让每个智能体自己学会防攻击,系统更安全还更高效。
Evo-MARL: Co-Evolutionary Multi-Agent Reinforcement Learning for Internalized Safety
- 所有智能体共同训练防御能力,不依赖外部安全模块。
- 攻击成功率降低22%,推理准确率提升5%。
- 适合需要高安全性的多智能体系统开发者。
基于多模态大语言模型的多智能体系统(MAS)具备强大的协作与性能表现,但其日益开放和复杂的交互带来了严重风险,如越狱攻击和对抗性攻击。现有防御方法通常依赖独立的安全代理作为外部防护模块,存在两大缺陷:(1)单一代理保护能力有限;(2)独立性导致单点失效——一旦被攻破,整个系统的安全性即崩溃。盲目增加安全代理数量又会提高成本与复杂度。为此,本文提出Evo-MARL,一种新型多智能体强化学习框架,使所有任务智能体在执行本职工作的同时,联合习得防御能力。该框架不依赖外部安全模块,通过内化安全机制实现无额外开销的鲁棒性。此外,Evo-MARL结合进化搜索与参数共享强化学习,协同演化攻击者与防御者,形成持续进化的对抗训练范式。实验表明,该方法在推理任务上将攻击成功率降低最多22%,同时准确率提升最多5%,证明了安全性与实用性可协同提升。
原文摘要 · Abstract (English)
Multi-agent systems (MAS) built on multimodal large language models exhibit strong collaboration and performance. However, their growing openness and interaction complexity pose serious risks, notably jailbreak and adversarial attacks. Existing defenses typically rely on external guard modules, such as dedicated safety agents, to handle unsafe behaviors. Unfortunately, this paradigm faces two challenges: (1) standalone agents offer limited protection, and (2) their independence leads to single-point failure-if compromised, system-wide safety collapses. Naively increasing the number of guard agents further raises cost and complexity. To address these challenges, we propose Evo-MARL, a novel multi-agent reinforcement learning (MARL) framework that enables all task agents to jointly acquire defensive capabilities. Rather than relying on external safety modules, Evo-MARL trains each agent to simultaneously perform its primary function and resist adversarial threats, ensuring robustness without increasing system overhead or single-node failure. Furthermore, Evo-MARL integrates evolutionary search with parameter-sharing reinforcement learning to co-evolve attackers and defenders. This adversarial training paradigm internalizes safety mechanisms and continually enhances MAS performance under co-evolving threats. Experiments show that Evo-MARL reduces attack success rates by up to 22% while boosting accuracy by up to 5% on reasoning tasks-demonstrating that safety and utility can be jointly improved.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。