A Search-Based Testing Approach for Deep Reinforcement Learning Agents
Not on the map. Why?
Abstract (arXiv)
Deep Reinforcement Learning (DRL) algorithms have been increasingly employed during the last decade to solve various decision-making problems such as autonomous driving and robotics. However, these algorithms have faced great challenges when deployed in safety-critical environments since they often exhibit erroneous behaviors that can lead to potentially critical errors. One way to assess the safety of DRL agents is to test them to detect possible faults leading to critical failures during their execution. This raises the question of how we can efficiently test DRL policies to ensure their correctness and adherence to safety requirements. Most existing works on testing DRL agents use adversarial attacks that perturb states or actions of the agent. However, such attacks often lead to unrealistic states of the environment. Their main goal is to test the robustness of DRL agents rather than testing the compliance of agents' policies with respect to requirements. Due to the huge state space of DRL environments, the high cost of test execution, and the black-box nature of DRL algorithms, the exhaustive testing of DRL agents is impossible. In this paper, we propose a Search-based Testing Approach of Reinforcement Learning Agents (STARLA) to test the policy of a DRL agent by effectively searching for failing executions of the agent within a limited testing budget. We use machine learning models and a dedicated genetic algorithm to narrow the search towards faulty episodes. We apply STARLA on Deep-Q-Learning agents which are widely used as benchmarks and show that it significantly outperforms Random Testing by detecting more faults related to the agent's policy. We also investigate how to extract rules that characterize faulty episodes of the DRL agent using our search results. Such rules can be used to understand the conditions under which the agent fails and thus assess its deployment risks.
Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Builds on 41 of its 93 references that are in the map. First posted on arXiv 15 Jun 2022.
Builds on
41 of 93 references.
References · 41
- 2013Playing Atari with Deep Reinforcement Learningcited by 3,211
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2015Trust Region Policy Optimizationcited by 2,503
- 2016Asynchronous Methods for Deep Reinforcement Learningcited by 2,218
- 2015Deep Reinforcement Learning with Double Q-learningcited by 1,704
- 2016Universal adversarial perturbationscited by 774
- 2015Dueling Network Architectures for Deep Reinforcement Learningcited by 769
- 2017Adversarial Attacks on Neural Network Policiescited by 314
- 2017DeepXplore: Automated Whitebox Testing of Deep Learning Systemscited by 307
- 2019Challenges of Real-World Reinforcement Learningcited by 282
- 2017DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Carscited by 249
- 2020Robust Deep Reinforcement Learning against Adversarial Perturbations on State Observationscited by 235
29 more
- 2017Tactics of Adversarial Attack on Deep Reinforcement Learning Agentscited by 163
- 2017Robust Deep Reinforcement Learning with Adversarial Attackscited by 152
- 2018DeepGauge: Multi-Granularity Testing Criteria for Deep Learning Systemscited by 144
- 2017Delving into adversarial attacks on deep policiescited by 104
- 2020Adaptive Reward-Poisoning Attacks against Reinforcement Learningcited by 86
- 2020Robust Reinforcement Learning using Adversarial Populationscited by 64
- 2020Challenges and Countermeasures for Adversarial Attacks on Deep Reinforcement Learningcited by 61
- 2018Concolic Testing for Deep Neural Networkscited by 51
- 2018Testing Deep Neural Networkscited by 36
- 2017Whatever Does Not Kill Deep Reinforcement Learning, Makes It Strongercited by 35
- 2017Virtual vs. Real: Trading Off Simulations and Physical Experiments in Reinforcement Learning with Bayesian Optimizationcited by 33
- 2020Robustifying Reinforcement Learning Agents via Action Space Adversarial Trainingcited by 30
- 2021Reward Poisoning in Reinforcement Learning: Attacks Against Unknown Learners in Unknown Environmentscited by 26
- 2020Stealing Deep Reinforcement Learning Models for Fun and Profitcited by 24
- 2021Faults in Deep Reinforcement Learning Programs: A Taxonomy and A Detection Approachcited by 18
- 2021Black-Box Testing of Deep Neural Networks Through Test Case Diversitycited by 18
- 2018Reinforcement Learning for Autonomous Defence in Software-Defined Networkingcited by 17
- 2020Query-based Targeted Action-Space Adversarial Policies on Deep Reinforcement Learning Agentscited by 15
- 2019Adversarial Exploitation of Policy Imitationcited by 13
- 2020Sim-to-Real Transfer with Incremental Environment Complexity for Reinforcement Learning of Depth-Based Robot Navigationcited by 13
- 2018Comparison of Reinforcement Learning algorithms applied to the Cart Pole problemcited by 12
- 2022Search-Based Testing of Reinforcement Learningcited by 12
- 2020Automatic Test Suite Generation for Key-Points Detection DNNs using Many-Objective Search (Experience Paper)cited by 9
- 2022Comparing Model-free and Model-based Algorithms for Offline Reinforcement Learningcited by 9
- 2020Adversarial Training for a Continuous Robustness Control Problem in Power Systemscited by 8
- 2018Mitigation of Policy Manipulation Attacks on Deep Q-Networks with Parameter-Space Noisecited by 7
- 2019Sequential Triggers for Watermarking of Deep Reinforcement Learning Policiescited by 7
- 2020Black-box Adversarial Sample Generation Based on Differential Evolutioncited by 6
- 2021Improving Robustness of Reinforcement Learning for Power System Control with Adversarial Trainingcited by 6
Built on by
Citing papers per year: 2023: 2; 2024: 4; 2025: 2; 2026: 4.
12 papers.
- 2023DeepGD: A Multi-Objective Black-Box Test Selection Approach for Deep Neural Networkscited by 11
- 2023SMARLA: A Safety Monitoring Approach for Deep Reinforcement Learning Agentscited by 9
- 2025Beyond Statistical Learning: Exact Learning Is Essential for General Intelligencecited by 6
- 2025Rule-Guided Reinforcement Learning Policy Evaluation and Improvementcited by 4
- 2024Test Where Decisions Matter: Importance-driven Testing for Deep Reinforcement Learningcited by 2
- 2024Exploring Critical Testing Scenarios for Decision-Making Policies: An LLM Approachcited by 2
- 2024Toward Debugging Deep Reinforcement Learning Programs with RLExplorercited by 1
- 2024Fuzzy Logic Guided Reward Function Variation: An Oracle for Testing Reinforcement Learning Programscited by 0
- 2026NeSy-CSA: A Neuro-Symbolic Framework for Open-Ended Critical Scenario Attributioncited by 0
- 2026Gimitest: A Comprehensive Tool for Testing Reinforcement Learning Policiescited by 0
- 2026Evaluating Fuzz Testing for Reinforcement Learning Agentscited by 0
- 2026Learning from the Test: Self-Referential Differential Testing for Deep RL Agentscited by 0
- 2026Learning from the Test: Self-Referential Differential Testing for Deep RL Agents23 Aug 2026
- 2026Evaluating Fuzz Testing for Reinforcement Learning Agents27 Jul 2026
- 2026Gimitest: A Comprehensive Tool for Testing Reinforcement Learning Policies8 Jul 2026
- 2026NeSy-CSA: A Neuro-Symbolic Framework for Open-Ended Critical Scenario Attribution4 Jul 2026
- 2025Beyond Statistical Learning: Exact Learning Is Essential for General Intelligence30 Jun 2025
- 2025Rule-Guided Reinforcement Learning Policy Evaluation and Improvement12 Mar 2025
- 2024Exploring Critical Testing Scenarios for Decision-Making Policies: An LLM Approach9 Dec 2024
- 2024Test Where Decisions Matter: Importance-driven Testing for Deep Reinforcement Learning12 Nov 2024
- 2024Toward Debugging Deep Reinforcement Learning Programs with RLExplorer6 Oct 2024
- 2024Fuzzy Logic Guided Reward Function Variation: An Oracle for Testing Reinforcement Learning Programs28 Jun 2024
- 2023SMARLA: A Safety Monitoring Approach for Deep Reinforcement Learning Agents3 Aug 2023
- 2023DeepGD: A Multi-Objective Black-Box Test Selection Approach for Deep Neural Networks8 Mar 2023