Targeted Adversarial Attacks on Deep Reinforcement Learning Policies via Model Checking
Not on the map. Why?
Abstract (arXiv)
Deep Reinforcement Learning (RL) agents are susceptible to adversarial noise in their observations that can mislead their policies and decrease their performance. However, an adversary may be interested not only in decreasing the reward, but also in modifying specific temporal logic properties of the policy. This paper presents a metric that measures the exact impact of adversarial attacks against such properties. We use this metric to craft optimal adversarial attacks. Furthermore, we introduce a model checking method that allows us to verify the robustness of RL policies against adversarial attacks. Our empirical analysis confirms (1) the quality of our metric to craft adversarial attacks against temporal logic properties, and (2) that we are able to concisely assess a system's robustness against attacks.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 35 of its 61 references that are in the map. First posted on arXiv 10 Dec 2022.
Builds on
35 of 61 references.
References · 35
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2013Playing Atari with Deep Reinforcement Learningcited by 3,211
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2016Concrete Problems in AI Safetycited by 1,582
- 2015End-to-End Training of Deep Visuomotor Policiescited by 847
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
- 2017Robust Adversarial Reinforcement Learningcited by 439
- 2017Adversarial Attacks on Neural Network Policiescited by 314
- 2016Safety Verification of Deep Neural Networkscited by 262
- 2020Robust Deep Reinforcement Learning against Adversarial Perturbations on State Observationscited by 235
- 2019Adversarial Policies: Attacking Deep Reinforcement Learningcited by 209
- 2017Tactics of Adversarial Attack on Deep Reinforcement Learning Agentscited by 163
23 more
- 2018Reachability Analysis of Deep Neural Networks with Provable Guaranteescited by 93
- 2020Policy Teaching via Environment Poisoning: Training-time Adversarial Attacks against Reinforcement Learningcited by 81
- 2018Omega-Regular Objectives in Model-Free Reinforcement Learningcited by 74
- 2017Environment-Independent Task Specifications via GLTLcited by 67
- 2020The Probabilistic Model Checker Stormcited by 64
- 2020Challenges and Countermeasures for Adversarial Attacks on Deep Reinforcement Learningcited by 61
- 2021Scalar reward is not enough: A response to Silver, Singh, Precup and Sutton (2021)cited by 55
- 2014A Learning Based Approach to Control Synthesis of Markov Decision Processes for Linear Temporal Logic Specificationscited by 49
- 2022On the Robustness of Safe Reinforcement Learning under Observational Perturbationscited by 38
- 2019Reinforcement Learning with Probabilistic Guarantees for Autonomous Drivingcited by 27
- 2019Spatiotemporally Constrained Action Space Attacks on Deep Reinforcement Learning Agentscited by 24
- 2022COOL-MC: A Comprehensive Tool for Reinforcement Learning and Model Checkingcited by 19
- 2017Detecting Adversarial Attacks on Neural Network Policies with Visual Foresightcited by 17
- 2021Adversarial attacks in consensus-based multi-agent reinforcement learningcited by 17
- 2015Permissive Controller Synthesis for Probabilistic Systemscited by 16
- 2019Verifiably Safe Off-Model Reinforcement Learningcited by 16
- 2018Online Robust Policy Learning in the Presence of Unknown Adversariescited by 15
- 2020Query-based Targeted Action-Space Adversarial Policies on Deep Reinforcement Learning Agentscited by 15
- 2021Investigating Vulnerabilities of Deep Neural Policiescited by 15
- 2020Statistically Model Checking PCTL Specifications on Markov Decision Processes via Reinforcement Learningcited by 12
- 2021Deep Reinforcement Learning Policies Learn Shared Adversarial Features Across MDPscited by 11
- 2016Optimizing Expectation with Guarantees in POMDPs (Technical Report)cited by 7
- 2021Feature-Based Interpretable Reinforcement Learning based on State-Transition Modelscited by 6
Built on by
Citing papers per year: 2025: 1; 2026: 4.
5 papers.
- 2026Formally Verifying and Explaining Sepsis Treatment Policies with COOL-MCcited by 3
- 2025Formal Verification of Noisy Quantum Reinforcement Learning Policiescited by 0
- 2026COOL-MC: Verifying and Explaining RL Policies for Platelet Inventory Managementcited by 0
- 2026COOL-MC: Verifying and Explaining RL Policies for Multi-bridge Network Maintenancecited by 0
- 2026Gimitest: A Comprehensive Tool for Testing Reinforcement Learning Policiescited by 0
- 2026Gimitest: A Comprehensive Tool for Testing Reinforcement Learning Policies8 Jul 2026
- 2026COOL-MC: Verifying and Explaining RL Policies for Multi-bridge Network Maintenance8 Mar 2026
- 2026COOL-MC: Verifying and Explaining RL Policies for Platelet Inventory Management2 Mar 2026
- 2026Formally Verifying and Explaining Sepsis Treatment Policies with COOL-MC16 Feb 2026
- 2025Formal Verification of Noisy Quantum Reinforcement Learning Policies1 Dec 2025