Experiments demonstrate that DDPO significantly outperforms static prompt optimization methods, particularly on weakly aligned models and when handling semantically ambiguous benign prompts, successfully distinguishing them from genuinely harmful requests.
Doniyorkhon Obidov, H. Yu, Xiaolong Guo et al.· AAAI Conference on Artificia...· 4 citations
It is demonstrated that an attacker can embed a stealthy backdoor into an LLM-based robot controller by manipulating its instructions, triggered not by an external cue, but by a specific, rare sequence of the robot's own past actions.
Doniyorkhon Obidov, Shivayogi Akki, Cheng-Qiu Tan et al.· 2 citations
StepTrigger, a contact-state-triggered backdoor attack for VLM-powered legged robots, is presented, a contact-state-triggered backdoor attack for VLM-powered legged robots that reveals a backdoor surface in proprioceptive and contact channels that is not captured by defenses focused only on language, vision, or action...