Test-time Adversarial Takeover: A Real-time Hijacking Interface against Robotic Diffusion Policies
Researchers have developed a novel attack method called Test-time Adversarial Takeover (TAKO) that allows real-time hijacking of robotic systems controlled by diffusion-based policies. This attack manipulates the visual conditioning input to the robot, enabling an attacker to steer the robot's actions and achieve custom objectives. TAKO utilizes universal patches learned through diffusion inference, proving effective across various robotic tasks, visual encoders, and generative inference models, with human operators achieving 100% takeover success in all tested scenarios. AI
IMPACT Demonstrates a significant new vulnerability in embodied AI systems, potentially impacting the safety and security of deployed robots.