Structure-Aware Robust Fine-Tuning: Defending Vision-Language-Action Robots Against Physical Attention Hijacking
Vision-Language-Action (VLA) policies promise general robotic manipulation, but their robustness against physical-world attacks remains fragile. In particular, we show that physically realizable adversarial patches can reliably induce failures by triggering a mechanism we call policy-critical action-to-vision attention hijacking, where action-conditioned attention is diverted from task-relevant regions to a localized patch. To demonstrate the threat, we propose Attention-Guided Semantic Disrupti
Record details
Published: 4 August 2026
Source: arXiv
Category: Research
Topics: Regulation · Agents & autonomy
Retrieved: 5 August 2026
Related evidence
These records share source-supplied organisations, an exact publisher byline, automatic topics or regions. The reason is shown on every link; related does not mean supporting, agreeing with or verifying this record.
A Security-Oriented Lifecycle Model for Large Language Model Systems
arXiv · 4 August 2026
AgenticECO: An Agentic Framework for ECO on 3D Integrated Circuits
arXiv cs.AI · 4 August 2026
When Privileged Guidance Misaligns: State-Matched Routing and Contextualized Self-Distillation for Multi-Turn Agents
HuggingFace Daily Papers · 4 August 2026
CoWAM: Coordination Contracts for Selective Policy Intervention with WAMs
arXiv cs.AI · 3 August 2026
AtumAI: A Principled Framework for Agentic Generation of Datacenter Control-Plane Policies
arXiv cs.AI · 3 August 2026
A Taxonomy of Cognitive Capability Gaps in Generative and Agentic AI
arXiv cs.AI · 3 August 2026
How to cite this record
ethics.ai (4 August 2026), “Structure-Aware Robust Fine-Tuning: Defending Vision-Language-Action Robots Against Physical Attention Hijacking,” evidence record 16294, https://ethics.ai/record/16294 (originally published by arXiv).
Use and limitations
This page is a stable index and citation surface for a source record. ethics.ai did not author the underlying report and has not independently verified every claim. Automatic topics may be imperfect. For consequential use, quote and cite the original publisher.