Robotic Manipulation on LIBERO Spatial (Failure Rate)
2.4Failure Rate (FR)Benign
Evaluation results
| Method | Links | |
|---|---|---|
| BenignVictim Model=UniVLA-Spatial, Attack Setting=Clean baseline2026.05 | 2.4 | |
| BenignVictim Model=CronusVLA-Spatial, Attack Setting=Clean baseline2026.05 | 7.4 | |
| BenignVictim Model=OpenVLA-Spatial, Attack Setting=Clean baseline2026.05 | 16 | |
| Random NoiseVictim Model=OpenVLA-Spatial, Attack Setting=Black-box2026.05 | 26.8 | |
| VLA-HijackVictim Model=CronusVLA-Spatial, Attack Setting=Black-box2026.05 | 28.2 | |
| UADA1Victim Model=OpenVLA-Spatial, Attack Setting=White-box2026.05 | 38.8 | |
| UPA1Victim Model=OpenVLA-Spatial, Attack Setting=White-box2026.05 | 62.2 | |
| Arm imageVictim Model=OpenVLA-Spatial, Attack Setting=Black-box2026.05 | 66.2 | |
| VLA-HijackVictim Model=UniVLA-Spatial, Attack Setting=Black-box2026.05 | 88.2 | |
| TMA1Victim Model=OpenVLA-Spatial, Attack Setting=White-box2026.05 | 99.4 | |
| UADA1-3Victim Model=OpenVLA-Spatial, Attack Setting=White-box2026.05 | 100 | |
| VLA-HijackVictim Model=OpenVLA-Spatial, Attack Setting=White-box2026.05 | 100 |