"e_1_3_3_1_13_2","unstructured":"Danny Driess Fei Xia Mehdi\u00a0SM Sajjadi Corey Lynch Aakanksha Chowdhery Ayzaan Wahid Jonathan Tompson Quan Vuong Tianhe Yu Wenlong Huang et\u00a0al. 2023. Palm-e: An embodied multimodal language model. (2023)."},{"key":"e_1_3_3_1_14_2","unstructured":"Figure AI. 2025. Helix: A Vision\u2013Language\u2013Action Model for Generalist Humanoid Control. https:\/\/www.figure.ai\/news\/helix."},{"key":"e_1_3_3_1_15_2","unstructured":"FOURIER\u2011Robotics. 2025. FOURIER\u2011Robotics. https:\/\/www.fftai.com\/."},{"key":"e_1_3_3_1_16_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_3_3_1_17_2","doi-asserted-by":"crossref","unstructured":"Chengyin Hu Weiwen Shi and Ling Tian. 2023. Adversarial color projection: A projector-based physical-world attack to DNNs. Image and Vision Computing 140 (2023) 104861.","DOI":"10.1016\/j.imavis.2023.104861"},{"key":"e_1_3_3_1_18_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00091"},{"key":"e_1_3_3_1_19_2","first-page":"7249","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Jiang Qinhong","year":"2023","unstructured":"Qinhong Jiang, Xiaoyu Ji, Chen Yan, Zhixin Xie, Haina Lou, and Wenyuan Xu. 2023. { GlitchHiker} : Uncovering vulnerabilities of image signal transmission with { IEMI}. In 32nd USENIX Security Symposium (USENIX Security 23). 7249\u20137266."},{"key":"e_1_3_3_1_20_2","unstructured":"Moo\u00a0Jin Kim Chelsea Finn and Percy Liang. 2025. Fine-tuning vision-language-action models: Optimizing speed and success. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2502.19645 (2025)."},{"key":"e_1_3_3_1_21_2","unstructured":"Moo\u00a0Jin Kim Karl Pertsch Siddharth Karamcheti Ted Xiao Ashwin Balakrishna Suraj Nair Rafael Rafailov Ethan Foster Grace Lam Pannag Sanketi et\u00a0al. 2024. Openvla: An open-source vision-language-action model. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2406.09246 (2024)."},{"key":"e_1_3_3_1_22_2","unstructured":"Eliot Krzysztof\u00a0Jones Alexander Robey Andy Zou Zachary Ravichandran George\u00a0J Pappas Hamed Hassani Matt Fredrikson and J Zico\u00a0Kolter. 2025. Adversarial Attacks on Robotic Vision Language Action Models. arXiv e-prints (2025) arXiv\u20132506."},{"key":"e_1_3_3_1_23_2","unstructured":"Shunlei Li Jin Wang Rui Dai Wanyu Ma Wing\u00a0Yin Ng Yingbai Hu and Zheng Li. 2024. RoboNurse-VLA: Robotic Scrub Nurse System based on Vision-Language-Action Model. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2409.19590 (2024)."},{"key":"e_1_3_3_1_24_2","unstructured":"Xinfeng Li Chen Yan Xuancun Lu Zihan Zeng Xiaoyu Ji and Wenyuan Xu. 2023. Inaudible adversarial perturbation: Manipulating the recognition of user speech in real time. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2308.01040 (2023)."},{"key":"e_1_3_3_1_25_2","unstructured":"Fanqi Lin Yingdong Hu Pingyue Sheng Chuan Wen Jiacheng You and Yang Gao. 2024. Data scaling laws in imitation learning for robotic manipulation. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2410.18647 (2024)."},{"key":"e_1_3_3_1_26_2","unstructured":"Bo Liu Yifeng Zhu Chongkai Gao Yihao Feng Qiang Liu Yuke Zhu and Peter Stone. 2023. Libero: Benchmarking knowledge transfer for lifelong robot learning. Advances in Neural Information Processing Systems 36 (2023) 44776\u201344791."},{"key":"e_1_3_3_1_27_2","unstructured":"Haotian Liu Chunyuan Li Qingyang Wu and Yong\u00a0Jae Lee. 2023. Visual instruction tuning. Advances in neural information processing systems 36 (2023) 34892\u201334916."},{"key":"e_1_3_3_1_28_2","unstructured":"Maxime Oquab Timoth\u00e9e Darcet Th\u00e9o Moutakanni Huy Vo Marc Szafraniec Vasil Khalidov Pierre Fernandez Daniel Haziza Francisco Massa Alaaeldin El-Nouby et\u00a0al. 2023. Dinov2: Learning robust visual features without supervision. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2304.07193 (2023)."},{"key":"e_1_3_3_1_29_2","unstructured":"Zhiliang Peng Wenhui Wang Li Dong Yaru Hao Shaohan Huang Shuming Ma and Furu Wei. 2023. Kosmos-2: Grounding multimodal large language models to the world. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2306.14824 (2023)."},{"key":"e_1_3_3_1_30_2","doi-asserted-by":"crossref","unstructured":"Karl Pertsch Kyle Stachowicz Brian Ichter Danny Driess Suraj Nair Quan Vuong Oier Mees Chelsea Finn and Sergey Levine. 2025. Fast: Efficient action tokenization for vision-language-action models. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2501.09747 (2025).","DOI":"10.15607\/RSS.2025.XXI.012"},{"key":"e_1_3_3_1_31_2","unstructured":"Colin Raffel Noam Shazeer Adam Roberts Katherine Lee Sharan Narang Michael Matena Yanqi Zhou Wei Li and Peter\u00a0J Liu. 2020. Exploring the limits of transfer learning with a unified text-to-text transformer. Journal of machine learning research 21 140 (2020) 1\u201367."},{"key":"e_1_3_3_1_32_2","unstructured":"Shanghai Zhiyuan Innovation Technology Co. Ltd (AgiBot). 2025. C5 A2 X1 \u2026 AgiBot: A Platform for Large\u2011Scale Embodied AI and Humanoid Robots. https:\/\/www.agibot.com\/."},{"key":"e_1_3_3_1_33_2","unstructured":"Mustafa Shukor Dana Aubakirova Francesco Capuano Pepijn Kooijmans Steven Palma Adil Zouitine Michel Aractingi Caroline Pascal Martino Russi Andres Marafioti et\u00a0al. 2025. SmolVLA: A vision-language-action model for affordable and efficient robotics. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2506.01844 (2025)."},{"key":"e_1_3_3_1_34_2","first-page":"2631","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Sugawara Takeshi","year":"2020","unstructured":"Takeshi Sugawara, Benjamin Cyr, Sara Rampazzi, Daniel Genkin, and Kevin Fu. 2020. Light commands:{ Laser-Based} audio injection attacks on { Voice-Controllable} systems. In 29th USENIX Security Symposium (USENIX Security 20). 2631\u20132648."},{"key":"e_1_3_3_1_35_2","unstructured":"Gemma Team Thomas Mesnard Cassidy Hardin Robert Dadashi Surya Bhupatiraju Shreya Pathak Laurent Sifre Morgane Rivi\u00e8re Mihir\u00a0Sanjay Kale Juliette Love et\u00a0al. 2024. Gemma: Open models based on gemini research and technology. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2403.08295 (2024)."},{"key":"e_1_3_3_1_36_2","unstructured":"Tesla Inc.2025. AI & Robotics. https:\/\/www.tesla.com\/en_eu\/AI."},{"key":"e_1_3_3_1_37_2","unstructured":"Hugo Touvron Louis Martin Kevin Stone Peter Albert Amjad Almahairi Yasmine Babaei Nikolay Bashlykov Soumya Batra Prajjwal Bhargava Shruti Bhosale et\u00a0al. 2023. Llama 2: Open foundation and fine-tuned chat models. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2307.09288 (2023)."},{"key":"e_1_3_3_1_38_2","unstructured":"Taowen Wang Cheng Han James\u00a0Chenhao Liang Wenhao Yang Dongfang Liu Luna\u00a0Xinyu Zhang Qifan Wang Jiebo Luo and Ruixiang Tang. 2024. Exploring the adversarial vulnerabilities of vision-language-action models in robotics. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2411.13587 (2024)."},{"key":"e_1_3_3_1_39_2","unstructured":"Junjie Wen Yichen Zhu Jinming Li Zhibin Tang Chaomin Shen and Feifei Feng. 2025. DexVLA: Vision-Language Model with Plug-In Diffusion Expert for General Robot Control. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2502.05855 (2025)."},{"key":"e_1_3_3_1_40_2","first-page":"1957","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Yan Chen","year":"2022","unstructured":"Chen Yan, Zhijian Xu, Zhanyuan Yin, Xiaoyu Ji, and Wenyuan Xu. 2022. Rolling colors: Adversarial laser exploits against traffic light recognition. In 31st USENIX Security Symposium (USENIX Security 22). 1957\u20131974."},{"key":"e_1_3_3_1_41_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-96530-3"},{"key":"e_1_3_3_1_42_2","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134052"},{"key":"e_1_3_3_1_43_2","unstructured":"Xueyang Zhou Guiyao Tie Guowen Zhang Hechang Wang Pan Zhou and Lichao Sun. 2025. BadVLA: Towards Backdoor Attacks on Vision-Language-Action Models via Objective-Decoupled Optimization. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2505.16640 (2025)."}],"event":{"name":"LAMPS '25: Proceedings of the 2025 Workshop on Large AI Systems and Models with Privacy and Security Analysis","location":"Taipei Taiwan","acronym":"LAMPS '25","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2025 Workshop on Large AI Systems and Models with Privacy and Security Analysis"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3733800.3763262","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T10:39:33Z","timestamp":1764585573000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3733800.3763262"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,13]]},"references-count":42,"alternative-id":["10.1145\/3733800.3763262","10.1145\/3733800"],"URL":"https:\/\/doi.org\/10.1145\/3733800.3763262","relation":{},"subject":[],"published":{"date-parts":[[2025,10,13]]},"assertion":[{"value":"2025-12-01","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}