Improve Robustness of Reinforcement Learning against Observation Perturbations via l_∞ Lipschitz Policy Networks
Not on the map. Why?
Abstract (arXiv)
Deep Reinforcement Learning (DRL) has achieved remarkable advances in sequential decision tasks. However, recent works have revealed that DRL agents are susceptible to slight perturbations in observations. This vulnerability raises concerns regarding the effectiveness and robustness of deploying such agents in real-world applications. In this work, we propose a novel robust reinforcement learning method called SortRL, which improves the robustness of DRL policies against observation perturbations from the perspective of the network architecture. We employ a novel architecture for the policy network that incorporates global l_∞ Lipschitz continuity and provide a convenient method to enhance policy robustness based on the output margin. Besides, a training framework is designed for SortRL, which solves given tasks while maintaining robustness against l_∞ bounded perturbations on the observations. Several experiments are conducted to evaluate the effectiveness of our method, including classic control tasks and video games. The results demonstrate that SortRL achieves state-of-the-art robustness performance against different perturbation strength.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 42 of its 53 references that are in the map. First posted on arXiv 14 Dec 2023.
Builds on
42 of 53 references.
References · 42
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2015Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shiftcited by 6,979
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016Asynchronous Methods for Deep Reinforcement Learningcited by 2,218
- 2016OpenAI Gymcited by 1,684
- 2020Fast is better than free: Revisiting adversarial trainingcited by 723
- 2019Model-Based Reinforcement Learning for Ataricited by 495
- 2020Learning Quadrupedal Locomotion over Challenging Terraincited by 494
- 2019Leveraging Procedural Generation to Benchmark Reinforcement Learningcited by 478
- 2017Robust Adversarial Reinforcement Learningcited by 439
- 2015Policy Distillationcited by 414
30 more
- 2017Adversarial Examples: Attacks and Defenses for Deep Learningcited by 350
- 2019Provably Robust Deep Learning via Adversarially Trained Smoothed Classifierscited by 328
- 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 322
- 2018Regularisation of Neural Networks by Enforcing Lipschitz Continuitycited by 311
- 2020Robust Deep Reinforcement Learning against Adversarial Perturbations on State Observationscited by 235
- 2019Towards Stable and Efficient Training of Verifiably Robust Neural Networkscited by 204
- 2018Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networkscited by 193
- 2021Reinforcement learning based recommender systems: A surveycited by 187
- 2021Maximum Entropy RL (Provably) Solves Some Robust RL Problemscited by 169
- 2019Action Robust Reinforcement Learning and Applications in Continuous Controlcited by 167
- 2017Robust Deep Reinforcement Learning with Adversarial Attackscited by 152
- 2021Robust Reinforcement Learning on State Observations with Learned Optimal Adversarycited by 133
- 2020MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radiuscited by 114
- 2019Preventing Gradient Attenuation in Lipschitz Constrained Convolutional Networkscited by 86
- 2018Reinforcement Learning with Perturbed Rewardscited by 76
- 2020Robust Deep Reinforcement Learning through Adversarial Losscited by 73
- 2021Who Is the Strongest Enemy? Towards Optimal and Efficient Evasion Attacks in Deep RLcited by 54
- 2022Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspectivecited by 48
- 2022Efficient Adversarial Training without Attacking: Worst-Case-Aware Robust Reinforcement Learningcited by 42
- 2021CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothingcited by 41
- 2021Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neuronscited by 40
- 2019Assessing Transferability from Simulation to Reality for Reinforcement Learningcited by 29
- 2019Online Robustness Training for Deep Reinforcement Learningcited by 26
- 2022Robust Reinforcement Learning as a Stackelberg Game via Adaptively-Regularized Adversarial Trainingcited by 26
- 2021Boosting the Certified Robustness of L-infinity Distance Netscited by 24
- 2020Certifiable Robustness to Adversarial State Uncertainty in Deep Reinforcement Learningcited by 23
- 2023Adversarial Robust Deep Reinforcement Learning Requires Redefining Robustnesscited by 18
- 2022CADRE: A Cascade Deep Reinforcement Learning Framework for Vision-based Autonomous Urban Drivingcited by 16
- 2021Investigating Vulnerabilities of Deep Neural Policiescited by 15
- 2022Robust Deep Reinforcement Learning through Bootstrapped Opportunistic Curriculumcited by 15
Built on by
Citing papers per year: 2024: 3; 2025: 3; 2026: 1.
7 papers.
- 2024Towards Optimal Adversarial Robust Q-learning with Bellman Infinity-errorcited by 4
- 2024On Robust Reinforcement Learning with Lipschitz-Bounded Policy Networkscited by 4
- 2024On Minimizing Adversarial Counterfactual Error in Adversarial RLcited by 2
- 2025Robust Behavior Cloning Via Global Lipschitz Regularizationcited by 2
- 2025Diffusion Guided Adversarial State Perturbations in Reinforcement Learningcited by 0
- 2025On the Tension Between Optimality and Adversarial Robustness in Policy Optimizationcited by 0
- 2026Robust Policy Optimization via Adversarial Importance Samplingcited by 0
- 2026Robust Policy Optimization via Adversarial Importance Sampling11 Sep 2026
- 2025On the Tension Between Optimality and Adversarial Robustness in Policy Optimization1 Dec 2025
- 2025Diffusion Guided Adversarial State Perturbations in Reinforcement Learning10 Nov 2025
- 2025Robust Behavior Cloning Via Global Lipschitz Regularization24 Jun 2025
- 2024On Minimizing Adversarial Counterfactual Error in Adversarial RL7 Jun 2024
- 2024On Robust Reinforcement Learning with Lipschitz-Bounded Policy Networks19 May 2024
- 2024Towards Optimal Adversarial Robust Q-learning with Bellman Infinity-error3 Feb 2024