Trojan Attacks on Neural Network Controllers for Robotic Systems

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Younesi, Farbod, Lucia, Walter, Youssef, Amr
Format: Preprint
Publié: 2026
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866908814112980992
author Younesi, Farbod
Lucia, Walter
Youssef, Amr
author_facet Younesi, Farbod
Lucia, Walter
Youssef, Amr
contents Neural network controllers are increasingly deployed in robotic systems for tasks such as trajectory tracking and pose stabilization. However, their reliance on potentially untrusted training pipelines or supply chains introduces significant security vulnerabilities. This paper investigates backdoor (Trojan) attacks against neural controllers, using a differential-drive mobile robot platform as a case study. In particular, assuming that the robot's tracking controller is implemented as a neural network, we design a lightweight, parallel Trojan network that can be embedded within the controller. This malicious module remains dormant during normal operation but, upon detecting a highly specific trigger condition defined by the robot's pose and goal parameters, compromises the primary controller's wheel velocity commands, resulting in undesired and potentially unsafe robot behaviours. We provide a proof-of-concept implementation of the proposed Trojan network, which is validated through simulation under two different attack scenarios. The results confirm the effectiveness of the proposed attack and demonstrate that neural network-based robotic control systems are subject to potentially critical security threats.
format Preprint
id arxiv_https___arxiv_org_abs_2602_05121
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle Trojan Attacks on Neural Network Controllers for Robotic Systems
Younesi, Farbod
Lucia, Walter
Youssef, Amr
Systems and Control
Robotics
Neural network controllers are increasingly deployed in robotic systems for tasks such as trajectory tracking and pose stabilization. However, their reliance on potentially untrusted training pipelines or supply chains introduces significant security vulnerabilities. This paper investigates backdoor (Trojan) attacks against neural controllers, using a differential-drive mobile robot platform as a case study. In particular, assuming that the robot's tracking controller is implemented as a neural network, we design a lightweight, parallel Trojan network that can be embedded within the controller. This malicious module remains dormant during normal operation but, upon detecting a highly specific trigger condition defined by the robot's pose and goal parameters, compromises the primary controller's wheel velocity commands, resulting in undesired and potentially unsafe robot behaviours. We provide a proof-of-concept implementation of the proposed Trojan network, which is validated through simulation under two different attack scenarios. The results confirm the effectiveness of the proposed attack and demonstrate that neural network-based robotic control systems are subject to potentially critical security threats.
title Trojan Attacks on Neural Network Controllers for Robotic Systems
topic Systems and Control
Robotics
url https://arxiv.org/abs/2602.05121