Robust Safe Reinforcement Learning under Adversarial Disturbances
Not on the map. Why?
Abstract (arXiv)
Safety is a primary concern when applying reinforcement learning to real-world control tasks, especially in the presence of external disturbances. However, existing safe reinforcement learning algorithms rarely account for external disturbances, limiting their applicability and robustness in practice. To address this challenge, this paper proposes a robust safe reinforcement learning framework that tackles worst-case disturbances. First, this paper presents a policy iteration scheme to solve for the robust invariant set, i.e., a subset of the safe set, where persistent safety is only possible for states within. The key idea is to establish a two-player zero-sum game by leveraging the safety value function in Hamilton-Jacobi reachability analysis, in which the protagonist (i.e., control inputs) aims to maintain safety and the adversary (i.e., external disturbances) tries to break down safety. This paper proves that the proposed policy iteration algorithm converges monotonically to the maximal robust invariant set. Second, this paper integrates the proposed policy iteration scheme into a constrained reinforcement learning algorithm that simultaneously synthesizes the robust invariant set and uses it for constrained policy optimization. This algorithm tackles both optimality and safety, i.e., learning a policy that attains high rewards while maintaining safety under worst-case disturbances. Experiments on classic control tasks show that the proposed method achieves zero constraint violation with learned worst-case adversarial disturbances, while other baseline algorithms violate the safety constraints substantially. Our proposed method also attains comparable performance as the baselines even in the absence of the adversary.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Builds on 18 of its 34 references that are in the map. First posted on arXiv 11 Oct 2023.
Builds on
18 of 34 references.
References · 18
- 2018Soft Actor-Critic: Off-Policy Maximum Entropy Deep Reinforcement Learning with a Stochastic Actorcited by 4,885
- 2020Deep Reinforcement Learning for Autonomous Driving: A Surveycited by 721
- 2018Reward Constrained Policy Optimizationcited by 417
- 2020Sim-to-Real Transfer in Deep Reinforcement Learning for Robotics: a Surveycited by 413
- 2019Control Barrier Functions: Theory and Applicationscited by 372
- 2021Safe Learning in Robotics: From Learning-Based Control to Safe Reinforcement Learningcited by 371
- 2015Risk-Constrained Reinforcement Learning with Percentile Risk Criteriacited by 337
- 2020Responsive Safety in Reinforcement Learning by PID Lagrangian Methodscited by 316
- 2016Control Barrier Function Based Quadratic Programs for Safety Critical Systemscited by 287
- 2020Projection-Based Constrained Policy Optimizationcited by 203
- 2017Hamilton-Jacobi Reachability: A Brief Overview and Recent Advancescited by 201
- 2019A Review of Robot Learning for Manipulation: Challenges, Representations, and Algorithmscited by 142
6 more
- 2020Learning to Walk in the Real World with Minimal Human Effortcited by 111
- 2022Reachability Constrained Reinforcement Learningcited by 59
- 2023State-wise Safe Reinforcement Learning: A Surveycited by 55
- 2021safe-control-gym: a Unified Benchmark Suite for Safe Learning-based Control and Reinforcement Learning in Roboticscited by 50
- 2021Integrated Decision and Control: Towards Interpretable and Computationally Efficient Driving Intelligencecited by 27
- 2021Joint Synthesis of Safety Certificate and Safe Control Policy using Constrained Reinforcement Learningcited by 27
Built on by
Citing papers per year: 2023: 1; 2024: 0; 2025: 0; 2026: 3.
4 papers.
- 2023Learning Predictive Safety Filter via Decomposition of Robust Invariant Setcited by 3
- 2026TCRL: Temporal-Coupled Adversarial Training for Robust Constrained Reinforcement Learning in Worst-Case Scenarioscited by 1
- 2026FlexServe: A Fast and Secure LLM Serving System for Mobile Devices with Flexible Resource Isolationcited by 1
- 2026FlexServe: A Fast and Secure LLM Serving System for Mobile Devices with Flexible Resource Isolationcited by 0
- 2026FlexServe: A Fast and Secure LLM Serving System for Mobile Devices with Flexible Resource Isolation22 Jun 2026
- 2026FlexServe: A Fast and Secure LLM Serving System for Mobile Devices with Flexible Resource Isolation10 Mar 2026
- 2026TCRL: Temporal-Coupled Adversarial Training for Robust Constrained Reinforcement Learning in Worst-Case Scenarios13 Feb 2026
- 2023Learning Predictive Safety Filter via Decomposition of Robust Invariant Set12 Nov 2023