{"total":320,"rows":[{"id":"1811.07871","title":"Scalable agent alignment via reward modeling: a research direction","created":"2018-11-19","cited_by_count":447,"area":"alignment"},{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2101.08452","title":"Robust Reinforcement Learning on State Observations with Learned Optimal Adversary","created":"2021-01-21","cited_by_count":135,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2110.05038","title":"Recurrent Model-Free RL Can Be a Strong Baseline for Many POMDPs","created":"2021-10-11","cited_by_count":122,"area":null},{"id":"2204.12581","title":"RAMBO-RL: Robust Adversarial Model-Based Offline Reinforcement Learning","created":"2022-04-26","cited_by_count":115,"area":"offlinerl"},{"id":"2109.14523","title":"Online Robust Reinforcement Learning with Model Uncertainty","created":"2021-09-29","cited_by_count":96,"area":null},{"id":"2206.02829","title":"RORL: Robust Offline Reinforcement Learning via Conservative Smoothing","created":"2022-06-06","cited_by_count":84,"area":"offlinerl"},{"id":"2210.08340","title":"Toward Next-Generation Artificial Intelligence: Catalyzing the NeuroAI Revolution","created":"2022-10-15","cited_by_count":78,"area":null},{"id":"2112.13112","title":"A Survey on Interpretable Reinforcement Learning","created":"2021-12-24","cited_by_count":73,"area":null},{"id":"1910.05821","title":"Policy Poisoning in Batch Reinforcement Learning and Control","created":"2019-10-13","cited_by_count":70,"area":"offlinerl"},{"id":"2205.07344","title":"Policy Gradient Method For Robust Reinforcement Learning","created":"2022-05-15","cited_by_count":69,"area":null},{"id":"2105.00579","title":"BACKDOORL: Backdoor Attack against Competitive Reinforcement Learning","created":"2021-05-02","cited_by_count":68,"area":null},{"id":"2106.06663","title":"TDGIA:Effective Injection Attacks on Graph Neural Networks","created":"2021-06-12","cited_by_count":67,"area":null},{"id":"2502.14881","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","created":"2025-02-14","cited_by_count":67,"area":"mllm"},{"id":"2206.09682","title":"SafeBench: A Benchmarking Platform for Safety Evaluation of Autonomous Vehicles","created":"2022-06-20","cited_by_count":66,"area":"driving"},{"id":"2111.00956","title":"Robot Learning from Randomized Simulations: A Review","created":"2021-11-01","cited_by_count":63,"area":null},{"id":"2106.05087","title":"Who Is the Strongest Enemy? Towards Optimal and Efficient Evasion Attacks in Deep RL","created":"2021-06-09","cited_by_count":55,"area":null},{"id":"2101.06560","title":"Adversarial Attacks On Multi-Agent Communication","created":"2021-01-17","cited_by_count":49,"area":null},{"id":"2202.10910","title":"Sound Adversarial Audio-Visual Navigation","created":"2022-02-22","cited_by_count":48,"area":null},{"id":"2209.08162","title":"Uncertainty Quantification of Collaborative Detection for Self-Driving","created":"2022-09-16","cited_by_count":46,"area":null},{"id":"2101.08030","title":"Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Data","created":"2021-01-20","cited_by_count":45,"area":null},{"id":"2411.18688","title":"Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment","created":"2024-11-27","cited_by_count":44,"area":"lr"},{"id":"2210.05927","title":"Efficient Adversarial Training without Attacking: Worst-Case-Aware Robust Reinforcement Learning","created":"2022-10-12","cited_by_count":43,"area":null},{"id":"2106.09292","title":"CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothing","created":"2021-06-17","cited_by_count":42,"area":null},{"id":"2210.13915","title":"Towards Formal XAI: Formally Approximate Minimal Explanations of Neural Networks","created":"2022-10-25","cited_by_count":42,"area":null},{"id":"2206.04436","title":"Towards Safe Reinforcement Learning via Constraining Conditional Value-at-Risk","created":"2022-06-09","cited_by_count":41,"area":null},{"id":"2106.11420","title":"Policy Smoothing for Provably Robust Reinforcement Learning","created":"2021-06-21","cited_by_count":40,"area":null},{"id":"2110.15767","title":"Adversarial Robustness with Semi-Infinite Constrained Learning","created":"2021-10-29","cited_by_count":39,"area":null},{"id":"2205.14691","title":"On the Robustness of Safe Reinforcement Learning under Observational Perturbations","created":"2022-05-29","cited_by_count":38,"area":null},{"id":"2209.08025","title":"Trustworthy Reinforcement Learning Against Intrinsic Vulnerabilities: Robustness, Safety, and Generalizability","created":"2022-09-16","cited_by_count":36,"area":null},{"id":"2307.16212","title":"Robust Multi-Agent Reinforcement Learning with State Uncertainty","created":"2023-07-30","cited_by_count":36,"area":null},{"id":"2106.15023","title":"Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent","created":"2021-06-28","cited_by_count":35,"area":null},{"id":"2312.04730","title":"DeceptPrompt: Exploiting LLM-driven Code Generation via Adversarial Natural Language Instructions","created":"2023-12-07","cited_by_count":33,"area":null},{"id":"2209.06620","title":"Distributionally Robust Offline Reinforcement Learning with Linear Function Approximation","created":"2022-09-14","cited_by_count":32,"area":"offlinerl"},{"id":"2408.03400","title":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","created":"2024-08-06","cited_by_count":32,"area":"diffusion"},{"id":"2106.03805","title":"3DB: A Framework for Debugging Computer Vision Models","created":"2021-06-07","cited_by_count":31,"area":null},{"id":"2512.04797","title":"SIMA 2: A Generalist Embodied Agent for Virtual Worlds","created":"2025-12-04","cited_by_count":31,"area":"agents"},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2106.10110","title":"Towards Distraction-Robust Active Visual Tracking","created":"2021-06-18","cited_by_count":30,"area":null},{"id":"2109.03214","title":"Robust Predictable Control","created":"2021-09-07","cited_by_count":29,"area":null},{"id":"2110.04471","title":"Provably Efficient Black-Box Action Poisoning Attacks Against Reinforcement Learning","created":"2021-10-09","cited_by_count":29,"area":null},{"id":"2211.00241","title":"Adversarial Policies Beat Superhuman Go AIs","created":"2022-11-01","cited_by_count":29,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2308.08162","title":"Interpretability Benchmark for Evaluating Spatial Misalignment of Prototypical Parts Explanations","created":"2023-08-16","cited_by_count":27,"area":null},{"id":"2102.08492","title":"Reward Poisoning in Reinforcement Learning: Attacks Against Unknown Learners in Unknown Environments","created":"2021-02-16","cited_by_count":26,"area":null},{"id":"2203.08398","title":"COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attacks","created":"2022-03-16","cited_by_count":26,"area":"offlinerl"},{"id":"2210.04688","title":"BAFFLE: Hiding Backdoors in Offline Reinforcement Learning Datasets","created":"2022-10-07","cited_by_count":25,"area":"offlinerl"},{"id":"2510.00037","title":"RobustVLA: On Robustness of Vision-Language-Action Model against Multi-Modal Perturbations","created":"2025-09-26","cited_by_count":25,"area":"vla"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2212.02705","title":"What is the Solution for State-Adversarial Multi-Agent Reinforcement Learning?","created":"2022-12-06","cited_by_count":22,"area":null},{"id":"2301.00858","title":"Robust Average-Reward Markov Decision Processes","created":"2023-01-02","cited_by_count":22,"area":null},{"id":"2102.05776","title":"Defense Against Reward Poisoning Attacks in Reinforcement Learning","created":"2021-02-10","cited_by_count":21,"area":null},{"id":"2204.07932","title":"Towards Comprehensive Testing on the Robustness of Cooperative Multi-agent Reinforcement Learning","created":"2022-04-17","cited_by_count":21,"area":null},{"id":"2208.13663","title":"Understanding the Limits of Poisoning Attacks in Episodic Reinforcement Learning","created":"2022-08-29","cited_by_count":21,"area":null},{"id":"2211.03117","title":"Going In Style: Audio Backdoors Through Stylistic Transformations","created":"2022-11-06","cited_by_count":21,"area":null},{"id":"2301.07487","title":"Adversarial Robust Deep Reinforcement Learning Requires Redefining Robustness","created":"2023-01-17","cited_by_count":19,"area":null},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18,"area":null},{"id":"2202.03898","title":"Verification-Aided Deep Ensemble Selection","created":"2022-02-08","cited_by_count":18,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2302.03322","title":"Attacking Cooperative Multi-Agent Reinforcement Learning by Adversarial Minority Influence","created":"2023-02-07","cited_by_count":17,"area":null},{"id":"2110.08984","title":"Optimistic Policy Optimization is Provably Efficient in Non-stationary MDPs","created":"2021-10-18","cited_by_count":16,"area":null},{"id":"2205.07229","title":"RoMFAC: A robust mean-field actor-critic reinforcement learning against adversarial perturbations on states","created":"2022-05-15","cited_by_count":16,"area":null},{"id":"2211.11030","title":"Adversarial Cheap Talk","created":"2022-11-20","cited_by_count":16,"area":null},{"id":"2412.10713","title":"RAT: Adversarial Attacks on Deep Reinforcement Agents for Targeted Behaviors","created":"2024-12-14","cited_by_count":16,"area":"deeprl"},{"id":"2502.13141","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models","created":"2025-02-18","cited_by_count":16,"area":"safety"},{"id":"2108.13093","title":"Investigating Vulnerabilities of Deep Neural Policies","created":"2021-08-30","cited_by_count":15,"area":null},{"id":"2201.01965","title":"Efficient Global Optimization of Two-Layer ReLU Networks: Quadratic-Time Algorithms and Adversarial Training","created":"2022-01-06","cited_by_count":15,"area":null},{"id":"2209.06866","title":"Robust Constrained Reinforcement Learning","created":"2022-09-14","cited_by_count":15,"area":null},{"id":"2403.10175","title":"A Short Survey on Importance Weighting for Machine Learning","created":"2024-03-15","cited_by_count":15,"area":null},{"id":"2110.01388","title":"Neural Network Verification in Control","created":"2021-09-30","cited_by_count":14,"area":null},{"id":"2211.03769","title":"Are AlphaZero-like Agents Robust to Adversarial Perturbations?","created":"2022-11-07","cited_by_count":14,"area":null},{"id":"2302.00270","title":"Internally Rewarded Reinforcement Learning","created":"2023-02-01","cited_by_count":14,"area":"alignment"},{"id":"2302.13851","title":"Implicit Poisoning Attacks in Two-Agent Reinforcement Learning: Adversarial Policies for Training-Time Attacks","created":"2023-02-27","cited_by_count":14,"area":null},{"id":"2405.12424","title":"Rethinking Robustness Assessment: Adversarial Attacks on Learning-based Quadrupedal Locomotion Controllers","created":"2024-05-21","cited_by_count":14,"area":"deeprl"},{"id":"2103.06473","title":"Multi-Task Federated Reinforcement Learning with Adversaries","created":"2021-03-11","cited_by_count":13,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2106.15860","title":"Understanding Adversarial Attacks on Observations in Deep Reinforcement Learning","created":"2021-06-30","cited_by_count":13,"area":null},{"id":"2109.07723","title":"Targeted Attack on Deep RL-based Autonomous Driving with Learned Visual Patterns","created":"2021-09-16","cited_by_count":13,"area":"driving"},{"id":"2206.00165","title":"Byzantine-Robust Online and Offline Distributed Reinforcement Learning","created":"2022-06-01","cited_by_count":13,"area":null},{"id":"2206.05533","title":"Rare event failure test case generation in Learning-Enabled-Controllers","created":"2022-06-11","cited_by_count":13,"area":null},{"id":"2206.07813","title":"A Search-Based Testing Approach for Deep Reinforcement Learning Agents","created":"2022-06-15","cited_by_count":13,"area":null},{"id":"2208.07811","title":"Towards Informed Design and Validation Assistance in Computer Games Using Imitation Learning","created":"2022-08-15","cited_by_count":13,"area":"offlinerl"},{"id":"2305.12751","title":"Testing of Deep Reinforcement Learning Agents with Surrogate Models","created":"2023-05-22","cited_by_count":13,"area":null},{"id":"2406.06507","title":"Verification-Guided Shielding for Deep Reinforcement Learning","created":"2024-06-10","cited_by_count":13,"area":"deeprl"},{"id":"2502.19652","title":"Robust Gymnasium: A Unified Modular Benchmark for Robust Reinforcement Learning","created":"2025-02-27","cited_by_count":13,"area":"deeprl"},{"id":"2109.08776","title":"Exploring the Training Robustness of Distributional Reinforcement Learning against Noisy State Observations","created":"2021-09-17","cited_by_count":12,"area":null},{"id":"2112.09025","title":"Deep Reinforcement Learning Policies Learn Shared Adversarial Features Across MDPs","created":"2021-12-16","cited_by_count":12,"area":null},{"id":"2301.00802","title":"Deep Clustering of Tabular Data by Weighted Gaussian Distribution Learning","created":"2023-01-02","cited_by_count":12,"area":null},{"id":"2312.00198","title":"Optimal Attack and Defense for Reinforcement Learning","created":"2023-11-30","cited_by_count":12,"area":null},{"id":"2212.04138","title":"Targeted Adversarial Attacks against Neural Network Trajectory Predictors","created":"2022-12-08","cited_by_count":11,"area":null},{"id":"2302.05745","title":"Verifying Generalization in Deep Learning","created":"2023-02-11","cited_by_count":11,"area":null},{"id":"2501.13075","title":"Evolution and The Knightian Blindspot of Machine Learning","created":"2025-01-22","cited_by_count":11,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2302.11703","title":"fAIlureNotes: Supporting Designers in Understanding the Limits of AI Models for Computer Vision Tasks","created":"2023-02-22","cited_by_count":10,"area":null},{"id":"2305.16614","title":"Physics-Regulated Deep Reinforcement Learning: Invariant Embeddings","created":"2023-05-26","cited_by_count":10,"area":null},{"id":"2310.04323","title":"Adjustable Robust Reinforcement Learning for Online 3D Bin Packing","created":"2023-10-06","cited_by_count":10,"area":null},{"id":"2501.03562","title":"Rethinking Adversarial Attacks in Reinforcement Learning from Policy Distribution Perspective","created":"2025-01-07","cited_by_count":10,"area":"deeprl"},{"id":"2102.09677","title":"Training a Resilient Q-Network against Observational Interference","created":"2021-02-18","cited_by_count":9,"area":null}],"next_cursor":"100"}