{"id":"https://openalex.org/W7162283551","doi":"https://doi.org/10.48550/arxiv.2605.23220","title":"WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agents","display_name":"WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agents","publication_year":2026,"publication_date":"2026-05-22","ids":{"openalex":"https://openalex.org/W7162283551","doi":"https://doi.org/10.48550/arxiv.2605.23220"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.23220","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.23220","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.23220","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126712266","display_name":"Zhixiang Guo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guo, Zhixiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136983863","display_name":"Siyuan Liang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liang, Siyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038373479","display_name":"Shi Fu","orcid":"https://orcid.org/0000-0001-7476-6955"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fu, Shi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136912895","display_name":"Cheng Guo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guo, Cheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136900365","display_name":"Andras Balogh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Balogh, Andras","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054208211","display_name":"M\u00e1rk Jelasity","orcid":"https://orcid.org/0000-0001-9363-1482"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jelasity, Mark","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136946356","display_name":"Dacheng Tao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tao, Dacheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9136000275611877,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9136000275611877,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0071000000461936,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11807","display_name":"Infrastructure Resilience and Vulnerability Analysis","score":0.007000000216066837,"subfield":{"id":"https://openalex.org/subfields/2205","display_name":"Civil and Structural Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hyperparameter","display_name":"Hyperparameter","score":0.7113999724388123},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6851999759674072},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6565999984741211},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4781000018119812},{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.30079999566078186},{"id":"https://openalex.org/keywords/obstacle","display_name":"Obstacle","score":0.29190000891685486}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.763700008392334},{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.7113999724388123},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6851999759674072},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6565999984741211},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4781000018119812},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42829999327659607},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4097999930381775},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.30079999566078186},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2935999929904938},{"id":"https://openalex.org/C2776650193","wikidata":"https://www.wikidata.org/wiki/Q264661","display_name":"Obstacle","level":2,"score":0.29190000891685486},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.289000004529953},{"id":"https://openalex.org/C131806220","wikidata":"https://www.wikidata.org/wiki/Q852705","display_name":"Evaluation function","level":2,"score":0.2732999920845032},{"id":"https://openalex.org/C3018395757","wikidata":"https://www.wikidata.org/wiki/Q1379672","display_name":"Evaluation methods","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C125583679","wikidata":"https://www.wikidata.org/wiki/Q755673","display_name":"Search algorithm","level":2,"score":0.2590000033378601},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.25540000200271606}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.23220","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.23220","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.23220","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.23220","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7924813628196716}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Despite":[0],"the":[1,17,105,175],"growing":[2],"use":[3],"of":[4,19,71],"world":[5],"models":[6],"as":[7,78],"decision-making":[8],"agents,":[9],"their":[10],"adversarial":[11,69],"robustness":[12,76],"remains":[13],"underexplored":[14],"due":[15],"to":[16,184,192],"lack":[18],"dedicated":[20],"automated":[21,65],"evaluation":[22,30,70,77,213],"methods.":[23],"A":[24],"key":[25],"obstacle":[26],"is":[27,48],"that":[28,149,199],"attack":[29,83,86,106,209],"must":[31],"be":[32],"both":[33],"accurate":[34],"and":[35,93,118,165,189,205],"efficient:":[36],"weak":[37],"manually":[38],"tuned":[39],"attacks":[40,173],"can":[41],"overestimate":[42],"robustness,":[43],"while":[44],"exhaustive":[45],"hyperparameter":[46],"search":[47,81,98,123,154],"prohibitively":[49],"expensive":[50],"because":[51],"each":[52],"candidate":[53,203],"requires":[54],"closed-loop":[55],"rollouts":[56],"through":[57],"learned":[58],"latent":[59],"dynamics.":[60],"We":[61,143],"introduce":[62],"WMAttack,":[63],"an":[64],"attack-search":[66],"framework":[67],"for":[68,140],"world-model":[72],"agents.":[73],"WMAttack":[74,169],"formulates":[75],"a":[79,137,145],"finite-budget":[80,153],"over":[82],"configurations,":[84],"including":[85],"families,":[87],"perturbation":[88],"budgets,":[89],"optimization":[90],"steps,":[91],"restarts,":[92],"allocation":[94],"rules.":[95],"To":[96,121],"improve":[97,122],"accuracy,":[99],"Self-Correcting":[100],"Attack":[101,126],"Search":[102],"(SCAS)":[103],"refines":[104],"proposal":[107,150],"distribution":[108],"using":[109],"feedback":[110],"from":[111,133,182,190],"reward":[112,180],"degradation,":[113],"action":[114],"instability,":[115],"runtime":[116],"cost,":[117],"rollout":[119],"variability.":[120],"efficiency,":[124],"Representation-Guided":[125],"Retrieval":[127],"(RGAR)":[128],"retrieves":[129],"effective":[130],"historical":[131],"configurations":[132],"representation-similar":[134],"tasks,":[135,168],"providing":[136],"warm":[138],"start":[139],"unseen":[141],"environments.":[142],"provide":[144],"theoretical":[146],"explanation":[147],"showing":[148],"refinement":[151],"improves":[152,201,207],"when":[155],"it":[156],"shifts":[157],"probability":[158],"mass":[159],"toward":[160],"high-utility":[161],"attacks.":[162],"Across":[163],"Atari":[164,188],"DeepMind":[166],"Control":[167],"consistently":[170],"discovers":[171],"stronger":[172],"than":[174],"evaluated":[176],"baselines,":[177],"improving":[178],"normalized":[179],"drop":[181],"0.497":[183],"1.034":[185],"on":[186,194],"DreamerV3":[187],"0.319":[191],"0.682":[193],"DMC.":[195],"Ablations":[196],"further":[197],"show":[198],"RGAR":[200],"initial":[202],"quality":[204],"SCAS":[206],"final":[208],"utility":[210],"under":[211],"fixed":[212],"budgets.":[214]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-26T00:00:00"}