Robust Estimators in High Dimensions without the Computational Intractability
Not on the map. Why?
Abstract (arXiv)
We study high-dimensional distribution learning in an agnostic setting where an adversary is allowed to arbitrarily corrupt an varepsilon-fraction of the samples. Such questions have a rich history spanning statistics, machine learning and theoretical computer science. Even in the most basic settings, the only known approaches are either computationally inefficient or lose dimension-dependent factors in their error guarantees. This raises the following question:Is high-dimensional agnostic distribution learning even possible, algorithmically? In this work, we obtain the first computationally efficient algorithms with dimension-independent error guarantees for agnostically learning several fundamental classes of high-dimensional distributions: (1) a single Gaussian, (2) a product distribution on the hypercube, (3) mixtures of two product distributions (under a natural balancedness condition), and (4) mixtures of spherical Gaussians. Our algorithms achieve error that is independent of the dimension, and in many cases scales nearly-linearly with the fraction of adversarially corrupted samples. Moreover, we develop a general recipe for detecting and correcting corruptions in high-dimensions, that may be applicable to many other problems.
Key facts. Cited by 209 papers in the map (data through 14 Oct 2026). First posted on arXiv 21 Apr 2016.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 44; 2022: 45; 2023: 38; 2024: 31; 2025: 25; 2026: 26.
209 papers.
Sort:
By area:
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 371
- 2021SPECTRE: Defending Against Backdoor Attacks Using Robust Statisticscited by 130
- 2021Data Collection and Quality Challenges in Deep Learning: A Data-Centric AI Perspectivecited by 116
- 2021Robust and Differentially Private Mean Estimationcited by 66
- 2022Byzantine Machine Learning Made Easy by Resilient Averaging of Momentumscited by 63
- 2021Property Inference From Poisoningcited by 60
- 2021DORO: Distributional and Outlier Robust Optimizationcited by 56
- 2022Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregationcited by 52
- 2021Corruption-Robust Offline Reinforcement Learningcited by 51
- 2021Efficient Mean Estimation with Pure Differential Privacy via a Sum-of-Squares Exponential Mechanismcited by 50
- 2021Alternative Microfoundations for Strategic Classificationcited by 47
- 2021Covariance-Aware Private Mean Estimation Without Private Covariance Estimationcited by 46
38 more
- 2021Private and polynomial time algorithms for learning Gaussians and beyondcited by 39
- 2021Private Robust Estimation by Stabilizing Convex Relaxationscited by 38
- 2024LazyDiT: Lazy Learning for the Acceleration of Diffusion Transformerscited by 37
- 2024How Does Unlabeled Data Provably Help Out-of-Distribution Detection?cited by 36
- 2021A Private and Computationally-Efficient Estimator for Unbounded Gaussianscited by 34
- 2022New Lower Bounds for Private Estimation and a Generalized Fingerprinting Lemmacited by 33
- 2022Private Estimation with Public Datacited by 32
- 2021Robust Policy Gradient against Strong Data Corruptioncited by 30
- 2022Byzantine-Robust Federated Learning with Optimal Statistical Rates and Privacy Guaranteescited by 30
- 2023From Robustness to Privacy and Backcited by 27
- 2022COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attackscited by 26
- 2021Statistical Query Lower Bounds for List-Decodable Linear Regressioncited by 25
- 2022Indiscriminate Data Poisoning Attacks on Neural Networkscited by 25
- 2022Mirror Descent Strikes Again: Optimal Stochastic Convex Optimization under Infinite Noise Variancecited by 24
- 2022Robust Sparse Mean Estimation via Sum of Squarescited by 24
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2024Unraveling the Smoothness Properties of Diffusion Models: A Gaussian Mixture Perspectivecited by 24
- 2023Fast, Sample-Efficient, Affine-Invariant Private Mean and Covariance Estimation for Subgaussian Distributionscited by 22
- 2021Clustering Mixture Models in Almost-Linear Time via List-Decodable Mean Estimationcited by 21
- 2021Efficient Algorithms for Learning from Coarse Labelscited by 21
- 2022Streaming Algorithms for High-Dimensional Robust Statisticscited by 21
- 2023Private estimation algorithms for stochastic block models and mixture modelscited by 21
- 2021Robust Training in High Dimensions via Block Coordinate Geometric Median Descentcited by 20
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearningcited by 20
- 2021Fairness-Aware PAC Learning from Corrupted Datacited by 18
- 2022Holistic Robust Data-Driven Decisionscited by 18
- 2023Run-Off Election: Improved Provable Defense against Data Poisoning Attackscited by 17
- 2023A Huber Loss Minimization Approach to Byzantine Robust Federated Learningcited by 16
- 2021Robust Regression Revisited: Acceleration and Improved Estimation Ratescited by 15
- 2021Reinforcement Learning in Reward-Mixing MDPscited by 15
- 2024Tolerant Algorithms for Learning with Arbitrary Covariate Shiftcited by 15
- 2021Outlier-Robust Learning of Ising Models Under Dobrushin's Conditioncited by 14
- 2021Outlier-Robust Sparse Estimation via Non-Convex Optimizationcited by 14
- 2022Learning from a Biased Samplecited by 14
- 2022On Optimal Learning Under Targeted Data Poisoningcited by 14
- 2021Learning and Certification under Instance-targeted Poisoningcited by 13
- 2022Byzantine-Robust Online and Offline Distributed Reinforcement Learningcited by 13
- 2022List-Decodable Sparse Mean Estimation via Difference-of-Pairs Filteringcited by 13
50 most cited of 209 All 209 (JSON)
- 2026On the SoS Certifiability of Log-Concave Distributions24 Sep 2026
- 2026Efficient Robust Learning at the Information-Theoretic Limit15 Sep 2026
- 2026Quantile-based Loss Filtering for Outlier-Robust Stochastic Gradient Descent11 Sep 2026
- 2026Median-of-Means as an Extremal Convex Estimator and a Nonconvex Route to the Trimmed Oracle1 Sep 2026
- 2026RAGSentinel: Certifiable Geometric Consensus for Robust Retrieval-Augmented Generation25 Aug 2026
- 2026Wasserstein Filtering: A Sample Selection Method for Robust Distribution Learning13 Aug 2026
- 2026Fixed-Set Robustness in Programming by Example: Example Corruption and Semantic Partition Recovery1 Jul 2026
- 2026Dangerous Liaisons of Convex Learning and Non-Affine Aggregation26 Jun 2026
- 2026Sum-of-Squares Degree Barriers for the Reweighted-Hinge Method in Robust Halfspace Learning: A Christoffel-Function Characterization15 Jun 2026
- 2026Certifiable Semantic Agreement Among LLM Agents: What the Admissibility Instrument Decides5 Jun 2026
- 2026Open World Autoencoding Drift Detection with Novel Class Recognition in Tabular Non-stationary Data Streams28 May 2026
- 2026Convex Basins in Single-Index Model Loss Landscapes: Applications to Robust Recovery under Strong Adversarial Corruption28 May 2026
38 more
- 2026Robust Moment-Based Estimation via Spectral Gradient Reweighting26 May 2026
- 2026Algorithms with Polynomially-Improved Approximation Factors for the 2 rightarrow q Norm, and Applications24 May 2026
- 2026Robust Statistical Estimators with Bounded Empirical Sensitivity21 May 2026
- 2026Iterative Chow Filtering for Learning with Distribution Shift17 May 2026
- 2026Robust Learning with Optimal Error2 Apr 2026
- 2026Corruption-robust Offline Multi-agent Reinforcement Learning From Human Feedback30 Mar 2026
- 2026Computation-Utility-Privacy Tradeoffs in Bayesian Estimation18 Mar 2026
- 2026High-Dimensional Gaussian Mean Estimation under Realizable Contamination17 Mar 2026
- 2026Sample Complexity Bounds for Robust Mean Estimation with Mean-Shift Contamination25 Feb 2026
- 2026Robust Processing and Learning: Principles, Methods, and Wireless Applications10 Feb 2026
- 2026From Inexact Gradients to Byzantine Robustness: Acceleration and Optimization under Similarity3 Feb 2026
- 2026Near-Optimal Private Tests for Simple and MLR Hypotheses29 Jan 2026
- 2026Tractable Gaussian Phase Retrieval with Heavy Tails and Adversarial Corruption with Near-Linear Sample Complexity26 Jan 2026
- 2026Learning Mixture Models via Efficient High-dimensional Sparse Fourier Transforms8 Jan 2026
- 2025Learning Confidence Ellipsoids and Applications to Robust Subspace Recovery18 Dec 2025
- 2025Robust and Sparse Estimation of Unbounded Density Ratio under Heavy Contamination10 Dec 2025
- 2025High-Accuracy List-Decodable Mean Estimation21 Nov 2025
- 2025Information-Computation Tradeoffs for Noiseless Linear Regression with Oblivious Contamination12 Oct 2025
- 2025On the Optimality of the Median-of-Means Estimator under Adversarial Contamination9 Oct 2025
- 2025Linear Regression under Missing or Corrupted Coordinates23 Sep 2025
- 2025Query-Efficient Locally Private Hypothesis Selection via the Scheffe Graph19 Sep 2025
- 2025On the Learnability of Distribution Classes with Adaptive Adversaries5 Sep 2025
- 2025Robust Estimation Under Heterogeneous Corruption Rates20 Aug 2025
- 2025Distributionally Robust Optimization with Adversarial Data Contamination14 Jul 2025
- 2025LARP: Learner-Agnostic Robust Data Prefiltering25 Jun 2025
- 2025SubSearch: Robust Estimation and Outlier Detection for Stochastic Block Models via Subgraph Search4 Jun 2025
- 2025Agnostic Learning under Targeted Poisoning: Optimal Rates and the Role of Randomness3 Jun 2025
- 2025Multi-level Certified Defense Against Poisoning Attacks in Offline Reinforcement Learning27 May 2025
- 2025The Power of Iterative Filtering for Supervised Learning with (Heavy) Contamination26 May 2025
- 2025Adversarial Robustness of Nonparametric Regression23 May 2025
- 2025Robust Federated Personalised Mean Estimation for the Gaussian Mixture Model28 Apr 2025
- 2025Learning High-dimensional Gaussians from Censored Data28 Apr 2025
- 2025Computing High-dimensional Confidence Sets for Arbitrary Distributions3 Apr 2025
- 2025Geometric Median Matching for Robust k-Subset Selection from Noisy Data1 Apr 2025
- 2025Sample-Optimal Private Regression in Polynomial Time31 Mar 2025
- 2025Batch List-Decodable Linear Regression via Higher Moments12 Mar 2025
- 2025Efficient Multivariate Robust Mean Estimation Under Mean-Shift Contamination20 Feb 2025
- 2025Nearly Optimal Robust Covariance and Scatter Matrix Estimation Beyond Gaussians10 Feb 2025
50 newest of 209 All 209 (JSON)
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 371
- 2022Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregationcited by 52
- 2022Indiscriminate Data Poisoning Attacks on Neural Networkscited by 25
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearningcited by 20
- 2023Run-Off Election: Improved Provable Defense against Data Poisoning Attackscited by 17
- 2022On Optimal Learning Under Targeted Data Poisoningcited by 14
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearning12 Dec 2024
- 2023Run-Off Election: Improved Provable Defense against Data Poisoning Attacks5 Feb 2023
- 2022On Optimal Learning Under Targeted Data Poisoning6 Oct 2022
- 2022Indiscriminate Data Poisoning Attacks on Neural Networks19 Apr 2022
- 2022Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation5 Feb 2022
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar 2021
- 2021SPECTRE: Defending Against Backdoor Attacks Using Robust Statisticscited by 130
- 2021Data Collection and Quality Challenges in Deep Learning: A Data-Centric AI Perspectivecited by 116
- 2021Robust and Differentially Private Mean Estimationcited by 66
- 2022Byzantine Machine Learning Made Easy by Resilient Averaging of Momentumscited by 63
- 2021Property Inference From Poisoningcited by 60
- 2021DORO: Distributional and Outlier Robust Optimizationcited by 56
- 2021Efficient Mean Estimation with Pure Differential Privacy via a Sum-of-Squares Exponential Mechanismcited by 50
- 2021Alternative Microfoundations for Strategic Classificationcited by 47
- 2021Covariance-Aware Private Mean Estimation Without Private Covariance Estimationcited by 46
- 2021Private and polynomial time algorithms for learning Gaussians and beyondcited by 39
- 2021Private Robust Estimation by Stabilizing Convex Relaxationscited by 38
- 2024How Does Unlabeled Data Provably Help Out-of-Distribution Detection?cited by 36
12 most cited of 194 All 194 (JSON)
- 2026On the SoS Certifiability of Log-Concave Distributions24 Sep 2026
- 2026Efficient Robust Learning at the Information-Theoretic Limit15 Sep 2026
- 2026Quantile-based Loss Filtering for Outlier-Robust Stochastic Gradient Descent11 Sep 2026
- 2026Median-of-Means as an Extremal Convex Estimator and a Nonconvex Route to the Trimmed Oracle1 Sep 2026
- 2026Wasserstein Filtering: A Sample Selection Method for Robust Distribution Learning13 Aug 2026
- 2026Fixed-Set Robustness in Programming by Example: Example Corruption and Semantic Partition Recovery1 Jul 2026
- 2026Dangerous Liaisons of Convex Learning and Non-Affine Aggregation26 Jun 2026
- 2026Sum-of-Squares Degree Barriers for the Reweighted-Hinge Method in Robust Halfspace Learning: A Christoffel-Function Characterization15 Jun 2026
- 2026Open World Autoencoding Drift Detection with Novel Class Recognition in Tabular Non-stationary Data Streams28 May 2026
- 2026Convex Basins in Single-Index Model Loss Landscapes: Applications to Robust Recovery under Strong Adversarial Corruption28 May 2026
- 2026Robust Moment-Based Estimation via Spectral Gradient Reweighting26 May 2026
- 2026Algorithms with Polynomially-Improved Approximation Factors for the 2 rightarrow q Norm, and Applications24 May 2026
12 newest of 194 All 194 (JSON)