arXiv Machine Learning By Rachel Morris, Ryan Murray, Kerrek Stinson

On the tradeoff between robustness and geometric accuracy in adversarial training

Read the original on arXiv Machine Learning →

arXiv:2610. 22955v1 Announce Type: new Abstract: For non-parametric binary classification in the presence of an adversary, we prove an optimal quantitative estimate for adversarial classifiers controlling geometric accuracy, as measured by the Hausdorff distance to the Bayes classifier, in terms or their robustness, as encoded by the adversarial budget $\varepsilon$.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv Machine Learning.

arXiv AI
Oct 1

Probabilistic Adversarial Training

The paper introduces probabilistic adversarial training, a method that enhances robustness by reducing the overlap between a distance-based distribution and a victim-classifier-induced distribution. It derives a KL-based lower bound on probabilistic robustness, which serves as a tractable surrogate objective. Experiments confirm that this approach consistently improves probabilistic robustness and can even boost non-probabilistic adversarial training methods through an induced scaling factor.

By Andi Zhang, Xingyu Zhao, Siddartha Khastgir