Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: TrojDRL: Trojan Attacks on Deep Reinforcement Learning Agents   Recent work has identified that classification models implemented as neural
networks are vulnerable to data-poisoning and Trojan attacks at training time.
In this work, we show that these training-time vulnerabilities extend to deep
reinforcement learning (DRL) agents and can be exploited by an adversary with
access to the training process. In particular, we focus on Trojan attacks that
augment the function of reinforcement learning policies with hidden behaviors.
We demonstrate that such attacks can be implemented through minuscule data
poisoning (as little as 0.025% of the training data) and in-band reward
modification that does not affect the reward on normal inputs. The policies
learned with our proposed attack approach perform imperceptibly similar to
benign policies but deteriorate drastically when the Trojan is triggered in
both targeted and untargeted settings. Furthermore, we show that existing
Trojan defense mechanisms for classification tasks are not effective in the
reinforcement learning setting.

20
The categories of this paper are: acc-phys
18
The categories of this paper are: econ
0
The categories of this paper are: hep-ph
30
The categories of this paper are: q-alg
7
The categories of this paper are: hep-th
23
The categories of this paper are: solv-int
5
The categories of this paper are: gr-qc
25
The categories of this paper are: patt-sol
11
The categories of this paper are: hep-lat
36
The categories of this paper are: cmp-lg
24
The categories of this paper are: dg-ga
27
The categories of this paper are: comp-gas
35
The categories of this paper are: mtrl-th
22
The categories of this paper are: chao-dyn
2
The categories of this paper are: math
32
The categories of this paper are: atom-ph