SMARLA: A Safety Monitoring Approach for Deep Reinforcement Learning Agents
Not on the map. Why?
Abstract (arXiv)
Deep Reinforcement Learning (DRL) has made significant advancements in various fields, such as autonomous driving, healthcare, and robotics, by enabling agents to learn optimal policies through interactions with their environments. However, the application of DRL in safety-critical domains presents challenges, particularly concerning the safety of the learned policies. DRL agents, which are focused on maximizing rewards, may select unsafe actions, leading to safety violations. Runtime safety monitoring is thus essential to ensure the safe operation of these agents, especially in unpredictable and dynamic environments. This paper introduces SMARLA, a black-box safety monitoring approach specifically designed for DRL agents. SMARLA utilizes machine learning to predict safety violations by observing the agent's behavior during execution. The approach is based on Q-values, which reflect the expected reward for taking actions in specific states. SMARLA employs state abstraction to reduce the complexity of the state space, enhancing the predictive capabilities of the monitoring model. Such abstraction enables the early detection of unsafe states, allowing for the implementation of corrective and preventive measures before incidents occur. We quantitatively and qualitatively validated SMARLA on three well-known case studies widely used in DRL research. Empirical results reveal that SMARLA is accurate at predicting safety violations, with a low false positive rate, and can predict violations at an early stage, approximately halfway through the execution of the agent, before violations occur. We also discuss different decision criteria, based on confidence intervals of the predicted violation probabilities, to trigger safety mechanisms aiming at a trade-off between early detection and low false positive rates.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 47 of its 102 references that are in the map. First posted on arXiv 3 Aug 2023.
Builds on
47 of 102 references.
References · 47
- 2013Playing Atari with Deep Reinforcement Learningcited by 3,211
- 2015Deep Reinforcement Learning with Double Q-learningcited by 1,704
- 2018Off-Policy Deep Reinforcement Learning without Explorationcited by 1,227
- 2017Rainbow: Combining Improvements in Deep Reinforcement Learningcited by 774
- 2015Dueling Network Architectures for Deep Reinforcement Learningcited by 769
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
- 2020Deep Reinforcement Learning for Autonomous Driving: A Surveycited by 698
- 2017A Brief Survey of Deep Reinforcement Learningcited by 466
- 2017Safe Reinforcement Learning via Shieldingcited by 427
- 2019Challenges of Real-World Reinforcement Learningcited by 282
- 2017Noisy Networks for Explorationcited by 262
- 2022A Review of Safe Reinforcement Learning: Methods, Theory and Applicationscited by 169
35 more
- 2017Robust Deep Reinforcement Learning with Adversarial Attackscited by 152
- 2020Likelihood Regret: An Out-of-Distribution Detection Score For Variational Auto-encodercited by 145
- 2017Action Branching Architectures for Deep Reinforcement Learningcited by 90
- 2020Safe Reinforcement Learning via Curriculum Inductioncited by 73
- 2019Discretizing Continuous Action Space for On-Policy Optimizationcited by 65
- 2019Uncertainty Quantification with Statistical Guarantees in End-to-End Autonomous Driving Controlcited by 60
- 2021Safe Multi-Agent Reinforcement Learning via Shieldingcited by 60
- 2019Misbehaviour Prediction for Autonomous Driving Systemscited by 55
- 2018Evaluating Uncertainty Quantification in End-to-End Autonomous Driving Controlcited by 54
- 2021Memory-based Deep Reinforcement Learning for POMDPscited by 53
- 2019Outside the Box: Abstraction-Based Monitoring of Neural Networkscited by 36
- 2018Runtime Monitoring Neuron Activation Patternscited by 34
- 2020Stealing Deep Reinforcement Learning Models for Fun and Profitcited by 24
- 2021Human-robot collaboration and machine learning: a systematic review of recent researchcited by 20
- 2022Online Shielding for Reinforcement Learningcited by 19
- 2021Black-Box Testing of Deep Neural Networks Through Test Case Diversitycited by 18
- 2021DeepGuard: A Framework for Safeguarding Autonomous Driving Systems from Inconsistent Behaviorcited by 17
- 2020SafeML: Safety Monitoring of Machine Learning Classifiers through Statistical Difference Measurecited by 16
- 2017Deep Predictive Models for Collision Risk Assessment in Autonomous Drivingcited by 15
- 2021Benchmarking Safety Monitors for Image Classifiers with Machine Learningcited by 14
- 2019Adversarial Exploitation of Policy Imitationcited by 13
- 2022Search-Based Testing of Reinforcement Learningcited by 12
- 2022A Search-Based Testing Approach for Deep Reinforcement Learning Agentscited by 12
- 2021Fail-Safe Execution of Deep Learning based Systems through Uncertainty Monitoringcited by 11
- 2023DeepGD: A Multi-Objective Black-Box Test Selection Approach for Deep Neural Networkscited by 11
- 2022Comparing Model-free and Model-based Algorithms for Offline Reinforcement Learningcited by 9
- 2023Safe Deep Reinforcement Learning by Verifying Task-Level Propertiescited by 9
- 2019Sequential Triggers for Watermarking of Deep Reinforcement Learning Policiescited by 7
- 2021Fault-Tolerant Perception for Automated Driving A Lightweight Monitoring Approachcited by 5
- 2023Mosaic: Model-based Safety Analysis Framework for AI-enabled Cyber-Physical Systemscited by 5
- 2019Sample-Efficient Model-Free Reinforcement Learning with Off-Policy Criticscited by 3
- 2022Safe Exploration Method for Reinforcement Learning under Existence of Disturbancecited by 3
- 2023Comparing NARS and Reinforcement Learning: An Analysis of ONA and Q-Learning Algorithmscited by 3
- 2021On Assessing The Safety of Reinforcement Learning algorithms Using Formal Methodscited by 2
- 2022Towards Runtime Monitoring of Complex System Requirements for Autonomous Driving Functionscited by 2
Built on by
Citing papers per year: 2024: 2; 2025: 2; 2026: 5.
9 papers.
- 2024Online Safety Analysis for LLMs: a Benchmark, an Assessment, and a Path Forwardcited by 5
- 2024System Safety Monitoring of Learned Components Using Temporal Metric Forecastingcited by 4
- 2025Q-SafeML: Safety Assessment of Quantum Machine Learning via Quantum Distance Metricscited by 1
- 2026Learning Contextual Runtime Monitors for Safe AI-Based Autonomycited by 1
- 2025Learning-Based Testing for Deep Learning: Enhancing Model Robustness with Adversarial Input Prioritizationcited by 0
- 2026COOL-MC: Verifying and Explaining RL Policies for Platelet Inventory Managementcited by 0
- 2026COOL-MC: Verifying and Explaining RL Policies for Multi-bridge Network Maintenancecited by 0
- 2026Evaluating Fuzz Testing for Reinforcement Learning Agentscited by 0
- 2026A MARL Centered Reference Architecture for Large Language Model Augmentation in Smart Manufacturingcited by 0
- 2026A MARL Centered Reference Architecture for Large Language Model Augmentation in Smart Manufacturing7 Aug 2026
- 2026Evaluating Fuzz Testing for Reinforcement Learning Agents27 Jul 2026
- 2026COOL-MC: Verifying and Explaining RL Policies for Multi-bridge Network Maintenance8 Mar 2026
- 2026COOL-MC: Verifying and Explaining RL Policies for Platelet Inventory Management2 Mar 2026
- 2026Learning Contextual Runtime Monitors for Safe AI-Based Autonomy28 Jan 2026
- 2025Learning-Based Testing for Deep Learning: Enhancing Model Robustness with Adversarial Input Prioritization28 Sep 2025
- 2025Q-SafeML: Safety Assessment of Quantum Machine Learning via Quantum Distance Metrics4 Sep 2025
- 2024System Safety Monitoring of Learned Components Using Temporal Metric Forecasting21 May 2024
- 2024Online Safety Analysis for LLMs: a Benchmark, an Assessment, and a Path Forward12 Apr 2024