TMT: Runtime Backdoor Detection for Vision-Language-Action Policies on Unseen Tasks

arXiv:2610.09462 · cs.RO · Submitted 2026-10-07 · Read on arXiv

cs.RO

Submitted: 2026-10-07

Updated: 2026-10-07

Project page: https://zzr42.github.io/tmt

Terminology

• AUC — 34× in this paper · explained in 2 episodes
• Ablation — 11× in this paper · explained in 1 episode
• Distillation — 9× in this paper · explained in 2 episodes
• Self-Distillation — 7× in this paper · explained in 7 episodes
• Latent Dynamics — 5× in this paper · explained in 2 episodes
• Adaptation — 4× in this paper · explained in 1 episode
• Consistency — 3× in this paper · explained in 3 episodes
• Trace — 3× in this paper · explained in 2 episodes
• Calibration — 2× in this paper · explained in 7 episodes
• Conference on Computer Vision and Pattern Recognition — 2× in this paper
• Generalization — 2× in this paper · explained in 13 episodes
• Ablation Studies — 1× in this paper · explained in 1 episode
• Action-Level Backdoor Attack — 1× in this paper · explained in 1 episode
• Attention Mechanism — 1× in this paper · explained in 3 episodes
• Benchmark — 1× in this paper · explained in 2 episodes
• Benchmarking — 1× in this paper · explained in 3 episodes
• Corruption Robustness — 1× in this paper · explained in 2 episodes
• Distribution Shift — 1× in this paper · explained in 6 episodes
• Epistemic Uncertainty — 1× in this paper · explained in 10 episodes
• Fine-Tuning — 1× in this paper · explained in 5 episodes
• Generative AI — 1× in this paper · explained in 2 episodes
• Reconstruction Error — 1× in this paper · explained in 2 episodes
• Robustness — 1× in this paper · explained in 5 episodes
• Transformer — 1× in this paper · explained in 2 episodes
• VLA Models — 1× in this paper · explained in 3 episodes

Sources

• Exploration by Random Network Distillation
• TrustVLA: Mechanism-Guided Inference-Time Defense Against Vision-Language-Action Backdoors
• $\pi_{0.5}$: a Vision-Language-Action Model with Open-World Generalization
• DropVLA: An Action-Level Backdoor Attack on Vision-Language-Action Models
• Goal-oriented Backdoor Attack against Vision-Language-Action Models via Physical Objects

Related papers

• FMT x: An Efficient and Asymptotically Optimal Extension of the Fast Marching Tree for Dynamic Replanning
• MPCFormer: A physics-informed data-driven approach for explainable socially-aware autonomous driving
• RoboLab: A High-Fidelity Simulation Benchmark for Analysis of Task Generalist Policies
• HRDexDB: A 4D Dexterous Grasping Dataset Across Human and Multiple Robot Embodiments
• APT: Action Expert Pretraining Improves Instruction Generalization of Vision-Language-Action Policies
• Fine-tuning is Not Enough: A Parallel Framework for Collaborative Imitation and Reinforcement Learning in End-to-end Autonomous Driving