arXiv papers on the security (attacks and defenses) of AI-driven cyber-physical systems:
autonomous driving, robotics, drones/UAVs, and embodied AI. Harvested from
cs.LG, cs.CV, cs.CR, cs.CL, cs.AI, stat.ML, eess.IV, cs.RO, eess.SY, cs.SY
since 2013. Keyword harvest + distant-supervised TF-IDF/logistic-regression filter; confidence in brackets.
Total: 1150 papers.
Last update: 2026-10-11.


Full list (1150 papers, all months): https://nsl.cs.waseda.ac.jp/papers/physec_papers.html
Download: CSV
Download: CSV
Most recent months
2026-10 (9 papers)
- [93%] Embodied AI / VLA Detect and Suppress: A Mechanistic Defense against Adversarial Patches in VLA Models
Yukiya Horiba; Koshiro Aoki; Shunsuke Yasuki; Bum Jun Kim; Taiki Miyanishi - [92%] Autonomous driving / vehicles Transferable Spatial Temporal Coherence Adversarial Attack on Black-Box Vision Language Models for Autonomous Driving
Heyam Bin Jahlan Areej Alhothali Abeer Alhothali - [90%] Drones / UAV Defense-in-Depth at the Perception-Reasoning Interface of LLM-Centric Agentic UAV Swarms
Mohammadhossein Homaei; Yousef Emami; Sajad Homayoun; Rahim Taheri; Hao Zhou; Miguel Gutierrez Gaitan; Bo Wei - [88%] Embodied AI / VLA Black-Box Adversarial Patch Attacks on VLAs via Ancestor VLM Exploitation
Xiaoyi Pang; Haoyue Feng; Quanxin Shou; Yikun Miao; Zhengyang Yan; Song Guo - [86%] Drones / UAV Receiver-Domain Behavioral Probing for Backdoor-Resilient Federated GPS Spoofing Detection in UAV Networks
Will Jedrzejczak; Cole Walther; Dilpreet Gill; Moh Khalid Hasan - [82%] Robotics Lie Rarely, Lie Big: Stealthy Insider Attacks on LLM Robot Teams
Sribalaji C. Anand; George J. Pappas - [82%] Embodied AI / VLA Benchmarking Jailbreak Guardrails for Embodied Agents
Xunguang Wang; Qingyue Wang; Yuguang Zhou; Zongjie Li; Wenxuan Wang; Shuai Wang - [77%] Embodied AI / VLA TMT: Runtime Backdoor Detection for Vision-Language-Action Policies on Unseen Tasks
Zirun Zhou; Jingfeng Zhang; HaoChuan Xu; Xizhe Zhang; Elliott Wen; Jing Sun; Hong Jia - [73%] Autonomous driving / vehicles A Secure dToF LiDAR SoC with Dual-Domain Fingerprinting and Event-Driven AFE Circuit Achieving Sensor-Level Attack Resilience
Risa Nonaka; Ryoya Matsuno; Shota Nagai; Satomi Miyagi; Yuki Hayakawa; Ryo Suzuki; Kazuma Ikeda; Ozora Sako; Rokuto Nagata; Ryo Yoshida; Shimpei Ando; Wenlun Zhang; Kentaro Yoshioka
2026-09 (29 papers)
- [94%] Robotics Exploiting Vulnerabilities: Universal Adversarial Attacks on Vision-Language-Action Models in Robotics
Songhua Yang; Ziyu Liu; Yuanwei Liu; Xuetao Li; Xuanye Fei; He Huang; Zheng Wang; Miao Li - [91%] Robotics AuthGuard-R: Safety-Compliant Mission Hijacking and Dual-Gate Defense for LLM-Controlled Robots
Saidattu Chepuri; Vikas Srivastava - [90%] Robotics Backdoors in Learning-Based Industrial Robotic Arm Manipulation: An Empirical Security Study
Zijian Zhang; Zhen Zeng; Zhongshu Gu; Sandeep Pisharody - [86%] Drones / UAV Project SCOUT: Interceptor Drone for Perimeter Defense
Azmain Yousuf; Siwei Cai; Knut Peterson; Lifeng Zhou; David Han - [85%] Autonomous driving / vehicles LLMSec-AV: A Vulnerability Taxonomy and LLM-Driven Software Weakness Discovery Framework for Autonomous Vehicles
Md. Wasiul Haque; Sagar Dasgupta; Mizanur Rahman - [83%] Autonomous driving / vehicles Mitigating Degradation Attacks in Cooperative Autonomous Driving via Intention Sharing: A Vehicle-in-the-Loop Study
Prakhar Gupta; Tyler Ard; Rongyao Wang; Jagruti Sahoo; Judith Mwakalonge; Ardalan Vahidi; Yunyi Jia - [81%] Robotics Resilient Control Loops in Autonomous Vehicles Under Adversarial Jamming via Spectral Perception and Network-Layer Failover
Luis Barajas; Colin Jeardoe; Jaewon Kim; Eman Hammad - [81%] CPS / other LogiC-Diff: Embedding Security Properties Into AI-Enabled Cyber-Physical Systems
Ziyan An; John Stankovic; Meiyi Ma - [80%] Autonomous driving / vehicles Weather Data Spoofing Attacks on Rain-Adaptive Millimeter-Wave Frequency Selection in V2X Communication Networks
Rasheed Bello; Idreez Yusuf; Justice Adjei Owusu; Oluwatobiloba Aiyewunmi; Gurcan Comert; Judith Mwakalonge; Esmail Abuhdima; Abdulmajid Mrebit; Rajab Ataai; Vaidyan Varghese - [80%] Autonomous driving / vehicles TACTIC: Temporal and Context-Aware LLM Tactical Planning for Roadside LiDAR Attacks
Yiming Gao; Shaocheng Luo - [79%] Autonomous driving / vehicles Zonotope-Based Active Exposure of Stealthy Deception Attacks in Sensor-Fusion Systems
Meiqi Tian; Shuo Li; Bingzhuo Zhong - [79%] Drones / UAV ASGARD: Action-Space Guard for UAV Resilience via Reinforcement Learning
Mohsen Salehi; Karthik Pattabiraman - [79%] Autonomous driving / vehicles Poster: FedWM-Guard: Thwarting Imagination Poisoning in Federated World Model-based Autonomous Driving
Sheng Liu; Panos Papadimitratos - [78%] Robotics "Your Robot Was Trained on a Lie": Collision Mesh Poisoning Attacks on Robotic Manipulation
Gengyang Xu; Dongwei Xiao; Yiteng Peng; Yanbo Dai; Ruochen Zhou; Shing-Chi Cheung; Xiaoyu Ji; Wenyuan Xu; Shuai Wang - [78%] Embodied AI / VLA Beyond Patch Removal: Persistent Adversarial Effects in Vision-Language-Action Policies
Enhao Wu; Fusen Guo; Yuxin Cao; Ziyang Lyu; Lin Li; Wei Song - [76%] Autonomous driving / vehicles MDRC: A Deployable State-Recovery Defense for Traffic Signal Control under Sensor Corruption
Mingyuan Li; Chunyu Liu; Xiao Liu; Yanna Jiang; Guangsheng Yu; Xu Wang; Wei Ni; Ren Ping Liu - [74%] Embodied AI / VLA RobResilience: Implementing and Evaluating a Resilience Framework for Cyber-Physical Embodied Systems
Gysella Imrell; Emanuele Miotto; Mahya Mohammadi Kashani; Mauro Conti; Alberto Giaretta - [72%] Drones / UAV Path Invariance of a Quadrotor System under Cyber Attacks with Theoretical Guarantees
Hamza Mahmood; Usman Ali; Adeel Akhtar - [70%] Drones / UAV Game-Theoretic Drone Swarm Defense: A Case Study in Applied Differential Game Theory
Ross E. Allen - [70%] Embodied AI / VLA Are Vision-Language-Action Models Robust to One-Step Observation Perturbations?
Shojiro Yamabe; Jun Sakuma - [69%] Drones / UAV Threat-Aware Energy-Efficient Deployment for Dynamic UAV Networks: A Multi-Agent RL Approach
Faisal Al-Kamali; Hussein A. Ammar; Francois Chan; James H. Bayes; Yasser Gadallah; Mohamed H. Ahmed - [67%] Robotics Seeing is Not Believing: Breaking the Physical-to-Digital Trust Boundary in Robotics
Leming Shen; Shikai Geng; Yuanqing Zheng; Chris Xiaoxuan Lu - [64%] CPS / other Robust Industrial Cyber Physical Classification Using Neuromorphic Temporal Embeddings and Hybrid SNN XGBoost Under Machine Unlearning Attacks
Ammar Kamoona; Sajad Koushkbaghi; Mahdi Jalili; Peter McTaggart; Xinghuo Yu - [64%] Autonomous driving / vehicles UBA-ORL: Unlearning-Activated Backdoor Attacks on Offline Reinforcement Learning
Fengyi Wang; Cong Li; Lulu Xue; Qiyu Leng; Ziqi Zhou; Peijin Guo - [62%] Robotics Practical Zero-Trust for Mission-Critical Robotic Fleets via Hardware Attestation and Packet Timing Watermarking
Ryne Gonzales; Ethan Liesdyanto; Rex Worley; Michael Frederick; Jaewon Kim; Eman Hammad - [61%] Autonomous driving / vehicles Illusion of Depth: Revealing Hidden Stereo Vision Vulnerabilities in Depth Estimation
Sri Hrushikesh Varma Bhupathiraju; Tetsu Ishizue; Nicholas U. Costagliola; Ozora Sako; Kentaro Yoshioka; Takeshi Sugawara; Sara Rampazzi - [55%] Embodied AI / VLA Modality-Decoupled Federated Learning for Privacy-Preserving Embodied Intelligence in 6G
Zhuodong Liu; Xiangyu Li; Chunhong Yuan; Hongyang Du; Bodong Shang; Qingqing Wu; Tony Q. S. Quek; Mohsen Guizani - [52%] Robotics Integrity Detection and Characterization of Malicious Injections in RAVEN II
Xingli Zhang; Diba Afroze; Fei Hu; Xiali Hei - [51%] Autonomous driving / vehicles Sybil-TraceGuard: Traceability-enhanced Sybil Guardian for Connected and Autonomous Vehicles Using Dynamic Semi-supervised GNN
Qian Xu; Jiaxun Zhang; Chengyue Wang; Zhenning Li