The Adversarial Consistency of Surrogate Risks for Binary Classification

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Frank, Natalie, Niles-Weed, Jonathan
Format: Preprint
Veröffentlicht: 2023
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866909830227165184
author Frank, Natalie
Niles-Weed, Jonathan
author_facet Frank, Natalie
Niles-Weed, Jonathan
contents We study the consistency of surrogate risks for robust binary classification. It is common to learn robust classifiers by adversarial training, which seeks to minimize the expected $0$-$1$ loss when each example can be maliciously corrupted within a small ball. We give a simple and complete characterization of the set of surrogate loss functions that are \emph{consistent}, i.e., that can replace the $0$-$1$ loss without affecting the minimizing sequences of the original adversarial risk, for any data distribution. We also prove a quantitative version of adversarial consistency for the $ρ$-margin loss. Our results reveal that the class of adversarially consistent surrogates is substantially smaller than in the standard setting, where many common surrogates are known to be consistent.
format Preprint
id arxiv_https___arxiv_org_abs_2305_09956
institution arXiv
publishDate 2023
record_format arxiv
spellingShingle The Adversarial Consistency of Surrogate Risks for Binary Classification
Frank, Natalie
Niles-Weed, Jonathan
Machine Learning
Statistics Theory
We study the consistency of surrogate risks for robust binary classification. It is common to learn robust classifiers by adversarial training, which seeks to minimize the expected $0$-$1$ loss when each example can be maliciously corrupted within a small ball. We give a simple and complete characterization of the set of surrogate loss functions that are \emph{consistent}, i.e., that can replace the $0$-$1$ loss without affecting the minimizing sequences of the original adversarial risk, for any data distribution. We also prove a quantitative version of adversarial consistency for the $ρ$-margin loss. Our results reveal that the class of adversarially consistent surrogates is substantially smaller than in the standard setting, where many common surrogates are known to be consistent.
title The Adversarial Consistency of Surrogate Risks for Binary Classification
topic Machine Learning
Statistics Theory
url https://arxiv.org/abs/2305.09956