arXiv AI

Corruption Robust Offline Reinforcement Learning with Human Feedback

arXiv:2402. 06734v2 Announce Type: replace-cross Abstract: We study data corruption robustness for reinforcement learning with human feedback (RLHF) in an offline setting.

arXiv Machine Learning
Oct 2

Robust Risk-Sensitive Reinforcement Learning from Corrupted Human Feedback

The paper introduces WSP-CVaR-RLHF, a risk‑sensitive reinforcement learning algorithm that learns from human feedback while handling corrupted or adversarial preference labels. It uses uncertainty‑weighted reward estimation and optimistic CVaR planning to achieve a regret bound that separates clean statistical cost from corruption penalties. Experiments with four adversarial attacks show that the method consistently reduces cumulative regret compared to an unweighted robust baseline while maintaining confidence‑set coverage.

By Xinyi Ni, Lifeng Lai
arXiv AI
Oct 9

Trust, Don't Trust, or Flip: Robust Preference-Based Reinforcement Learning with Multi-Expert Feedback

The paper introduces TriTrust-PBRL (TTP), a framework for preference-based reinforcement learning that learns a shared reward model and expert-specific trust parameters from multi-expert feedback. Trust parameters evolve to be positive (trust), near zero (ignore), or negative (flip), allowing the model to invert adversarial preferences instead of discarding them. Experiments on manipulation and locomotion tasks show TTP achieves near-oracle performance under adversarial corruption, outperforming existing PBRL methods.

By Seyed Amir Hosseini, Maryam Abdolali, Amirhosein Tavakkoli, Fardin Ayar, Ehsan Javanmardi, Manabu Tsukada, Mahdi Javanmardi
arXiv Machine Learning
Jul 7

When Can You Poison Rewards? A Tight Characterization of Reward Poisoning in Linear MDPs

arXiv:2604. 10062v3 Announce Type: replace Abstract: We study reward poisoning attacks in reinforcement learning (RL), where an adversary manipulates rewards within constrained budgets to force the target RL agent to adopt a policy that aligns with the attacker's objectives.

By Jose Efraim Aguilar Escamilla, Haoyang Hong, Jiawei Li, Haoyu Zhao, Xuezhou Zhang, Sanghyun Hong, Huazheng Wang