首页|期刊导航|航天器工程|一种空间机器人流匹配VLA模型安全漏洞研究

一种空间机器人流匹配VLA模型安全漏洞研究OA

A Study of Security Vulnerabilities in Flow-matching-based Visual-Language-Action Model for Space Robot

中文摘要英文摘要

视觉-语言-动作模型(Vison-Language-Action Model,VLA)正成为下一代空间机器人在轨自主控制的核心技术,支撑航天器捕获、舱外维护、载荷装配等关键任务,然而,其大规模数据依赖性,以及这类模型生成连续动作的独特机制也带来了未被系统研究的安全漏洞.文章从空间机器人在轨自主控制安全角度出发,提出一种面向空间机器人应用的基于流匹配原理的视觉-语言-动作模型的动力学感知后门安全漏洞框架,设计了适配空间作业场景的高隐蔽性触发机制、条件动力学攻击模块与动力学拟正则化模块,实现了高隐蔽、高成功率的模型攻击.在高保真机器人仿真平台与机械臂物理验证系统上开展了系统性实验,全面验证了攻击方法的有效性和隐蔽性.实验结果表明,该方法在上下文感知触发下最高可实现100%的攻击成功率,几乎不影响模型正常任务性能,生成的恶意轨迹在速度、加速度、平滑度等运动学指标上与正常轨迹无显著差异,可有效绕过现有空间机器人异常检测机制.研究揭示了基于流匹配原理的连续生成式空间机器人视觉-语言-动作模型的一种关键安全漏洞隐患,期望为空间机器人智能控制系统的安全设计与防御提供理论依据和工程参考.

Vision-Language-Action(VLA)models are emerging as a core technology for next-gen-eration on-orbit autonomous control of space robots,supporting critical missions including space-craft capture,extravehicular maintenance and payload assembly.However,their heavy reliance on large-scale datasets and their distinctive mechanism for continuous action generation introduce security vulnerabilities that have not been systematically studied.From the perspective of auton-omous on-orbit control security for space robots,this paper proposes a dynamics-aware backdoor security framework for flow-matching-based VLA models tailored to space robot applications.A highly stealthy trigger mechanism tailored to space operation scenarios,a conditional dynamics attack module,and a dynamics quasi-regularization module are designed to achieve highly stealthy attacks with high success rates.Systematic experiments are conducted on a high-fidelity robotic simulation platform and a physical manipulator verification system to fully verify the effectiveness and stealthiness of the method.The results show that the method achieves an attack success rate up to 100%under context-aware triggering,with negligible degradation in normal task perform-ance.The generated malicious trajectories show no significant differences from normal trajecto-ries in kinematic metrics such as velocity,acceleration and smoothness,thus effectively bypass-ing existing space robot anomaly detection mechanisms.This study reveals critical security vul-nerability in flow-matching-based continuous generative VLA models for space robots,and pro-vides a theoretical basis and engineering reference for the security design and defense of space ro-bot intelligent control systems.

罗涛;张亚航;王耀兵

北京空间飞行器总体设计部,北京 100094||空间智能机器人系统技术与应用北京市重点实验室,北京 100094北京空间飞行器总体设计部,北京 100094||空间智能机器人系统技术与应用北京市重点实验室,北京 100094北京空间飞行器总体设计部,北京 100094||空间智能机器人系统技术与应用北京市重点实验室,北京 100094

航空航天

空间机器人具身智能视觉-语言-动作模型安全漏洞

space robotembodied intelligenceVision-Language-Action Modelsecurity vulnera-bility

《航天器工程》 2026 (3)

110-117,8

10.3969/j.issn.1673-8748.2026.03.015

评论