Are Adversarial Attacks and Data Poisoning Distinct in the Context of Reinforcement Learning?
In the context of machine learning, adversarial attacks are typically associated with test time, where an attacker aims to fool a trained model with manipulated input data. On the other hand, data poisoning is generally linked to training time, where the training data is altered to corrupt the learning process.
However, in reinforcement learning (RL), the distinction seems less clear. For example, manipulating the observations received by an RL agent during training could be considered a form of …