Advancing Robustness in Deep Reinforcement Learning with an Ensemble Defense Approach

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Mohan, Adithya, Rößle, Dominik, Cremers, Daniel, Schön, Torsten
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866912497955504128
author Mohan, Adithya
Rößle, Dominik
Cremers, Daniel
Schön, Torsten
author_facet Mohan, Adithya
Rößle, Dominik
Cremers, Daniel
Schön, Torsten
contents Recent advancements in Deep Reinforcement Learning (DRL) have demonstrated its applicability across various domains, including robotics, healthcare, energy optimization, and autonomous driving. However, a critical question remains: How robust are DRL models when exposed to adversarial attacks? While existing defense mechanisms such as adversarial training and distillation enhance the resilience of DRL models, there remains a significant research gap regarding the integration of multiple defenses in autonomous driving scenarios specifically. This paper addresses this gap by proposing a novel ensemble-based defense architecture to mitigate adversarial attacks in autonomous driving. Our evaluation demonstrates that the proposed architecture significantly enhances the robustness of DRL models. Compared to the baseline under FGSM attacks, our ensemble method improves the mean reward from 5.87 to 18.38 (over 213% increase) and reduces the mean collision rate from 0.50 to 0.09 (an 82% decrease) in the highway scenario and merge scenario, outperforming all standalone defense strategies.
format Preprint
id arxiv_https___arxiv_org_abs_2507_17070
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Advancing Robustness in Deep Reinforcement Learning with an Ensemble Defense Approach
Mohan, Adithya
Rößle, Dominik
Cremers, Daniel
Schön, Torsten
Machine Learning
Artificial Intelligence
Recent advancements in Deep Reinforcement Learning (DRL) have demonstrated its applicability across various domains, including robotics, healthcare, energy optimization, and autonomous driving. However, a critical question remains: How robust are DRL models when exposed to adversarial attacks? While existing defense mechanisms such as adversarial training and distillation enhance the resilience of DRL models, there remains a significant research gap regarding the integration of multiple defenses in autonomous driving scenarios specifically. This paper addresses this gap by proposing a novel ensemble-based defense architecture to mitigate adversarial attacks in autonomous driving. Our evaluation demonstrates that the proposed architecture significantly enhances the robustness of DRL models. Compared to the baseline under FGSM attacks, our ensemble method improves the mean reward from 5.87 to 18.38 (over 213% increase) and reduces the mean collision rate from 0.50 to 0.09 (an 82% decrease) in the highway scenario and merge scenario, outperforming all standalone defense strategies.
title Advancing Robustness in Deep Reinforcement Learning with an Ensemble Defense Approach
topic Machine Learning
Artificial Intelligence
url https://arxiv.org/abs/2507.17070