Adversarially Robust PAC Learning with Optimal VC Rates
En palabras de los autores
We study the problem of adversarially robust PAC learning. In this framework, the learner observes independent samples from an unknown distribution over , as in classical PAC learning. However, given a perturbation map known to the learner, the goal is to output, with high probability, a predictor that correctly classifies every perturbation of most future examples drawn from the same underlying distribution. We determine the optimal -independent sample complexity of this problem in both the realizable and agnostic settings. More specifically, for every concept class of dimension , we prove upper bounds of in the realizable setting and in the agnostic setting, together with an optimal first-order refinement of the latter. These bounds match the corresponding lower bounds for classical PAC learning. Consequently, and perhaps surprisingly, adversarial robustness incurs no additional distribution-free statistical cost, uniformly over all perturbation maps. Our bounds improve exponentially on those of [Montasser, Hanneke, and Srebro; COLT '19]. On the technical side, we present short and elementary proofs based on a new algorithmic principle that we call binomial-bagging. We believe that binomial-bagging and its analysis may be of independent interest.
Apareció: martes, 22 de septiembre. arXiv. Preprint, todavía sin revisión por pares.
Comentario de los autores: 35 pages, 2 figures