Current browse context:
stat.ML
Change to browse by:
References & Citations
Statistics > Machine Learning
Title: Adversarial Risk Bounds via Function Transformation
(Submitted on 22 Oct 2018 (v1), last revised 1 Jan 2019 (this version, v2))
Abstract: We derive bounds for a notion of adversarial risk, designed to characterize the robustness of linear and neural network classifiers to adversarial perturbations. Specifically, we introduce a new class of function transformations with the property that the risk of the transformed functions upper-bounds the adversarial risk of the original functions. This reduces the problem of deriving bounds on the adversarial risk to the problem of deriving risk bounds using standard learning-theoretic techniques. We then derive bounds on the Rademacher complexities of the transformed function classes, obtaining error rates on the same order as the generalization error of the original function classes. We also discuss extensions of our theory to multiclass classification and regression. Finally, we provide two algorithms for optimizing the adversarial risk bounds in the linear case, and discuss connections to regularization and distributional robustness.
Submission history
From: Justin Khim [view email][v1] Mon, 22 Oct 2018 19:51:20 GMT (43kb,D)
[v2] Tue, 1 Jan 2019 22:29:27 GMT (57kb,D)
Link back to: arXiv, form interface, contact.