首次系统评估强化学习模糊测试,揭示有效方法与实用价值。
Evaluating Fuzz Testing for Reinforcement Learning Agents

- 从有效性、多样性、效率、实用性四方面统一评测五种模糊测试方法。
- 吞吐量导向方法在发现崩溃上更高效,探索型方法则覆盖更多异常行为。
- 生成的崩溃数据可提升模型鲁棒性,且跨方法通用性强,适合安全验证。
强化学习(RL)代理正越来越多地应用于机器人、自动驾驶和无人机控制等安全关键领域,其中意外行为可能带来严重现实后果。模糊测试近年来成为探索RL代理庞大状态空间并暴露崩溃的有前景方法。尽管已有众多RL模糊测试方法提出,但现有研究在评估设置、基线和指标上差异显著,难以得出可靠结论。为此,我们首次开展全面实证研究,从四个互补角度——有效性、多样性、效率和实际效用——系统评估RL模糊测试方法。我们在三个复杂度递增的环境中(MountainCar、BipedalWalker、CARLA)统一配置下,对比五种先进方法与随机测试,并进一步评估所检测崩溃在提升代理鲁棒性和安全监控中的下游用途。结果表明:以吞吐量为导向的方法(如MDPFuzz)在崩溃发现上表现更优且效率更高;而专为促进探索设计的方法(如SeqDivFuzz)则在揭示多样崩溃行为方面更出色。此外,模糊测试生成的崩溃数据能显著提升代理鲁棒性,并实现高精度安全监控,具备强跨方法泛化能力。除实证发现外,我们还提炼出对研究者与实践者的可操作建议,强调结合互补策略及采用多层级多样性分析,以实现更全面、实用的RL测试。
原文摘要 · Abstract (English)
Reinforcement Learning (RL) agents are increasingly deployed in safety-critical domains such as robotics, autonomous driving, and drone control, where unexpected behaviors may lead to severe real-world consequences. Fuzz testing has recently emerged as a promising method for exploring the vast state spaces of RL agents and exposing crashes. Although numerous RL fuzzing methods have been proposed, existing studies often differ in evaluation settings, baselines, and metrics, making it difficult to draw reliable conclusions about their relative effectiveness and practical usefulness. To address this gap, we present the first comprehensive empirical study that systematically evaluates RL fuzzing methods from four complementary perspectives: effectiveness, diversity, efficiency, and practical utility. We benchmark five state-of-the-art methods alongside random testing under unified configurations across three environments of increasing complexity (MountainCar, BipedalWalker, and CARLA), and further assess the downstream usefulness of detected crashes for agent robustness improvement and safety monitoring. Our results reveal several key insights. For instance,throughput-oriented methods like MDPFuzz demonstrate superior effectiveness and efficiency in crash discovery, while methods explicitly designed to encourage exploration like SeqDivFuzz excel at uncovering diverse crash behaviors. We also show that fuzzing-generated crashes can meaningfully improve agent robustness and enable accurate safety monitoring with strong cross-method generalization. Beyond these empirical findings, we distill actionable guidance for both researchers and practitioners, highlighting the benefits of combining complementary fuzzing strategies and adopting multi-level diversity analysis to achieve more comprehensive and practical RL testing.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。