arXiv Machine Learning
1d ago

Adversarial Training with Large Step Sizes: Implicit Bias, Optimization, and Sharpness

The paper investigates how deterministic Gradient Descent behaves when applied to Adversarial Training with large, constant step sizes. It analyzes both a linear logistic regression setting—examining where parameters converge (implicit bias) and how fast losses decrease (optimization)—and neural network training, focusing on the evolution of loss sharpness. The study reveals three key distinctions from Standard Training: the implicit bias gap persists even with large steps, there is no uniform convergence rate for optimization error, and sharpness follows a two‑stage dynamic unlike the Edge‑of‑Stability pattern seen in Standard Training.

By Yi Feng, Andrea Paudice
arXiv Machine Learning
Sep 30

Byzantine-Robust Federated Representation Learning

arXiv:2609.36660v1 Announce Type: new Abstract: We study federated learning (FL) with adversarial clients, where the goal is to minimize the average loss of the honest (non-adversarial) clients witho...

By Leonardo F. Toso, James Anderson, Rafael Pinot, Nirupam Gupta
arXiv Machine Learning
Aug 28

Adversarial Training Without Input Gradients via Low-Rank Householder Expansions

The paper introduces a method for adversarial training that avoids computing input gradients by using a low‑rank Householder expansion (LRHE) to directly generate small‑norm adversarial examples from a network’s parameters. This approach requires only forward passes and standard back‑propagation, eliminating the inner maximization loop and reducing computational cost to roughly 2.8 PGD steps per epoch. The resulting models achieve comparable robustness to multi‑step PGD training for small relative ε budgets, demonstrating the feasibility of gradient‑free adversarial training.

By Tiana C. Johnson, Donsub Rim