This survey categorizes attacks and defenses in autonomous driving using reinforcement learning, highlighting critical insights.
Reinforcement learning (RL) enables agents to learn optimal behaviors through interaction with their environment and has been increasingly deployed in safety-critical applications, including autonomous driving. Despite its promise, RL is susceptible to attacks designed either to compromise policy learning or to induce erroneous decisions by trained agents. Although the literature on RL security has grown rapidly and several surveys exist, existing categorizations often fall short in guiding the selection of appropriate defenses for specific systems. In this work, we present a comprehensive survey of 86 recent studies on RL security, addressing these limitations by systematically categorizing attacks and defenses according to defined threat models and single-versus multi-agent settings. Furthermore, we examine the relevance and applicability of stateof-the-art attacks and defense mechanisms within the context of autonomous driving, providing insights to inform the design of robust RL systems.
No takes yet. Share an insight, caveat, or question.
Demontis et al. (2025) studied this question.
Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context: