New attack TAKO hijacks robotic diffusion policies in real-time

Researchers have developed a novel attack method called Test-time Adversarial Takeover (TAKO) that allows real-time hijacking of robotic systems controlled by diffusion-based policies. This attack manipulates the visual conditioning input to the robot, enabling an attacker to steer the robot's actions and achieve custom objectives. TAKO utilizes universal patches learned through diffusion inference, proving effective across various robotic tasks, visual encoders, and generative inference models, with human operators achieving 100% takeover success in all tested scenarios. AI

IMPACT Demonstrates a significant new vulnerability in embodied AI systems, potentially impacting the safety and security of deployed robots.

RANK_REASON The cluster contains a research paper detailing a novel attack method against AI-controlled robotic systems. [lever_c_demoted from research: ic=1 ai=1.0]

Read on arXiv cs.AI →

• arXiv
• Diffusion-based action generation
• Robotic Diffusion Policies
• Test-time Adversarial Takeover (TAKO)

• paper
• safety

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →