{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,17]],"date-time":"2026-05-17T09:09:30Z","timestamp":1779008970313,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":92,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,5,10]],"date-time":"2026-05-10T00:00:00Z","timestamp":1778371200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100017649","name":"Hong Kong Government","doi-asserted-by":"publisher","award":["15206123"],"award-info":[{"award-number":["15206123"]}],"id":[{"id":"10.13039\/501100017649","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100017649","name":"Hong Kong Government","doi-asserted-by":"publisher","award":["15211924"],"award-info":[{"award-number":["15211924"]}],"id":[{"id":"10.13039\/501100017649","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,5,11]]},"DOI":"10.1145\/3774906.3802758","type":"proceedings-article","created":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T14:20:14Z","timestamp":1778250014000},"page":"1057-1071","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Jailbreaking Embodied LLMs via Action-Level Manipulation"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3125-0411","authenticated-orcid":false,"given":"Xinyu","family":"Huang","sequence":"first","affiliation":[{"name":"The Hong Kong Polytechnic University, Hong Kong, Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5202-7892","authenticated-orcid":false,"given":"Qiang","family":"Yang","sequence":"additional","affiliation":[{"name":"University of Cambridge, Cambridge, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7661-6432","authenticated-orcid":false,"given":"Leming","family":"Shen","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University, Hong Kong, Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4868-5750","authenticated-orcid":false,"given":"Zijing","family":"Ma","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University, Hong Kong, Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3096-687X","authenticated-orcid":false,"given":"Yuanqing","family":"Zheng","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University, Hong Kong, Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2026,5,10]]},"reference":[{"key":"e_1_3_3_2_2_2","unstructured":"Marah Abdin Jyoti Aneja Harkirat Behl S\u00e9bastien Bubeck Ronen Eldan Suriya Gunasekar Michael Harrison Russell\u00a0J Hewett Mojan Javaheripi Piero Kauffmann et\u00a0al. 2024. Phi-4 technical report. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2412.08905 (2024)."},{"key":"e_1_3_3_2_3_2","unstructured":"Josh Achiam Steven Adler Sandhini Agarwal Lama Ahmad Ilge Akkaya Florencia\u00a0Leoni Aleman Diogo Almeida Janko Altenschmidt Sam Altman Shyamal Anadkat et\u00a0al. 2023. Gpt-4 technical report. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2303.08774 (2023)."},{"key":"e_1_3_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.1145\/3498361.3539775"},{"key":"e_1_3_3_2_5_2","doi-asserted-by":"publisher","DOI":"10.1145\/3708468.3711885"},{"key":"e_1_3_3_2_6_2","doi-asserted-by":"publisher","DOI":"10.1145\/3485730.3485944"},{"key":"e_1_3_3_2_7_2","unstructured":"Tom Brown Benjamin Mann Nick Ryder Melanie Subbiah Jared\u00a0D Kaplan Prafulla Dhariwal Arvind Neelakantan Pranav Shyam Girish Sastry Amanda Askell et\u00a0al. 2020. Language models are few-shot learners. NeurIPS 33 (2020) 1877\u20131901."},{"key":"e_1_3_3_2_8_2","unstructured":"Yuhao Chen Yuxuan Yan Qianqian Yang Yuanchao Shu Shibo He and Jiming Chen. 2023. Confidant: Customizing transformer-based LLMs via collaborative edge training. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2311.13381 (2023)."},{"key":"e_1_3_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00323"},{"key":"e_1_3_3_2_10_2","doi-asserted-by":"crossref","unstructured":"Tim Dettmers Mike Lewis Younes Belkada and Luke Zettlemoyer. 2022. Gpt3. int8 (): 8-bit matrix multiplication for transformers at scale. NeurIPS 35 (2022) 30318\u201330332.","DOI":"10.52202\/068431-2198"},{"key":"e_1_3_3_2_11_2","first-page":"8469","volume-title":"ICML 2023","author":"Driess Danny","year":"2023","unstructured":"Danny Driess, Fei Xia, Mehdi\u00a0SM Sajjadi, Corey Lynch, Aakanksha Chowdhery, Brian Ichter, Ayzaan Wahid, Jonathan Tompson, Quan Vuong, Tianhe Yu, et\u00a0al. 2023. PaLM-E: An Embodied Multimodal Language Model. In ICML 2023. 8469\u20138488."},{"key":"e_1_3_3_2_12_2","doi-asserted-by":"crossref","unstructured":"Jiafei Duan Samson Yu Hui\u00a0Li Tan Hongyuan Zhu and Cheston Tan. 2022. A survey of embodied ai: From simulators to research tasks. IEEE Transactions on Emerging Topics in Computational Intelligence 6 2 (2022) 230\u2013244.","DOI":"10.1109\/TETCI.2022.3141105"},{"key":"e_1_3_3_2_13_2","doi-asserted-by":"crossref","unstructured":"Linxi Fan Guanzhi Wang Yunfan Jiang Ajay Mandlekar Yuncong Yang Haoyi Zhu Andrew Tang De-An Huang Yuke Zhu and Anima Anandkumar. 2022. Minedojo: Building open-ended embodied agents with internet-scale knowledge. Advances in Neural Information Processing Systems 35 (2022) 18343\u201318362.","DOI":"10.52202\/068431-1333"},{"key":"e_1_3_3_2_14_2","doi-asserted-by":"crossref","unstructured":"Stan Franklin. 1997. Autonomous agents as embodied AI. Cybernetics & Systems 28 6 (1997) 499\u2013520.","DOI":"10.1080\/019697297126029"},{"key":"e_1_3_3_2_15_2","unstructured":"Lang Gao Xiangliang Zhang Preslav Nakov and Xiuying Chen. 2024. Shaping the Safety Boundaries: Understanding and Defending Against Jailbreaks in Large Language Models. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2412.17034 (2024)."},{"key":"e_1_3_3_2_16_2","volume-title":"Human-robot interaction 2013 workshop on collaborative manipulation","author":"Goto Hiraki","year":"2013","unstructured":"Hiraki Goto, Jun Miura, and Junichi Sugiyama. 2013. Human-robot collaborative assembly by on-line human action recognition based on an fsm task model. In Human-robot interaction 2013 workshop on collaborative manipulation."},{"key":"e_1_3_3_2_17_2","unstructured":"Aaron Grattafiori Abhimanyu Dubey Abhinav Jauhri Abhinav Pandey Abhishek Kadian Ahmad Al-Dahle Aiesha Letman Akhil Mathur Alan Schelten Alex Vaughan et\u00a0al. 2024. The llama 3 herd of models. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2407.21783 (2024)."},{"key":"e_1_3_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-05181-4_17"},{"key":"e_1_3_3_2_19_2","unstructured":"Daya Guo Dejian Yang Haowei Zhang Junxiao Song Ruoyu Zhang Runxin Xu Qihao Zhu Shirong Ma Peiyi Wang Xiao Bi et\u00a0al. 2025. Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2501.12948 (2025)."},{"key":"e_1_3_3_2_20_2","unstructured":"Tom Henighan Jared Kaplan Mor Katz Mark Chen Christopher Hesse Jacob Jackson Heewoo Jun Tom\u00a0B Brown Prafulla Dhariwal Scott Gray et\u00a0al. 2020. Scaling laws for autoregressive generative modeling. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2010.14701 (2020)."},{"key":"e_1_3_3_2_21_2","doi-asserted-by":"crossref","unstructured":"Kai Hu Weichen Yu Yining Li Tianjun Yao Xiang Li Wenhe Liu Lijun Yu Zhiqiang Shen Kai Chen and Matt Fredrikson. 2024. Efficient llm jailbreak via adaptive dense-to-sparse constrained optimization. NeurIPS 37 (2024) 23224\u201323245.","DOI":"10.52202\/079017-0731"},{"key":"e_1_3_3_2_22_2","unstructured":"Kai Huang Boyuan Yang and Wei Gao. 2023. Modality plug-and-play: Elastic modality adaptation in multimodal llms for embodied ai. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2312.07886 (2023)."},{"key":"e_1_3_3_2_23_2","unstructured":"Wenlong Huang Chen Wang Ruohan Zhang Yunzhu Li Jiajun Wu and Li Fei-Fei. 2023. Voxposer: Composable 3d value maps for robotic manipulation with language models. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2307.05973 (2023)."},{"key":"e_1_3_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.1145\/3680207.3765677"},{"key":"e_1_3_3_2_25_2","doi-asserted-by":"crossref","unstructured":"Xinyu Huang Leming Shen Zijing Ma and Yuanqing Zheng. 2026. Towards privacy-preserving and personalized smart homes via tailored small language models. IEEE TMC (2026).","DOI":"10.1109\/TMC.2026.3654976"},{"key":"e_1_3_3_2_26_2","unstructured":"Hakan Inan Kartikeya Upasani Jianfeng Chi Rashi Rungta Krithika Iyer Yuning Mao Michael Tontchev Qing Hu Brian Fuller Davide Testuggine et\u00a0al. 2023. Llama guard: Llm-based input-output safeguard for human-ai conversations. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2312.06674 (2023)."},{"key":"e_1_3_3_2_27_2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.acl-long.1141"},{"key":"e_1_3_3_2_28_2","doi-asserted-by":"publisher","DOI":"10.1109\/IROS58592.2024.10802322"},{"key":"e_1_3_3_2_29_2","unstructured":"Moo\u00a0Jin Kim Karl Pertsch Siddharth Karamcheti Ted Xiao Ashwin Balakrishna Suraj Nair Rafael Rafailov Ethan Foster Grace Lam Pannag Sanketi et\u00a0al. 2024. Openvla: An open-source vision-language-action model. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2406.09246 (2024)."},{"key":"e_1_3_3_2_30_2","doi-asserted-by":"crossref","unstructured":"Takako Kumamoto Yunko Yoshida and Himari Fujima. 2023. Evaluating large language models in ransomware negotiation: A comparative analysis of chatgpt and claude. (2023).","DOI":"10.21203\/rs.3.rs-3719038\/v1"},{"key":"e_1_3_3_2_31_2","doi-asserted-by":"crossref","unstructured":"David Lee and Mihalis Yannakakis. 1996. Principles and methods of testing finite state machines-a survey. Proc. IEEE 84 8 (1996) 1090\u20131123.","DOI":"10.1109\/5.533956"},{"key":"e_1_3_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1145\/3680207.3765248"},{"key":"e_1_3_3_2_33_2","doi-asserted-by":"publisher","DOI":"10.1145\/3636534.3649367"},{"key":"e_1_3_3_2_34_2","first-page":"80","volume-title":"Conference on Robot Learning","author":"Li Chengshu","year":"2023","unstructured":"Chengshu Li, Ruohan Zhang, Josiah Wong, Cem Gokmen, Sanjana Srivastava, Roberto Mart\u00edn-Mart\u00edn, Chen Wang, Gabrael Levine, Michael Lingelbach, Jiankai Sun, et\u00a0al. 2023. Behavior-1k: A benchmark for embodied ai with 1,000 everyday activities and realistic simulation. In Conference on Robot Learning. 80\u201393."},{"key":"e_1_3_3_2_35_2","unstructured":"Nathaniel Li Ziwen Han Ian Steneker Willow Primack Riley Goodside Hugh Zhang Zifan Wang Cristina Menghini and Summer Yue. 2024. Llm defenses are not robust to multi-turn human jailbreaks yet. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2408.15221 (2024)."},{"key":"e_1_3_3_2_36_2","unstructured":"Yuanchun Li Hao Wen Weijun Wang Xiangyu Li Yizhen Yuan Guohong Liu Jiacheng Liu Wenxing Xu Xiang Wang Yi Sun et\u00a0al. 2024. Personal llm agents: Insights and survey about the capability efficiency and security. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2401.05459 (2024)."},{"key":"e_1_3_3_2_37_2","unstructured":"Yuanchun Li Hao Wen Weijun Wang Xiangyu Li Yizhen Yuan Guohong Liu Jiacheng Liu Wenxing Xu Xiang Wang Yi Sun et\u00a0al. 2024. Personal llm agents: Insights and survey about the capability efficiency and security. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2401.05459 (2024)."},{"key":"e_1_3_3_2_38_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICRA48891.2023.10160591"},{"key":"e_1_3_3_2_39_2","doi-asserted-by":"publisher","DOI":"10.1109\/IROS47612.2022.9982259"},{"key":"e_1_3_3_2_40_2","doi-asserted-by":"publisher","DOI":"10.1145\/3664647.3680616"},{"key":"e_1_3_3_2_41_2","first-page":"4711","volume-title":"USENIX Security","author":"Liu Tong","year":"2024","unstructured":"Tong Liu, Yingjie Zhang, Zhe Zhao, Yinpeng Dong, Guozhu Meng, and Kai Chen. 2024. Making them ask and answer: Jailbreaking large language models in few queries via disguise and reconstruction. In USENIX Security. 4711\u20134728."},{"key":"e_1_3_3_2_42_2","unstructured":"Xuancun Lu Zhengxian Huang Xinfeng Li Wenyuan Xu et\u00a0al. 2024. POEX: Policy Executable Embodied AI Jailbreak Attacks. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2412.16633 (2024)."},{"key":"e_1_3_3_2_43_2","unstructured":"Weidi Luo Shenghong Dai Xiaogeng Liu Suman Banerjee Huan Sun Muhao Chen and Chaowei Xiao. 2025. Agrail: A lifelong agent guardrail with effective and adaptive safety detection. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2502.11448 (2025)."},{"key":"e_1_3_3_2_44_2","doi-asserted-by":"publisher","DOI":"10.1145\/3719027.3760709"},{"key":"e_1_3_3_2_45_2","doi-asserted-by":"crossref","unstructured":"Pietro Mazzaglia Tim Verbelen Bart Dhoedt Aaron Courville and Sai Rajeswar. 2024. GenRL: Multimodal-foundation world models for generalization in embodied agents. NeurIPS 37 (2024) 27529\u201327555.","DOI":"10.52202\/079017-0865"},{"key":"e_1_3_3_2_46_2","unstructured":"Tongzhou Mu Zhan Ling Fanbo Xiang Derek Yang Xuanlin Li Stone Tao Zhiao Huang Zhiwei Jia and Hao Su. 2021. Maniskill: Generalizable manipulation skill benchmark with large-scale demonstrations. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2107.14483 (2021)."},{"key":"e_1_3_3_2_47_2","doi-asserted-by":"crossref","unstructured":"T\u00f8nnes\u00a0F Nygaard Charles\u00a0P Martin Jim Torresen Kyrre Glette and David Howard. 2021. Real-world embodied AI through a morphologically adaptive quadruped robot. Nature Machine Intelligence 3 5 (2021) 410\u2013419.","DOI":"10.1038\/s42256-021-00320-3"},{"key":"e_1_3_3_2_48_2","doi-asserted-by":"crossref","unstructured":"Long Ouyang Jeffrey Wu Xu Jiang Diogo Almeida Carroll Wainwright Pamela Mishkin Chong Zhang Sandhini Agarwal Katarina Slama Alex Ray et\u00a0al. 2022. Training language models to follow instructions with human feedback. NeurIPS 35 (2022) 27730\u201327744.","DOI":"10.52202\/068431-2011"},{"key":"e_1_3_3_2_49_2","doi-asserted-by":"publisher","DOI":"10.1109\/ROBOT.2009.5152268"},{"key":"e_1_3_3_2_50_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00886"},{"key":"e_1_3_3_2_51_2","unstructured":"Xavier Puig Eric Undersander Andrew Szot Mikael\u00a0Dallaire Cote Tsung-Yen Yang Ruslan Partsey Ruta Desai Alexander\u00a0William Clegg Michal Hlavac So\u00a0Yeon Min et\u00a0al. 2023. Habitat 3.0: A co-habitat for humans avatars and robots. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2310.13724 (2023)."},{"key":"e_1_3_3_2_52_2","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i19.30150"},{"key":"e_1_3_3_2_53_2","unstructured":"Mark Russinovich Ahmed Salem and Ronen Eldan. 2024. Great now write an article about that: The crescendo multi-turn llm jailbreak attack. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2404.01833 2 6 (2024) 17."},{"key":"e_1_3_3_2_54_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00943"},{"key":"e_1_3_3_2_55_2","unstructured":"Prithviraj\u00a0Singh Shahani and Matthias Scheutz. 2025. Noise Injection Systemically Degrades Large Language Model Safety Guardrails. https:\/\/arxiv.org\/abs\/2505.13500 (2025)."},{"key":"e_1_3_3_2_56_2","doi-asserted-by":"publisher","DOI":"10.1145\/3643832.3661880"},{"key":"e_1_3_3_2_57_2","doi-asserted-by":"publisher","DOI":"10.1145\/3715014.3722064"},{"key":"e_1_3_3_2_58_2","doi-asserted-by":"publisher","DOI":"10.1145\/3680207.3723486"},{"key":"e_1_3_3_2_59_2","doi-asserted-by":"publisher","DOI":"10.1145\/3711875.3734561"},{"key":"e_1_3_3_2_60_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICRA48891.2023.10161317"},{"key":"e_1_3_3_2_61_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00280"},{"key":"e_1_3_3_2_62_2","doi-asserted-by":"publisher","DOI":"10.1145\/3666025.3699374"},{"key":"e_1_3_3_2_63_2","unstructured":"Gemma Team Thomas Mesnard Cassidy Hardin Robert Dadashi Surya Bhupatiraju Shreya Pathak Laurent Sifre Morgane Rivi\u00e8re Mihir\u00a0Sanjay Kale Juliette Love et\u00a0al. 2024. Gemma: Open models based on gemini research and technology. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2403.08295 (2024)."},{"key":"e_1_3_3_2_64_2","doi-asserted-by":"crossref","unstructured":"Enrique Vidal Franck Thollard Colin De\u00a0La\u00a0Higuera Francisco Casacuberta and Rafael\u00a0C Carrasco. 2005. Probabilistic finite-state machines-part I. IEEE TPAMI 27 7 (2005) 1013\u20131025.","DOI":"10.1109\/TPAMI.2005.147"},{"key":"e_1_3_3_2_65_2","unstructured":"Zhongwei Wan Zhihao Dou Che Liu Yu Zhang Dongfei Cui Qinjian Zhao Hui Shen Jing Xiong Yi Xin Yifan Jiang et\u00a0al. 2025. Srpo: Enhancing multimodal llm reasoning via reflection-aware reinforcement learning. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2506.01713 (2025)."},{"key":"e_1_3_3_2_66_2","unstructured":"Zhongwei Wan Xinjian Wu Yu Zhang Yi Xin Chaofan Tao Zhihong Zhu Xin Wang Siqi Luo Jing Xiong Longyue Wang et\u00a0al. 2024. D2o: Dynamic discriminative operations for efficient long-context inference of large language models. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2406.13035 (2024)."},{"key":"e_1_3_3_2_67_2","doi-asserted-by":"publisher","DOI":"10.1145\/3680207.3723481"},{"key":"e_1_3_3_2_68_2","doi-asserted-by":"publisher","DOI":"10.1145\/3664647.3681092"},{"key":"e_1_3_3_2_69_2","doi-asserted-by":"crossref","unstructured":"Xin Wang Zhongwei Wan Arvin Hekmati Mingyu Zong Samiul Alam Mi Zhang and Bhaskar Krishnamachari. 2024. Iot in the era of generative ai: Vision and challenges. IEEE Internet Computing (2024).","DOI":"10.1109\/MIC.2024.3443169"},{"key":"e_1_3_3_2_70_2","doi-asserted-by":"crossref","unstructured":"Xin Wang Zhongwei Wan Arvin Hekmati Mingyu Zong Samiul Alam Mi Zhang and Bhaskar Krishnamachari. 2024. Iot in the era of generative ai: Vision and challenges. IEEE Internet Computing (2024).","DOI":"10.1109\/MIC.2024.3443169"},{"key":"e_1_3_3_2_71_2","unstructured":"Xin Wang Yu Zheng Zhongwei Wan and Mi Zhang. 2024. Svd-llm: Truncation-aware singular value decomposition for large language model compression. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2403.07378 (2024)."},{"key":"e_1_3_3_2_72_2","unstructured":"Yi\u00a0Ru Wang Carter Ung Grant Tannert Jiafei Duan Josephine Li Amy Le Rishabh Oswal Markus Grotz Wilbert Pumacay Yuquan Deng et\u00a0al. 2025. RoboEval: Where Robotic Manipulation Meets Structured and Scalable Evaluation. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2507.00435 (2025)."},{"key":"e_1_3_3_2_73_2","doi-asserted-by":"publisher","DOI":"10.1109\/IROS45743.2020.9340962"},{"key":"e_1_3_3_2_74_2","unstructured":"Luca Weihs Jordi Salvador Klemen Kotar Unnat Jain Kuo-Hao Zeng Roozbeh Mottaghi and Aniruddha Kembhavi. 2020. Allenact: A framework for embodied ai research. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2008.12760 (2020)."},{"key":"e_1_3_3_2_75_2","unstructured":"Congcong Wen Jiazhao Liang Shuaihang Yuan Hao Huang and Yi Fang. 2024. How secure are large language models (llms) for navigation in urban environments? arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2402.09546 (2024)."},{"key":"e_1_3_3_2_76_2","doi-asserted-by":"publisher","DOI":"10.1145\/3636534.3649379"},{"key":"e_1_3_3_2_77_2","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690322"},{"key":"e_1_3_3_2_78_2","doi-asserted-by":"publisher","DOI":"10.1109\/IROS58592.2024.10802096"},{"key":"e_1_3_3_2_79_2","doi-asserted-by":"crossref","unstructured":"Yueqi Xie Jingwei Yi Jiawei Shao Justin Curl Lingjuan Lyu Qifeng Chen Xing Xie and Fangzhao Wu. 2023. Defending chatgpt against jailbreak attack via self-reminders. Nature Machine Intelligence 5 12 (2023) 1486\u20131496.","DOI":"10.1038\/s42256-023-00765-8"},{"key":"e_1_3_3_2_80_2","first-page":"1","volume-title":"ACM HotMobile","author":"Xu Huatao","year":"2024","unstructured":"Huatao Xu, Liying Han, Qirui Yang, Mo Li, and Mani Srivastava. 2024. Penetrative ai: Making llms comprehend the physical world. In ACM HotMobile. 1\u20137."},{"key":"e_1_3_3_2_81_2","doi-asserted-by":"publisher","DOI":"10.1145\/3715014.3722073"},{"key":"e_1_3_3_2_82_2","unstructured":"Shusheng Xu Wei Fu Jiaxuan Gao Wenjie Ye Weilin Liu Zhiyu Mei Guangju Wang Chao Yu and Yi Wu. 2024. Is dpo superior to ppo for llm alignment? a comprehensive study. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2404.10719 (2024)."},{"key":"e_1_3_3_2_83_2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.acl-long.303"},{"key":"e_1_3_3_2_84_2","unstructured":"Jirui Yang Zheyu Lin Shuhan Yang Zhihui Lu and Xin Du. 2025. Concept Enhancement Engineering: A Lightweight and Efficient Robust Defense Against Jailbreak Attacks in Embodied AI. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2504.13201 (2025)."},{"key":"e_1_3_3_2_85_2","unstructured":"Sibo Yi Yule Liu Zhen Sun Tianshuo Cong Xinlei He Jiaxing Song Ke Xu and Qi Li. 2024. Jailbreak attacks and defenses against large language models: A survey. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2407.04295 (2024)."},{"key":"e_1_3_3_2_86_2","unstructured":"Sheng Yin Xianghe Pang Yuanzhuo Ding Menglan Chen Yutong Bi Yichen Xiong Wenhao Huang Zhen Xiang Jing Shao and Siheng Chen. 2024. Safeagentbench: A benchmark for safe task planning of embodied llm agents. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2412.13178 (2024)."},{"key":"e_1_3_3_2_87_2","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3612032"},{"key":"e_1_3_3_2_88_2","unstructured":"Yifan Zeng Yiran Wu Xiao Zhang Huazheng Wang and Qingyun Wu. 2024. Autodefense: Multi-agent llm defense against jailbreak attacks. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2403.04783 (2024)."},{"key":"e_1_3_3_2_89_2","unstructured":"Hangtao Zhang Chenyu Zhu Xianlong Wang Ziqi Zhou Changgan Yin Minghui Li Lulu Xue Yichen Wang Shengshan Hu Aishan Liu Pengjin Guo and Leo\u00a0Yu Zhang. 2025. BadRobot: Jailbreaking Embodied LLM Agents in the Physical World. ICLR 2025."},{"key":"e_1_3_3_2_90_2","unstructured":"Wayne\u00a0Xin Zhao Kun Zhou Junyi Li Tianyi Tang Xiaolei Wang Yupeng Hou Yingqian Min Beichen Zhang Junjie Zhang Zican Dong et\u00a0al. 2023. A survey of large language models. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2303.18223 (2023)."},{"key":"e_1_3_3_2_91_2","unstructured":"Xuandong Zhao Xianjun Yang Tianyu Pang Chao Du Lei Li Yu-Xiang Wang and William\u00a0Yang Wang. 2024. Weak-to-strong jailbreaking on large language models. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2401.17256 (2024)."},{"key":"e_1_3_3_2_92_2","unstructured":"Yukai Zhou Jian Lou Zhijie Huang Zhan Qin Yibei Yang and Wenjie Wang. 2024. Don\u2019t say no: Jailbreaking llm by suppressing refusal. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2404.16369 (2024)."},{"key":"e_1_3_3_2_93_2","doi-asserted-by":"crossref","unstructured":"Cezary Zieli\u0144ski Maksym Figat and Ren\u00e9 Hexel. 2019. Communication within multi-fsm based robotic systems. Journal of Intelligent & Robotic Systems 93 (2019) 787\u2013805.","DOI":"10.1007\/s10846-018-0869-6"}],"event":{"name":"SenSys '26: ACM\/IEEE International Conference on Embedded Artificial Intelligence and Sensing Systems","location":"Saint Malo France","acronym":"SenSys '26","sponsor":["SIGBED ACM Special Interest Group on Embedded Systems","SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing","IEEE CS"]},"container-title":["Proceedings of the 2026 ACM\/IEEE International Conference on Embedded Artificial Intelligence and Sensing Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3774906.3802758","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,17]],"date-time":"2026-05-17T08:31:57Z","timestamp":1779006717000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3774906.3802758"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,10]]},"references-count":92,"alternative-id":["10.1145\/3774906.3802758","10.1145\/3774906"],"URL":"https:\/\/doi.org\/10.1145\/3774906.3802758","relation":{},"subject":[],"published":{"date-parts":[[2026,5,10]]},"assertion":[{"value":"2026-05-10","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}