Skip to content
InfoResearchPeer-reviewed

Action-Perturbation Backdoor Attacks on Partially Observable Multiagent Systems

Published
Record updated
View JSON

Summary

Researchers study backdoor attacks on reinforcement learning agents in partially observable multiagent systems. Instead of modifying a victim's observations directly, an adversary agent uses its own actions to affect what other agents observe, and a trained trigger policy, guided by auxiliary rewards, lets it activate their backdoors with few actions. Experiments show the method triggers others' backdoors efficiently, and the authors also study defenses.