Adversarial Attack on Robotic Systems on Custom Robotic Attack Evaluation Environment
100Overall ASRRoboPAIR
Evaluation Results
| Method | Links | |
|---|---|---|
| RoboPAIRAttack vector=Direct prompt to LLM, Attack type=Automated iterative jailbreak, Sample size=n = 5 per condition, Models tested=Proprietary models, ROS 2 pipeline=No, Visual injection=No, Audio injection=No, LiDAR injection=No, Defense evaluation=No, Physical validation=Real robots, Sample size recommendation=Not discussed2026.06 | 100 | |
| RIPAAttack vector=Text on object → sensor → LLM, Attack type=Prompt injection via environment, Sample size=n = 100 per condition, Models tested=5 models (DeepSeek-V4-Flash, Llama-3-8B-Instruct-Lite, Llama-3.3-70B-Instruct-Turbo, Qwen 2.5-7B-Instruct-Turbo, Gemma-3n-E4B), ROS 2 pipeline=Yes (Jazzy + Cyclone DDS), Visual injection=Yes (OCR pipeline, Channel 1), Audio injection=Yes (Whisper STT, Channel 2), LiDAR injection=Yes (sensor context poisoning, Channel 3), Defense evaluation=Hybrid firewall + bypass taxonomy, Physical validation=Gazebo Harmonic simulation, Sample size recommendation=n ≥ 100 minimum2026.06 | 67 |