Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Reward Poisoning in Reinforcement Learning: Attacks Against Unknown
  Learners in Unknown Environments   We study black-box reward poisoning attacks against reinforcement learning
(RL), in which an adversary aims to manipulate the rewards to mislead a
sequence of RL agents with unknown algorithms to learn a nefarious policy in an
environment unknown to the adversary a priori. That is, our attack makes
minimum assumptions on the prior knowledge of the adversary: it has no initial
knowledge of the environment or the learner, and neither does it observe the
learner's internal mechanism except for its performed actions. We design a
novel black-box attack, U2, that can provably achieve a near-matching
performance to the state-of-the-art white-box attack, demonstrating the
feasibility of reward poisoning even in the most challenging black-box setting.

21
The categories of this paper are: adap-org
17
The categories of this paper are: q-fin
8
The categories of this paper are: hep-ex
25
The categories of this paper are: patt-sol
26
The categories of this paper are: bayes-an
20
The categories of this paper are: acc-phys
31
The categories of this paper are: ao-sci
0
The categories of this paper are: hep-ph
11
The categories of this paper are: hep-lat
30
The categories of this paper are: q-alg
6
The categories of this paper are: astro-ph
5
The categories of this paper are: gr-qc
7
The categories of this paper are: hep-th
10
The categories of this paper are: q-bio
18
The categories of this paper are: econ
19
The categories of this paper are: eess