RS-Reg: Probabilistic and Robust Certified Regression Through Randomized Smoothing

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Rekavandi, Aref Miri, Ohrimenko, Olga, Rubinstein, Benjamin I. P.
Format: Preprint
Publié: 2024
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866914796406833152
author Rekavandi, Aref Miri
Ohrimenko, Olga
Rubinstein, Benjamin I. P.
author_facet Rekavandi, Aref Miri
Ohrimenko, Olga
Rubinstein, Benjamin I. P.
contents Randomized smoothing has shown promising certified robustness against adversaries in classification tasks. Despite such success with only zeroth-order access to base models, randomized smoothing has not been extended to a general form of regression. By defining robustness in regression tasks flexibly through probabilities, we demonstrate how to establish upper bounds on input data point perturbation (using the $\ell_2$ norm) for a user-specified probability of observing valid outputs. Furthermore, we showcase the asymptotic property of a basic averaging function in scenarios where the regression model operates without any constraint. We then derive a certified upper bound of the input perturbations when dealing with a family of regression models where the outputs are bounded. Our simulations verify the validity of the theoretical results and reveal the advantages and limitations of simple smoothing functions, i.e., averaging, in regression tasks. The code is publicly available at \url{https://github.com/arekavandi/Certified_Robust_Regression}.
format Preprint
id arxiv_https___arxiv_org_abs_2405_08892
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle RS-Reg: Probabilistic and Robust Certified Regression Through Randomized Smoothing
Rekavandi, Aref Miri
Ohrimenko, Olga
Rubinstein, Benjamin I. P.
Machine Learning
Randomized smoothing has shown promising certified robustness against adversaries in classification tasks. Despite such success with only zeroth-order access to base models, randomized smoothing has not been extended to a general form of regression. By defining robustness in regression tasks flexibly through probabilities, we demonstrate how to establish upper bounds on input data point perturbation (using the $\ell_2$ norm) for a user-specified probability of observing valid outputs. Furthermore, we showcase the asymptotic property of a basic averaging function in scenarios where the regression model operates without any constraint. We then derive a certified upper bound of the input perturbations when dealing with a family of regression models where the outputs are bounded. Our simulations verify the validity of the theoretical results and reveal the advantages and limitations of simple smoothing functions, i.e., averaging, in regression tasks. The code is publicly available at \url{https://github.com/arekavandi/Certified_Robust_Regression}.
title RS-Reg: Probabilistic and Robust Certified Regression Through Randomized Smoothing
topic Machine Learning
url https://arxiv.org/abs/2405.08892