arXiv:2602.19582cs.LG2026-02

通过强化学习优势信息生成时间相关对抗样本,提升攻击效果。

Advantage-based Temporal Attack in Reinforcement Learning

  • 利用多尺度因果自注意力捕捉时间依赖性,增强扰动时序关联。
  • 引入加权优势机制,优先采样高有效性的扰动区域。
  • 在Atari等基准上超越主流攻击方法,适用于安全评估场景。

大量研究表明,深度强化学习(DRL)模型易受对抗输入影响,导致智能体采取次优或不安全动作。现有基于未来奖励的攻击方法虽能提升攻击效果,但难以捕捉扰动生成过程中各时间步间的依赖关系,导致当前扰动与历史扰动间时序相关性弱。本文提出一种新型方法——优势驱动对抗变换器(AAT),可生成具有更强时序相关性的对抗样本(即时间相关对抗样本),以提升攻击性能。AAT采用多尺度因果自注意力(MSCSA)机制,动态捕获不同时期历史信息与当前状态间的依赖关系,从而增强当前扰动与先前扰动的相关性。此外,AAT引入加权优势机制,量化特定状态下扰动的有效性,并通过采样高优势区域引导生成过程,产出高性能对抗样本。大量实验表明,AAT在Atari、DeepMind Control Suite和Google Football任务上的表现达到或超过主流对抗攻击基线。

原文摘要 · Abstract (English)

Extensive research demonstrates that Deep Reinforcement Learning (DRL) models are susceptible to adversarially constructed inputs (i.e., adversarial examples), which can mislead the agent to take suboptimal or unsafe actions. Recent methods improve attack effectiveness by leveraging future rewards to guide adversarial perturbation generation over sequential time steps (i.e., reward-based attacks). However, these methods are unable to capture dependencies between different time steps in the perturbation generation process, resulting in a weak temporal correlation between the current perturbation and previous perturbations.In this paper, we propose a novel method called Advantage-based Adversarial Transformer (AAT), which can generate adversarial examples with stronger temporal correlations (i.e., time-correlated adversarial examples) to improve the attack performance. AAT employs a multi-scale causal self-attention (MSCSA) mechanism to dynamically capture dependencies between historical information from different time periods and the current state, thus enhancing the correlation between the current perturbation and the previous perturbation. Moreover, AAT introduces a weighted advantage mechanism, which quantifies the effectiveness of a perturbation in a given state and guides the generation process toward high-performance adversarial examples by sampling high-advantage regions. Extensive experiments demonstrate that the performance of AAT matches or surpasses mainstream adversarial attack baselines on Atari, DeepMind Control Suite and Google football tasks.

强化学习对抗攻击时序建模Transformer

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。