{"total":91,"rows":[{"id":"2101.08452","title":"Robust Reinforcement Learning on State Observations with Learned Optimal Adversary","created":"2021-01-21","cited_by_count":135,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2206.02829","title":"RORL: Robust Offline Reinforcement Learning via Conservative Smoothing","created":"2022-06-06","cited_by_count":84,"area":"offlinerl"},{"id":"2106.05087","title":"Who Is the Strongest Enemy? Towards Optimal and Efficient Evasion Attacks in Deep RL","created":"2021-06-09","cited_by_count":55,"area":null},{"id":"2210.05927","title":"Efficient Adversarial Training without Attacking: Worst-Case-Aware Robust Reinforcement Learning","created":"2022-10-12","cited_by_count":43,"area":null},{"id":"2106.09292","title":"CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothing","created":"2021-06-17","cited_by_count":42,"area":null},{"id":"2106.11420","title":"Policy Smoothing for Provably Robust Reinforcement Learning","created":"2021-06-21","cited_by_count":40,"area":null},{"id":"2209.08025","title":"Trustworthy Reinforcement Learning Against Intrinsic Vulnerabilities: Robustness, Safety, and Generalizability","created":"2022-09-16","cited_by_count":36,"area":null},{"id":"2110.04471","title":"Provably Efficient Black-Box Action Poisoning Attacks Against Reinforcement Learning","created":"2021-10-09","cited_by_count":29,"area":null},{"id":"2102.08492","title":"Reward Poisoning in Reinforcement Learning: Attacks Against Unknown Learners in Unknown Environments","created":"2021-02-16","cited_by_count":26,"area":null},{"id":"2212.02705","title":"What is the Solution for State-Adversarial Multi-Agent Reinforcement Learning?","created":"2022-12-06","cited_by_count":22,"area":null},{"id":"2204.07932","title":"Towards Comprehensive Testing on the Robustness of Cooperative Multi-agent Reinforcement Learning","created":"2022-04-17","cited_by_count":21,"area":null},{"id":"2208.13663","title":"Understanding the Limits of Poisoning Attacks in Episodic Reinforcement Learning","created":"2022-08-29","cited_by_count":21,"area":null},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18,"area":null},{"id":"2311.09994","title":"Towards more Practical Threat Models in Artificial Intelligence Security","created":"2023-11-16","cited_by_count":17,"area":null},{"id":"2110.01388","title":"Neural Network Verification in Control","created":"2021-09-30","cited_by_count":14,"area":null},{"id":"2106.15860","title":"Understanding Adversarial Attacks on Observations in Deep Reinforcement Learning","created":"2021-06-30","cited_by_count":13,"area":null},{"id":"2109.07723","title":"Targeted Attack on Deep RL-based Autonomous Driving with Learned Visual Patterns","created":"2021-09-16","cited_by_count":13,"area":"driving"},{"id":"2112.02807","title":"MDPFuzz: Testing Models Solving Markov Decision Processes","created":"2021-12-06","cited_by_count":12,"area":null},{"id":"2312.00198","title":"Optimal Attack and Defense for Reinforcement Learning","created":"2023-11-30","cited_by_count":12,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2307.07670","title":"Efficient Adversarial Attacks on Online Multi-agent Reinforcement Learning","created":"2023-07-15","cited_by_count":10,"area":null},{"id":"2106.08746","title":"Real-time Adversarial Perturbations against Deep Reinforcement Learning Policies: Attacks and Defenses","created":"2021-06-16","cited_by_count":9,"area":null},{"id":"2205.14842","title":"Efficient Reward Poisoning Attacks on Online Deep Reinforcement Learning","created":"2022-05-30","cited_by_count":9,"area":null},{"id":"2205.09362","title":"Sparse Adversarial Attack in Multi-agent Reinforcement Learning","created":"2022-05-19","cited_by_count":8,"area":null},{"id":"2402.12673","title":"Beyond Worst-case Attacks: Robust RL with Adaptive Defense via Non-dominated Policies","created":"2024-02-20","cited_by_count":8,"area":"deeprl"},{"id":"2212.11746","title":"Certified Policy Smoothing for Cooperative Multi-Agent Reinforcement Learning","created":"2022-12-22","cited_by_count":7,"area":null},{"id":"2301.00188","title":"New Challenges in Reinforcement Learning: A Survey of Security and Privacy","created":"2022-12-31","cited_by_count":7,"area":null},{"id":"2402.03741","title":"SUB-PLAY: Adversarial Policies against Partially Observed Multi-Agent Reinforcement Learning Systems","created":"2024-02-06","cited_by_count":7,"area":null},{"id":"2511.21584","title":"Model-Based Policy Adaptation for Closed-Loop End-to-End Autonomous Driving","created":"2025-11-26","cited_by_count":7,"area":"driving"},{"id":"2605.23220","title":"WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agents","created":"2026-05-22","cited_by_count":7,"area":"wm"},{"id":"2410.03376","title":"Mitigating Adversarial Perturbations for Deep Reinforcement Learning via Vector Quantization","created":"2024-10-04","cited_by_count":6,"area":"deeprl"},{"id":"2106.01617","title":"Improving the Transferability of Adversarial Examples with New Iteration Framework and Input Dropout","created":"2021-06-03","cited_by_count":5,"area":null},{"id":"2205.00807","title":"Deep-Attack over the Deep Reinforcement Learning","created":"2022-05-02","cited_by_count":5,"area":null},{"id":"2209.03540","title":"Reward Delay Attacks on Deep Reinforcement Learning","created":"2022-09-08","cited_by_count":5,"area":null},{"id":"2305.10681","title":"Black-Box Targeted Reward Poisoning Attack Against Online Deep Reinforcement Learning","created":"2023-05-18","cited_by_count":5,"area":null},{"id":"2501.15529","title":"UNIDOOR: A Universal Framework for Action-Level Backdoor Attacks in Deep Reinforcement Learning","created":"2025-01-26","cited_by_count":5,"area":"deeprl"},{"id":"2102.06587","title":"Disturbing Reinforcement Learning Agents with Corrupted Rewards","created":"2021-02-12","cited_by_count":4,"area":null},{"id":"2109.07171","title":"Balancing detectability and performance of attacks on the control channel of Markov Decision Processes","created":"2021-09-15","cited_by_count":4,"area":null},{"id":"2402.02165","title":"Towards Optimal Adversarial Robust Q-learning with Bellman Infinity-error","created":"2024-02-03","cited_by_count":4,"area":"deeprl"},{"id":"2404.04714","title":"Data Poisoning Attacks on Off-Policy Policy Evaluation Methods","created":"2024-04-06","cited_by_count":4,"area":"safety"},{"id":"2104.03154","title":"Improving Robustness of Deep Reinforcement Learning Agents: Environment Attack based on the Critic Network","created":"2021-04-07","cited_by_count":3,"area":null},{"id":"2112.05367","title":"Efficient Action Poisoning Attacks on Linear Contextual Bandits","created":"2021-12-10","cited_by_count":3,"area":null},{"id":"2205.15379","title":"Truly Deterministic Policy Optimization","created":"2022-05-30","cited_by_count":3,"area":null},{"id":"2210.11237","title":"Emerging Threats in Deep Learning-Based Autonomous Driving: A Comprehensive Survey","created":"2022-10-19","cited_by_count":3,"area":null},{"id":"2301.04299","title":"SoK: Adversarial Machine Learning Attacks and Defences in Multi-Agent Reinforcement Learning","created":"2023-01-11","cited_by_count":3,"area":null},{"id":"2506.12815","title":"TrojanTO: Action-Level Backdoor Attacks against Trajectory Optimization Models","created":"2025-06-15","cited_by_count":3,"area":"offlinerl"},{"id":"2507.17070","title":"Advancing Robustness in Deep Reinforcement Learning with an Ensemble Defense Approach","created":"2025-07-22","cited_by_count":3,"area":"deeprl"},{"id":"2109.08904","title":"Towards Resilient Artificial Intelligence: Survey and Research Issues","created":"2021-09-18","cited_by_count":2,"area":null},{"id":"2111.02845","title":"Attacking Deep Reinforcement Learning-Based Traffic Signal Control Systems with Colluding Vehicles","created":"2021-11-04","cited_by_count":2,"area":null},{"id":"2210.16915","title":"Imitating Opponent to Win: Adversarial Policy Imitation Learning in Two-player Competitive Games","created":"2022-10-30","cited_by_count":2,"area":"offlinerl"},{"id":"2212.06123","title":"Security of Deep Reinforcement Learning for Autonomous Driving: A Survey","created":"2022-12-12","cited_by_count":2,"area":"driving"},{"id":"2402.13487","title":"Stealthy Adversarial Attacks on Stochastic Multi-Armed Bandits","created":"2024-02-21","cited_by_count":2,"area":null},{"id":"2408.15200","title":"SpecGuard: Specification Aware Recovery for Robotic Autonomous Vehicles from Physical Attacks","created":"2024-08-27","cited_by_count":2,"area":"driving"},{"id":"2510.20314","title":"Enhancing Security in Deep Reinforcement Learning: A Comprehensive Survey on Adversarial Attacks and Defenses","created":"2025-10-23","cited_by_count":2,"area":"deeprl"},{"id":"2102.05867","title":"Adversarial Poisoning Attacks and Defense for General Multi-Class Models Based On Synthetic Reduced Nearest Neighbors","created":"2021-02-11","cited_by_count":1,"area":"safety"},{"id":"2112.06276","title":"Quantifying and Understanding Adversarial Examples in Discrete Input Spaces","created":"2021-12-12","cited_by_count":1,"area":null},{"id":"2303.16308","title":"Provable Robustness for Streaming Models with a Sliding Window","created":"2023-03-28","cited_by_count":1,"area":null},{"id":"2311.00859","title":"Optimal Cost Constrained Adversarial Attacks For Multiple Agent Systems","created":"2023-11-01","cited_by_count":1,"area":null},{"id":"2411.13116","title":"Provably Efficient Action-Manipulation Attack Against Continuous Reinforcement Learning","created":"2024-11-20","cited_by_count":1,"area":"deeprl"},{"id":"2411.14442","title":"AI Ethics by Design: Implementing Customizable Guardrails for Responsible AI Development","created":"2024-11-05","cited_by_count":1,"area":null},{"id":"2501.17667","title":"CAMP in the Odyssey: Provably Robust Reinforcement Learning with Certified Radius Maximization","created":"2025-01-29","cited_by_count":1,"area":"deeprl"},{"id":"2605.14587","title":"Angel or Demon: Investigating the Plasticity Interventions' Impact on Backdoor Threats in Deep Reinforcement Learning","created":"2026-05-14","cited_by_count":1,"area":"deeprl"},{"id":"2002.01059","title":"Preventing Imitation Learning with Adversarial Policy Ensembles","created":"2020-01-31","cited_by_count":0,"area":"offlinerl"},{"id":"2107.00003","title":"Understanding Adversarial Examples Through Deep Neural Network's Response Surface and Uncertainty Regions","created":"2021-06-30","cited_by_count":0,"area":null},{"id":"2208.07643","title":"A Review of the Convergence of 5G/6G Architecture and Deep Learning","created":"2022-08-16","cited_by_count":0,"area":null},{"id":"2209.15320","title":"Bounded Robustness in Reinforcement Learning via Lexicographic Objectives","created":"2022-09-30","cited_by_count":0,"area":null},{"id":"2211.10033","title":"Adversarial Stimuli: Attacking Brain-Computer Interfaces via Perturbed Sensory Events","created":"2022-11-18","cited_by_count":0,"area":null},{"id":"2211.13474","title":"Explainable and Safe Reinforcement Learning for Autonomous Air Mobility","created":"2022-11-24","cited_by_count":0,"area":null},{"id":"2307.06287","title":"Rational Neural Network Controllers","created":"2023-07-12","cited_by_count":0,"area":null},{"id":"2308.04909","title":"Adversarial Deep Reinforcement Learning for Cyber Security in Software Defined Networks","created":"2023-08-09","cited_by_count":0,"area":null},{"id":"2401.02652","title":"Adaptive Discounting of Training Time Attacks","created":"2024-01-05","cited_by_count":0,"area":"safety"},{"id":"2405.06689","title":"Policy Iteration for Two-Player General-Sum Stochastic Stackelberg Games","created":"2024-05-07","cited_by_count":0,"area":null},{"id":"2407.05182","title":"A Novel Bifurcation Method for Observation Perturbation Attacks on Reinforcement Learning Agents: Load Altering Attacks on a Cyber Physical Power System","created":"2024-07-06","cited_by_count":0,"area":"deeprl"},{"id":"2408.00023","title":"On the Perturbed States for Transformed Input-robust Reinforcement Learning","created":"2024-07-31","cited_by_count":0,"area":"deeprl"},{"id":"2412.16213","title":"AdvIRL: Reinforcement Learning-Based Adversarial Attacks on 3D NeRF Models","created":"2024-12-18","cited_by_count":0,"area":"deeprl"},{"id":"2505.21414","title":"A Framework for Adversarial Analysis of Decision Support Systems Prior to Deployment","created":"2025-05-27","cited_by_count":0,"area":"deeprl"},{"id":"2506.08961","title":"Towards Robust Deep Reinforcement Learning against Environmental State Perturbation","created":"2025-06-10","cited_by_count":0,"area":"deeprl"},{"id":"2508.15764","title":"Distributed Detection of Adversarial Attacks in Multi-Agent Reinforcement Learning with Continuous Action Space","created":"2025-08-21","cited_by_count":0,"area":null},{"id":"2510.10937","title":"Neutral Agent-based Adversarial Policy Learning against Deep Reinforcement Learning in Multi-party Open Systems","created":"2025-10-13","cited_by_count":0,"area":"deeprl"},{"id":"2510.12939","title":"Pruning Cannot Hurt Robustness: Certified Trade-offs in Reinforcement Learning","created":"2025-10-14","cited_by_count":0,"area":"deeprl"},{"id":"2510.13792","title":"Provably Invincible Adversarial Attacks on Reinforcement Learning Systems: A Rate-Distortion Information-Theoretic Approach","created":"2025-10-15","cited_by_count":0,"area":"deeprl"},{"id":"2512.01228","title":"On the Tension Between Optimality and Adversarial Robustness in Policy Optimization","created":"2025-12-01","cited_by_count":0,"area":"deeprl"},{"id":"2602.16543","title":"Demonstration-Guided Observation Attacks on Black-Box Safe Reinforcement Learning Controllers for Robotic Systems","created":"2026-02-18","cited_by_count":0,"area":"deeprl"},{"id":"2602.19582","title":"Advantage-based Temporal Attack in Reinforcement Learning","created":"2026-02-23","cited_by_count":0,"area":"deeprl"},{"id":"2606.09559","title":"Safe-RULE: Safe Reinforcement UnLEarning","created":"2026-06-08","cited_by_count":0,"area":"safety"},{"id":"2606.16555","title":"Incentives and Evidence in Learned Service Orchestration","created":"2026-06-15","cited_by_count":0,"area":"deeprl"},{"id":"2606.20880","title":"Adversarial observations in probabilistic State-Space Models for robust Reinforcement Learning","created":"2026-06-18","cited_by_count":0,"area":"deeprl"},{"id":"2609.10866","title":"Certifying Lower Bounds for Risk-Sensitive Reinforcement Learning under Adversarial State Perturbations","created":"2026-09-09","cited_by_count":0,"area":"deeprl"}],"next_cursor":null}