论文标题
超越扰动:通过任意对抗测试示例学习保证
Beyond Perturbations: Learning Guarantees with Arbitrary Adversarial Test Examples
论文作者
论文摘要
我们提出了一种偏向性学习算法,该算法以分配$ p $和任意(未标记的)测试示例为输入培训示例,可能是对手选择的。这与以前的工作不同,该工作假设测试示例是$ p $的小扰动。我们的算法输出了一个选择性分类器,该分类器弃权在某些示例中预测。通过考虑选择性的转导学习,我们提供了使用任意火车和测试分布的有限VC维度学习类别的第一个非平地保证,即使对于简单类别的功能,例如在线间隔等简单类别。特别是,对于有界风险投资二维的类$ c $中的任何功能,我们保证相对于$ p $的测试错误率较低和拒绝率低。考虑到$ c $的经验风险最小化(ERM),我们的算法效率很高。即使是由无限的白盒对手选择的测试示例,我们的保证也可以。我们还为概括,不可知论和无监督的设置提供了保证。
We present a transductive learning algorithm that takes as input training examples from a distribution $P$ and arbitrary (unlabeled) test examples, possibly chosen by an adversary. This is unlike prior work that assumes that test examples are small perturbations of $P$. Our algorithm outputs a selective classifier, which abstains from predicting on some examples. By considering selective transductive learning, we give the first nontrivial guarantees for learning classes of bounded VC dimension with arbitrary train and test distributions---no prior guarantees were known even for simple classes of functions such as intervals on the line. In particular, for any function in a class $C$ of bounded VC dimension, we guarantee a low test error rate and a low rejection rate with respect to $P$. Our algorithm is efficient given an Empirical Risk Minimizer (ERM) for $C$. Our guarantees hold even for test examples chosen by an unbounded white-box adversary. We also give guarantees for generalization, agnostic, and unsupervised settings.