mlsanityData to 7 Oct 2026

A Search-Based Testing Approach for Deep Reinforcement Learning Agents

arXiv 2206.07813 ↗First posted 15 Jun 2022cs.SE cs.AI cs.LGcited by 12

Not on the map. Why?

Abstract (arXiv)

Deep Reinforcement Learning (DRL) algorithms have been increasingly employed during the last decade to solve various decision-making problems such as autonomous driving and robotics. However, these algorithms have faced great challenges when deployed in safety-critical environments since they often exhibit erroneous behaviors that can lead to potentially critical errors. One way to assess the safety of DRL agents is to test them to detect possible faults leading to critical failures during their execution. This raises the question of how we can efficiently test DRL policies to ensure their correctness and adherence to safety requirements. Most existing works on testing DRL agents use adversarial attacks that perturb states or actions of the agent. However, such attacks often lead to unrealistic states of the environment. Their main goal is to test the robustness of DRL agents rather than testing the compliance of agents' policies with respect to requirements. Due to the huge state space of DRL environments, the high cost of test execution, and the black-box nature of DRL algorithms, the exhaustive testing of DRL agents is impossible. In this paper, we propose a Search-based Testing Approach of Reinforcement Learning Agents (STARLA) to test the policy of a DRL agent by effectively searching for failing executions of the agent within a limited testing budget. We use machine learning models and a dedicated genetic algorithm to narrow the search towards faulty episodes. We apply STARLA on Deep-Q-Learning agents which are widely used as benchmarks and show that it significantly outperforms Random Testing by detecting more faults related to the agent's policy. We also investigate how to extract rules that characterize faulty episodes of the DRL agent using our search results. Such rules can be used to understand the conditions under which the agent fails and thus assess its deployment risks.

Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Builds on 41 of its 93 references that are in the map. First posted on arXiv 15 Jun 2022.

Builds on

41 of 93 references.

References · 41

  1. 2013Playing Atari with Deep Reinforcement Learningcited by 3,211
  2. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
  3. 2015Trust Region Policy Optimizationcited by 2,503
  4. 2016Asynchronous Methods for Deep Reinforcement Learningcited by 2,218
  5. 2015Deep Reinforcement Learning with Double Q-learningcited by 1,704
  6. 2016Universal adversarial perturbationscited by 774
  7. 2015Dueling Network Architectures for Deep Reinforcement Learningcited by 769
  8. 2017Adversarial Attacks on Neural Network Policiescited by 314
  9. 2017DeepXplore: Automated Whitebox Testing of Deep Learning Systemscited by 307
  10. 2019Challenges of Real-World Reinforcement Learningcited by 282
  11. 2017DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Carscited by 249
  12. 2020Robust Deep Reinforcement Learning against Adversarial Perturbations on State Observationscited by 235
29 more
  1. 2017Tactics of Adversarial Attack on Deep Reinforcement Learning Agentscited by 163
  2. 2017Robust Deep Reinforcement Learning with Adversarial Attackscited by 152
  3. 2018DeepGauge: Multi-Granularity Testing Criteria for Deep Learning Systemscited by 144
  4. 2017Delving into adversarial attacks on deep policiescited by 104
  5. 2020Adaptive Reward-Poisoning Attacks against Reinforcement Learningcited by 86
  6. 2020Robust Reinforcement Learning using Adversarial Populationscited by 64
  7. 2020Challenges and Countermeasures for Adversarial Attacks on Deep Reinforcement Learningcited by 61
  8. 2018Concolic Testing for Deep Neural Networkscited by 51
  9. 2018Testing Deep Neural Networkscited by 36
  10. 2017Whatever Does Not Kill Deep Reinforcement Learning, Makes It Strongercited by 35
  11. 2017Virtual vs. Real: Trading Off Simulations and Physical Experiments in Reinforcement Learning with Bayesian Optimizationcited by 33
  12. 2020Robustifying Reinforcement Learning Agents via Action Space Adversarial Trainingcited by 30
  13. 2021Reward Poisoning in Reinforcement Learning: Attacks Against Unknown Learners in Unknown Environmentscited by 26
  14. 2020Stealing Deep Reinforcement Learning Models for Fun and Profitcited by 24
  15. 2021Faults in Deep Reinforcement Learning Programs: A Taxonomy and A Detection Approachcited by 18
  16. 2021Black-Box Testing of Deep Neural Networks Through Test Case Diversitycited by 18
  17. 2018Reinforcement Learning for Autonomous Defence in Software-Defined Networkingcited by 17
  18. 2020Query-based Targeted Action-Space Adversarial Policies on Deep Reinforcement Learning Agentscited by 15
  19. 2019Adversarial Exploitation of Policy Imitationcited by 13
  20. 2020Sim-to-Real Transfer with Incremental Environment Complexity for Reinforcement Learning of Depth-Based Robot Navigationcited by 13
  21. 2018Comparison of Reinforcement Learning algorithms applied to the Cart Pole problemcited by 12
  22. 2022Search-Based Testing of Reinforcement Learningcited by 12
  23. 2020Automatic Test Suite Generation for Key-Points Detection DNNs using Many-Objective Search (Experience Paper)cited by 9
  24. 2022Comparing Model-free and Model-based Algorithms for Offline Reinforcement Learningcited by 9
  25. 2020Adversarial Training for a Continuous Robustness Control Problem in Power Systemscited by 8
  26. 2018Mitigation of Policy Manipulation Attacks on Deep Q-Networks with Parameter-Space Noisecited by 7
  27. 2019Sequential Triggers for Watermarking of Deep Reinforcement Learning Policiescited by 7
  28. 2020Black-box Adversarial Sample Generation Based on Differential Evolutioncited by 6
  29. 2021Improving Robustness of Reinforcement Learning for Power System Control with Adversarial Trainingcited by 6

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 2; 2024: 4; 2025: 2; 2026: 4.

12 papers.