Timezone: »

 
Spotlight
Theoretical Analysis of Adversarial Learning: A Minimax Approach
Zhuozhuo Tu · Jingwei Zhang · Dacheng Tao

Thu Dec 12 04:10 PM -- 04:15 PM (PST) @ West Ballroom A + B
in Track 3 Session 6 »

In this paper, we propose a general theoretical method for analyzing the risk bound in the presence of adversaries. Specifically, we try to fit the adversarial learning problem into the minimax framework. We first show that the original adversarial learning problem can be transformed into a minimax statistical learning problem by introducing a transport map between distributions. Then, we prove a new risk bound for this minimax problem in terms of covering numbers under a weak version of Lipschitz condition. Our method can be applied to multi-class classification and popular loss functions including the hinge loss and ramp loss. As some illustrative examples, we derive the adversarial risk bounds for SVMs and deep neural networks, and our bounds have two data-dependent terms, which can be optimized for achieving adversarial robustness.

[ Paper]  [ Poster]  [ Slides] 

Author Information

Zhuozhuo Tu (The University of Sydney)
Jingwei Zhang (HKUST)
Dacheng Tao (University of Sydney)

Related Events (a corresponding poster, oral, or spotlight)

More from the Same Authors