Robust Conformal Prediction with a Single Binary Certificate

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Zargarbashi, Soroush H., Bojchevski, Aleksandar
Format: Preprint
Publié: 2025
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866917947689140224
author Zargarbashi, Soroush H.
Bojchevski, Aleksandar
author_facet Zargarbashi, Soroush H.
Bojchevski, Aleksandar
contents Conformal prediction (CP) converts any model's output to prediction sets with a guarantee to cover the true label with (adjustable) high probability. Robust CP extends this guarantee to worst-case (adversarial) inputs. Existing baselines achieve robustness by bounding randomly smoothed conformity scores. In practice, they need expensive Monte-Carlo (MC) sampling (e.g. $\sim10^4$ samples per point) to maintain an acceptable set size. We propose a robust conformal prediction that produces smaller sets even with significantly lower MC samples (e.g. 150 for CIFAR10). Our approach binarizes samples with an adjustable (or automatically adjusted) threshold selected to preserve the coverage guarantee. Remarkably, we prove that robustness can be achieved by computing only one binary certificate, unlike previous methods that certify each calibration (or test) point. Thus, our method is faster and returns smaller robust sets. We also eliminate a previous limitation that requires a bounded score function.
format Preprint
id arxiv_https___arxiv_org_abs_2503_05239
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Robust Conformal Prediction with a Single Binary Certificate
Zargarbashi, Soroush H.
Bojchevski, Aleksandar
Machine Learning
Artificial Intelligence
Conformal prediction (CP) converts any model's output to prediction sets with a guarantee to cover the true label with (adjustable) high probability. Robust CP extends this guarantee to worst-case (adversarial) inputs. Existing baselines achieve robustness by bounding randomly smoothed conformity scores. In practice, they need expensive Monte-Carlo (MC) sampling (e.g. $\sim10^4$ samples per point) to maintain an acceptable set size. We propose a robust conformal prediction that produces smaller sets even with significantly lower MC samples (e.g. 150 for CIFAR10). Our approach binarizes samples with an adjustable (or automatically adjusted) threshold selected to preserve the coverage guarantee. Remarkably, we prove that robustness can be achieved by computing only one binary certificate, unlike previous methods that certify each calibration (or test) point. Thus, our method is faster and returns smaller robust sets. We also eliminate a previous limitation that requires a bounded score function.
title Robust Conformal Prediction with a Single Binary Certificate
topic Machine Learning
Artificial Intelligence
url https://arxiv.org/abs/2503.05239