Abstract:This study probes the vulnerabilities of cooperative multi-agent reinforcement learning (c-MARL) under adversarial attacks, a critical determinant of c-MARL's worst-case performance prior to real-world implementation. Current observation-based attacks, constrained by white-box assumptions, overlook c-MARL's complex multi-agent interactions and cooperative objectives, resulting in impractical and limited attack capabilities. To address these shortcomes, we propose Adversarial Minority Influence (AMI), a practical and strong for c-MARL. AMI is a practical black-box attack and can be launched without knowing victim parameters. AMI is also strong by considering the complex multi-agent interaction and the cooperative goal of agents, enabling a single adversarial agent to unilaterally misleads majority victims to form targeted worst-case cooperation. This mirrors minority influence phenomena in social psychology. To achieve maximum deviation in victim policies under complex agent-wise interactions, our unilateral attack aims to characterize and maximize the impact of the adversary on the victims. This is achieved by adapting a unilateral agent-wise relation metric derived from mutual information, thereby mitigating the adverse effects of victim influence on the adversary. To lead the victims into a jointly detrimental scenario, our targeted attack deceives victims into a long-term, cooperatively harmful situation by guiding each victim towards a specific target, determined through a trial-and-error process executed by a reinforcement learning agent. Through AMI, we achieve the first successful attack against real-world robot swarms and effectively fool agents in simulated environments into collectively worst-case scenarios, including Starcraft II and Multi-agent Mujoco. The source code and demonstrations can be found at: <a class="link-external link-https" href="https://github.com/DIG-Beihang/AMI" rel="external noopener nofollow">this https URL</a>.

SoK: Adversarial Machine Learning Attacks and Defences in Multi-Agent Reinforcement Learning

MARNet: Backdoor Attacks Against Cooperative Multi-Agent Reinforcement Learning

Adversarial attacks in consensus-based multi-agent reinforcement learning

Adversarial Markov Games: On Adaptive Decision-Based Attacks and Defenses

Camouflage Adversarial Attacks on Multiple Agent Systems

Robust Communicative Multi-Agent Reinforcement Learning with Active Defense

Adversarial Machine Learning: Bayesian Perspectives

Defenses in Adversarial Machine Learning: A Survey

Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective

Sok: Arms race in adversarial malware detection

Attacking Cooperative Multi-Agent Reinforcement Learning by Adversarial Minority Influence

On the Robustness of Cooperative Multi-Agent Reinforcement Learning

You Don't Need Robust Machine Learning to Manage Adversarial Attack Risks

Adversarial Machine Learning Attacks against Intrusion Detection Systems: A Survey on Strategies and Defense

SUB-PLAY: Adversarial Policies against Partially Observed Multi-Agent Reinforcement Learning Systems

Towards Comprehensive Testing on the Robustness of Cooperative Multi-agent Reinforcement Learning

A Survey on Adversarial Machine Learning for Code Data: Realistic Threats, Countermeasures, and Interpretations

Towards Secure Multi-Agent Deep Reinforcement Learning: Adversarial Attacks and Countermeasures

Attacking c-MARL More Effectively: A Data Driven Approach

What is the Solution for State-Adversarial Multi-Agent Reinforcement Learning?

The security of machine learning in an adversarial setting: A survey