arXiv:2601.02377cs.RO2026-01综述被引 5

LLM控制机器人面临物理安全威胁,本文系统梳理攻防策略与挑战。

Trust in LLM-controlled Robotics: a Survey of Security Threats, Defenses and Challenges

  • 构建攻击分类体系,涵盖越狱、后门、多模态注入等
  • 提出从形式化规范到运行时防护的多层次防御框架
  • 适合关注机器人安全与可信AI的研究者与开发者

大型语言模型(LLMs)与机器人的融合显著提升了其理解复杂人类指令和执行高阶任务的能力。然而,这一范式转变带来了关键的安全漏洞,源于‘具身差距’——即LLM的抽象推理与机器人物理环境的上下文依赖性之间的脱节。尽管文本类LLM的安全研究已较为活跃,现有方案难以应对具身机器人所面临的独特威胁:恶意输出不仅表现为有害文本,更可能引发危险的物理行为。本文系统综述了LLM控制机器人领域的新兴威胁图景与对应防御策略,提出全面的攻击向量分类,涵盖越狱、后门攻击和多模态提示注入等。针对这些威胁,分析并归类了一系列防御机制,包括形式化安全规范、运行时强制、多LLM监督与提示强化。此外,回顾了评估此类具身系统鲁棒性的关键数据集与基准。通过整合现有研究,本文强调了对上下文感知安全解决方案的迫切需求,并为构建安全、可靠、可信的LLM控制机器人提供了基础路线图。

原文摘要 · Abstract (English)

The integration of Large Language Models (LLMs) into robotics has revolutionized their ability to interpret complex human commands and execute sophisticated tasks. However, such paradigm shift introduces critical security vulnerabilities stemming from the ''embodiment gap'', a discord between the LLM's abstract reasoning and the physical, context-dependent nature of robotics. While security for text-based LLMs is an active area of research, existing solutions are often insufficient to address the unique threats for the embodied robotic agents, where malicious outputs manifest not merely as harmful text but as dangerous physical actions. In this work, we present a systematic survey, summarizing the emerging threat landscape and corresponding defense strategies for LLM-controlled robotics. Specifically, we discuss a comprehensive taxonomy of attack vectors, covering topics such as jailbreaking, backdoor attacks, and multi-modal prompt injection. In response, we analyze and categorize a range of defense mechanisms, from formal safety specifications and runtime enforcement to multi-LLM oversight and prompt hardening. Furthermore, we review key datasets and benchmarks used to evaluate the robustness of these embodied systems. By synthesizing current research, this work highlights the urgent need for context-aware security solutions and provides a foundational roadmap for the development of safe, secure, and reliable LLM-controlled robotics.

机器人安全LLM安全具身智能攻防对抗

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。