Theoretical Analysis of Adversarial Learning: A Minimax Approach
Not on the map. Why?
Abstract (arXiv)
Here we propose a general theoretical method for analyzing the risk bound in the presence of adversaries. Specifically, we try to fit the adversarial learning problem into the minimax framework. We first show that the original adversarial learning problem can be reduced to a minimax statistical learning problem by introducing a transport map between distributions. Then, we prove a new risk bound for this minimax problem in terms of covering numbers under a weak version of Lipschitz condition. Our method can be applied to multi-class classification problems and commonly used loss functions such as the hinge and ramp losses. As some illustrative examples, we derive the adversarial risk bounds for SVMs, deep neural networks, and PCA, and our bounds have two data-dependent terms, which can be optimized for achieving adversarial robustness.
Key facts. Cited by 31 papers in the map (data through 14 Oct 2026). First posted on arXiv 13 Nov 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 5; 2022: 8; 2023: 10; 2024: 5; 2025: 2; 2026: 1.
31 papers.
Sort:
By area:
- 2021Improving Robustness using Generated Datacited by 234
- 2024Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attackscited by 156
- 2021Exploring Memorization in Adversarial Trainingcited by 55
- 2021Adversarial Robustness with Semi-Infinite Constrained Learningcited by 39
- 2022The Many Faces of Adversarial Riskcited by 28
- 2022Exploring the Relationship between Architecture and Adversarially Robust Generalizationcited by 23
- 2021Mixed Nash Equilibria in the Adversarial Examples Gamecited by 22
- 2022Federated Adversarial Learning: A Framework with Convergence Analysiscited by 17
- 2023Outlier-Robust Wasserstein DROcited by 16
- 2022Toward Learning Robust and Invariant Representations with Alignment Regularization and Data Augmentationcited by 11
- 2023Distilling Out-of-Distribution Robustness from Vision-Language Foundation Modelscited by 9
- 2023Nash Equilibria, Regularization and Computation in Optimal Transport-Based Distributionally Robust Optimizationcited by 8
19 more
- 2023Understanding Noise-Augmented Training for Randomized Smoothingcited by 7
- 2023Towards Understanding the Mechanism of Contrastive Learning via Similarity Structure: A Theoretical Analysiscited by 6
- 2023On adversarial robustness and the use of Wasserstein ascent-descent dynamics to enforce itcited by 4
- 2024Exploring Adversarial Robustness of Deep State Space Modelscited by 4
- 2022AdAUC: End-to-end Adversarial AUC Optimization Against Long-tail Problemscited by 3
- 2023Generating Less Certain Adversarial Examples Improves Robust Generalizationcited by 3
- 2025Wasserstein Distributionally Robust Nonparametric Regressioncited by 3
- 2021Attack Transferability Characterization for Adversarially Robust Multi-label Classificationcited by 2
- 2022AdvCat: Domain-Agnostic Robustness Assessment for Cybersecurity-Critical Applications with Categorical Inputscited by 2
- 2023Non-Asymptotic Bounds for Adversarial Excess Risk under Misspecified Modelscited by 2
- 2024Minimax rates of convergence for nonparametric regression under adversarial attackscited by 2
- 2022Finding Dynamics Preserving Adversarial Winning Ticketscited by 1
- 2022Provable Robust Saliency-based Explanationscited by 1
- 2023On Achieving Optimal Adversarial Test Errorcited by 1
- 2024Tropical Decision Boundaries for Neural Networks Are Robust Against Adversarial Attackscited by 1
- 2023Robust Ranking Explanationscited by 0
- 2024Robust optimization for adversarial learning with finite sample complexity guaranteescited by 0
- 2025Adversarial generalization of unfolding (model-based) networkscited by 0
- 2026Risk-Averse Wasserstein Distributionally Robust Online Learningcited by 0
- 2026Risk-Averse Wasserstein Distributionally Robust Online Learning23 Feb 2026
- 2025Adversarial generalization of unfolding (model-based) networks18 Sep 2025
- 2025Wasserstein Distributionally Robust Nonparametric Regression12 May 2025
- 2024Minimax rates of convergence for nonparametric regression under adversarial attacks12 Oct 2024
- 2024Exploring Adversarial Robustness of Deep State Space Models8 Jun 2024
- 2024Robust optimization for adversarial learning with finite sample complexity guarantees22 Mar 2024
- 2024Tropical Decision Boundaries for Neural Networks Are Robust Against Adversarial Attacks1 Feb 2024
- 2024Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks30 Jan 2024
- 2023Outlier-Robust Wasserstein DRO9 Nov 2023
- 2023Distilling Out-of-Distribution Robustness from Vision-Language Foundation Models2 Nov 2023
- 2023Generating Less Certain Adversarial Examples Improves Robust Generalization6 Oct 2023
- 2023Non-Asymptotic Bounds for Adversarial Excess Risk under Misspecified Models2 Sep 2023
19 more
- 2023Robust Ranking Explanations8 Jul 2023
- 2023On Achieving Optimal Adversarial Test Error13 Jun 2023
- 2023Understanding Noise-Augmented Training for Randomized Smoothing8 May 2023
- 2023Towards Understanding the Mechanism of Contrastive Learning via Similarity Structure: A Theoretical Analysis1 Apr 2023
- 2023Nash Equilibria, Regularization and Computation in Optimal Transport-Based Distributionally Robust Optimization7 Mar 2023
- 2023On adversarial robustness and the use of Wasserstein ascent-descent dynamics to enforce it9 Jan 2023
- 2022Provable Robust Saliency-based Explanations28 Dec 2022
- 2022AdvCat: Domain-Agnostic Robustness Assessment for Cybersecurity-Critical Applications with Categorical Inputs13 Dec 2022
- 2022Exploring the Relationship between Architecture and Adversarially Robust Generalization28 Sep 2022
- 2022Federated Adversarial Learning: A Framework with Convergence Analysis7 Aug 2022
- 2022AdAUC: End-to-end Adversarial AUC Optimization Against Long-tail Problems24 Jun 2022
- 2022Toward Learning Robust and Invariant Representations with Alignment Regularization and Data Augmentation4 Jun 2022
- 2022Finding Dynamics Preserving Adversarial Winning Tickets14 Feb 2022
- 2022The Many Faces of Adversarial Risk22 Jan 2022
- 2021Adversarial Robustness with Semi-Infinite Constrained Learning29 Oct 2021
- 2021Improving Robustness using Generated Data18 Oct 2021
- 2021Attack Transferability Characterization for Adversarially Robust Multi-label Classification29 Jun 2021
- 2021Exploring Memorization in Adversarial Training3 Jun 2021
- 2021Mixed Nash Equilibria in the Adversarial Examples Game13 Feb 2021
- 2021Improving Robustness using Generated Datacited by 234
- 2021Exploring Memorization in Adversarial Trainingcited by 55
- 2021Adversarial Robustness with Semi-Infinite Constrained Learningcited by 39
- 2022The Many Faces of Adversarial Riskcited by 28
- 2022Exploring the Relationship between Architecture and Adversarially Robust Generalizationcited by 23
- 2021Mixed Nash Equilibria in the Adversarial Examples Gamecited by 22
- 2022Federated Adversarial Learning: A Framework with Convergence Analysiscited by 17
- 2023Outlier-Robust Wasserstein DROcited by 16
- 2022Toward Learning Robust and Invariant Representations with Alignment Regularization and Data Augmentationcited by 11
- 2023Nash Equilibria, Regularization and Computation in Optimal Transport-Based Distributionally Robust Optimizationcited by 8
- 2023Understanding Noise-Augmented Training for Randomized Smoothingcited by 7
- 2023Towards Understanding the Mechanism of Contrastive Learning via Similarity Structure: A Theoretical Analysiscited by 6
12 most cited of 29 All 29 (JSON)
- 2026Risk-Averse Wasserstein Distributionally Robust Online Learning23 Feb 2026
- 2025Adversarial generalization of unfolding (model-based) networks18 Sep 2025
- 2025Wasserstein Distributionally Robust Nonparametric Regression12 May 2025
- 2024Minimax rates of convergence for nonparametric regression under adversarial attacks12 Oct 2024
- 2024Exploring Adversarial Robustness of Deep State Space Models8 Jun 2024
- 2024Robust optimization for adversarial learning with finite sample complexity guarantees22 Mar 2024
- 2024Tropical Decision Boundaries for Neural Networks Are Robust Against Adversarial Attacks1 Feb 2024
- 2023Outlier-Robust Wasserstein DRO9 Nov 2023
- 2023Generating Less Certain Adversarial Examples Improves Robust Generalization6 Oct 2023
- 2023Non-Asymptotic Bounds for Adversarial Excess Risk under Misspecified Models2 Sep 2023
- 2023Robust Ranking Explanations8 Jul 2023
- 2023On Achieving Optimal Adversarial Test Error13 Jun 2023
12 newest of 29 All 29 (JSON)