AAMAS Conference 2026 Conference Paper
Reward-Free Action Poisoning in Offline RL via Conditional Shapley Value Estimation
- Shenghong He
- Chao Yu
- Kaiqiang Ke
- Yinqi Wei
Recentstudiesshowthatdatapoisoningattackscandegradetheperformance of offline reinforcement learning (RL) policies by strategically tampering with training datasets. However, existing methods generally assume the acquisition of reward signals during the generation of poisoning data, thus limiting their applications in real-world scenarios when the reward signals are not available. In this paper, we propose a novel method, called Shapley Action- Poisoning Attack (SAPA), which calculates the contribution of each state-actionpairinatrajectorytoidentifykeyactionsforpoisoning attacks without dependence on reward signals. Theoretical analysis proves that SAPA can degrade the performance of the learned policy below a specified threshold by tampering with key actions. Numerous experimental results demonstrate that SAPA surpasses state-of-the-artpoisoningmethodsintheattackperformanceunder various offline algorithms.