Towards Robust Model-Based Reinforcement Learning Against Adversarial Corruption
Not on the map. Why?
Abstract (arXiv)
This study tackles the challenges of adversarial corruption in model-based reinforcement learning (RL), where the transition dynamics can be corrupted by an adversary. Existing studies on corruption-robust RL mostly focus on the setting of model-free RL, where robust least-square regression is often employed for value function estimation. However, these techniques cannot be directly applied to model-based RL. In this paper, we focus on model-based RL and take the maximum likelihood estimation (MLE) approach to learn transition model. Our work encompasses both online and offline settings. In the online setting, we introduce an algorithm called corruption-robust optimistic MLE (CR-OMLE), which leverages total-variation (TV)-based information ratios as uncertainty weights for MLE. We prove that CR-OMLE achieves a regret of tildeO(√T + C), where C denotes the cumulative corruption level after T episodes. We also prove a lower bound to show that the additive dependence on C is optimal. We extend our weighting technique to the offline setting, and propose an algorithm named corruption-robust pessimistic MLE (CR-PMLE). Under a uniform coverage condition, CR-PMLE exhibits suboptimality worsened by O(C/n), nearly matching the lower bound. To the best of our knowledge, this is the first work on corruption-robust model-based RL algorithms with provable guarantees.
Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Builds on 43 of its 63 references that are in the map. First posted on arXiv 14 Feb 2024.
Builds on
43 of 63 references.
References · 43
- 2019Mastering Atari, Go, Chess and Shogi by Planning with a Learned Modelcited by 1,327
- 2018Deep Reinforcement Learning in a Handful of Trials using Probabilistic Dynamics Modelscited by 748
- 2016Contextual Decision Processes with Low Bellman Rank are PAC-Learnablecited by 290
- 2021Bellman-consistent Pessimism for Offline Reinforcement Learningcited by 267
- 2020Model-Based Reinforcement Learning with Value-Targeted Regressioncited by 233
- 2020FLAMBE: Structural Complexity and Representation Learning of Low Rank MDPscited by 232
- 2021Bellman Eluder Dimension: New Rich Classes of RL Problems, and Sample-Efficient Algorithmscited by 222
- 2021The Statistical Complexity of Interactive Decision Makingcited by 208
- 2019Deep Dynamics Models for Learning Dexterous Manipulationcited by 200
- 2019Reinforcement Learning in Feature Space: Matrix Bandit, Kernels, and Regret Boundcited by 199
- 2021Bilinear Classes: A Structural Framework for Provable Generalization in RLcited by 176
- 2021Representation Learning for Online and Offline RL in Low-rank MDPscited by 128
31 more
- 2020Minimax-Optimal Off-Policy Evaluation with Linear Function Approximationcited by 120
- 2018Stochastic bandits robust to adversarial corruptionscited by 118
- 2022When Is Partially Observable Reinforcement Learning Not Scary?cited by 100
- 2021Online Robust Reinforcement Learning with Model Uncertaintycited by 95
- 2019Better Algorithms for Stochastic Bandits with Adversarial Corruptionscited by 91
- 2020Efficient Model-Based Reinforcement Learning through Optimistic Policy Search and Planningcited by 83
- 2020Stochastic Linear Bandits Robust to Adversarial Attackscited by 65
- 2022Nearly Minimax Optimal Offline Reinforcement Learning with Linear Function Approximation: Single-Agent MDP and Markov Gamecited by 53
- 2017Reinforcement Learning under Model Mismatchcited by 52
- 2022Nearly Optimal Algorithms for Linear Contextual Bandits with Adversarial Corruptionscited by 51
- 2023The Curious Price of Distributional Robustness in Reinforcement Learning with a Generative Modelcited by 50
- 2021Achieving Near Instance-Optimality and Minimax-Optimality in Stochastic and Adversarial Linear Bandits Simultaneouslycited by 48
- 2021A Model Selection Approach for Corruption Robust Reinforcement Learningcited by 45
- 2022GEC: A Unified Framework for Interactive Decision Making in MDP, POMDP, and Beyondcited by 45
- 2022VOQL: Towards Optimal Regret in Model-free RL with Nonlinear Function Approximationcited by 44
- 2022Pessimistic Minimax Value Iteration: Provably Efficient Equilibrium Learning from Offline Datasetscited by 42
- 2021Robust Stochastic Linear Contextual Bandits Under Adversarial Attackscited by 33
- 2022Corruption-Robust Algorithms with Uncertainty Weighting for Nonlinear Contextual Bandits and Markov Decision Processescited by 33
- 2022Model-based RL with Optimistic Posterior Sampling: Structural Conditions and Sample Complexitycited by 31
- 2022A General Framework for Sample-Efficient Function Approximation in Reinforcement Learningcited by 31
- 2023Corruption-Robust Offline Reinforcement Learning with General Function Approximationcited by 30
- 2023The Benefits of Being Distributional: Small-Loss Bounds for Reinforcement Learningcited by 27
- 2023Towards Robust Offline Reinforcement Learning under Diverse Data Corruptioncited by 24
- 2021Linear Contextual Bandits with Adversarial Corruptionscited by 21
- 2023Towards Minimax Optimality of Model-based Robust Reinforcement Learningcited by 21
- 2013Online Learning in Markov Decision Processes with Adversarially Chosen Transition Probability Distributionscited by 18
- 2021Unifying Cardiovascular Modelling with Deep Reinforcement Learning for Uncertainty Aware Control of Sepsis Treatmentcited by 16
- 2023Robust Lipschitz Bandits to Adversarial Corruptionscited by 15
- 2023A Nearly Optimal and Low-Switching Algorithm for Reinforcement Learning with General Function Approximationcited by 14
- 2020Adversarial Attacks to Machine Learning-Based Smart Healthcare Systemscited by 12
- 2023Pessimistic Nonlinear Least-Squares Value Iteration for Offline Reinforcement Learningcited by 9
Built on by
Citing papers per year: 2024: 3; 2025: 7; 2026: 2.
12 papers.
- 2024Sharp Analysis for KL-Regularized Contextual Bandits and RLHFcited by 32
- 2024Distributionally Robust Reinforcement Learning with Interactive Data Collection: Fundamental Hardness and Near-Optimal Algorithmscited by 24
- 2025RobustVLA: Robustness-Aware Reinforcement Post-Training for Vision-Language-Action Modelscited by 16
- 2024Tackling Data Corruption in Offline Reinforcement Learning via Sequence Modelingcited by 7
- 2025Wolfpack Adversarial Attack for Robust Multi-Agent Reinforcement Learningcited by 6
- 2026WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agentscited by 6
- 2025ORVIT: Near-Optimal Online Distributionally Robust Reinforcement Learningcited by 5
- 2025Catoni Contextual Bandits are Robust to Heavy-tailed Rewardscited by 3
- 2025Robust Policy Expansion for Offline-to-Online RL under Diverse Data Corruptioncited by 3
- 2025ADG: Ambient Diffusion-Guided Dataset Recovery for Corruption-Robust Offline Reinforcement Learningcited by 2
- 2026ARB4WM: An Adversarial Robustness Benchmark for World Models in Continuous Controlcited by 2
- 2025Daunce: Data Attribution through Uncertainty Estimationcited by 1
- 2026ARB4WM: An Adversarial Robustness Benchmark for World Models in Continuous Control15 Jun 2026
- 2026WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agents22 May 2026
- 2025RobustVLA: Robustness-Aware Reinforcement Post-Training for Vision-Language-Action Models3 Nov 2025
- 2025Robust Policy Expansion for Offline-to-Online RL under Diverse Data Corruption29 Sep 2025
- 2025ORVIT: Near-Optimal Online Distributionally Robust Reinforcement Learning5 Aug 2025
- 2025ADG: Ambient Diffusion-Guided Dataset Recovery for Corruption-Robust Offline Reinforcement Learning29 May 2025
- 2025Daunce: Data Attribution through Uncertainty Estimation29 May 2025
- 2025Wolfpack Adversarial Attack for Robust Multi-Agent Reinforcement Learning5 Feb 2025
- 2025Catoni Contextual Bandits are Robust to Heavy-tailed Rewards4 Feb 2025
- 2024Sharp Analysis for KL-Regularized Contextual Bandits and RLHF7 Nov 2024
- 2024Tackling Data Corruption in Offline Reinforcement Learning via Sequence Modeling5 Jul 2024
- 2024Distributionally Robust Reinforcement Learning with Interactive Data Collection: Fundamental Hardness and Near-Optimal Algorithms4 Apr 2024