Interpolation can hurt robust generalization even when there is no noise
Not on the map. Why?
Abstract (arXiv)
Numerous recent works show that overparameterization implicitly reduces variance for min-norm interpolators and max-margin classifiers. These findings suggest that ridge regularization has vanishing benefits in high dimensions. We challenge this narrative by showing that, even in the absence of noise, avoiding interpolation through ridge regularization can significantly improve generalization. We prove this phenomenon for the robust risk of both linear regression and classification and hence provide the first theoretical result on robust overfitting.
Key facts. Cited by 15 papers in the map (data through 7 Oct 2026). Builds on 38 of its 61 references that are in the map. First posted on arXiv 5 Aug 2021.
Builds on
38 of 61 references.
References · 38
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2018Reconciling modern machine learning practice and the bias-variance trade-offcited by 919
- 2019Deep Double Descent: Where Bigger Models and More Data Hurtcited by 667
- 2017The Implicit Bias of Gradient Descent on Separable Datacited by 649
- 2019Benign Overfitting in Linear Regressioncited by 544
- 2019Surprises in High-Dimensional Ridgeless Least Squares Interpolationcited by 508
- 2020Overfitting in adversarially robust deep learningcited by 504
- 2018On the Global Convergence of Gradient Descent for Over-parameterized Models using Optimal Transportcited by 422
- 2019The generalization error of random features regression: Precise asymptotics and double descent curvecited by 410
- 2017Certifying Some Distributional Robustness with Principled Adversarial Trainingcited by 333
- 2019Gradient Descent Maximizes the Margin of Homogeneous Neural Networkscited by 308
- 2020Implicit Bias of Gradient Descent for Wide Two-layer Neural Networks Trained with the Logistic Losscited by 267
26 more
- 2018Implicit Bias of Gradient Descent on Linear Convolutional Networkscited by 251
- 2018Just Interpolate: Kernel "Ridgeless" Regression Can Generalizecited by 190
- 2018To understand deep learning we need to understand kernel learningcited by 186
- 2018Gradient descent aligns the layers of deep linear networkscited by 182
- 2019Linearized two-layers neural networks in high dimensioncited by 155
- 2020Understanding and Mitigating the Tradeoff Between Robustness and Accuracycited by 148
- 2015High-Dimensional Asymptotics of Prediction: Ridge Regression and Classificationcited by 146
- 2018Invariance, Causality and Robustnesscited by 123
- 2019Harmless interpolation of noisy data in regressioncited by 121
- 2020Optimal Regularization Can Mitigate Double Descentcited by 107
- 2020Classification vs regression in overparameterized regimes: Does the loss function matter?cited by 97
- 2020On the Optimal Weighted ℓ2 Regularization in Overparameterized Linear Regressioncited by 97
- 2019A Model of Double Descent for High-dimensional Binary Linear Classificationcited by 81
- 2018A modern maximum-likelihood theory for high-dimensional logistic regressioncited by 79
- 2020Do Wider Neural Networks Really Help Adversarial Robustness?cited by 79
- 2020Precise Tradeoffs in Adversarial Training for Linear Regressioncited by 76
- 2018A Continuous-Time View of Early Stopping for Least Squarescited by 67
- 2020Asymptotics of Ridge (less) Regression under General Source Conditioncited by 61
- 2020The Implicit Regularization of Stochastic Gradient Flow for Least Squarescited by 58
- 2018Optimal ridge penalty for real-world high-dimensional data can be zero or negative due to the implicit ridge regularizationcited by 52
- 2020Precise Statistical Analysis of Classification Accuracies for Adversarial Trainingcited by 49
- 2020How benign is benign overfitting?cited by 40
- 2019The Impact of Regularization on High-dimensional Logistic Regressioncited by 35
- 2020Domain adaptation under structural causal modelscited by 28
- 2021Provable Robustness of Adversarial Training for Learning Halfspaces with Noisecited by 10
- 2021Binary classification with corrupted labelscited by 4
Built on by
Citing papers per year: 2022: 5; 2023: 4; 2024: 1; 2025: 3; 2026: 2.
15 papers.
Sort:
- 2022Hierarchical Shrinkage: improving the accuracy and interpretability of tree-based methodscited by 18
- 2023Beyond the Universal Law of Robustness: Sharper Laws for Random Features and Neural Tangent Kernelscited by 13
- 2022Why adversarial training can hurt robust accuracycited by 12
- 2023Strong inductive biases provably prevent harmless interpolationcited by 9
- 2023Theoretical Analysis of Robust Overfitting for Wide DNNs: An NTK Approachcited by 8
- 2024The Surprising Harmfulness of Benign Overfitting for Adversarial Robustnesscited by 7
- 2022Margin-based sampling in high dimensions: When being active is less efficient than staying passivecited by 3
- 2022Interpolation and Regularization for Causal Learningcited by 2
- 2023On Achieving Optimal Adversarial Test Errorcited by 1
- 2025Towards Better Generalization via Distributional Input Projection Networkcited by 1
- 2025On the Existence of Consistent Adversarial Attacks in High-Dimensional Linear Classificationcited by 1
- 2026On damage of interpolation to adversarial robustness in regressioncited by 1
- 2026Adversarial Robustness of NTK Neural Networks28 Apr 2026
- 2026On damage of interpolation to adversarial robustness in regression22 Jan 2026
- 2025A Ridge Too Far: Correcting Over-Shrinkage via Negative Regularization24 Aug 2025
- 2025On the Existence of Consistent Adversarial Attacks in High-Dimensional Linear Classification14 Jun 2025
- 2025Towards Better Generalization via Distributional Input Projection Network5 Jun 2025
- 2024The Surprising Harmfulness of Benign Overfitting for Adversarial Robustness19 Jan 2024
- 2023Theoretical Analysis of Robust Overfitting for Wide DNNs: An NTK Approach9 Oct 2023
- 2023On Achieving Optimal Adversarial Test Error13 Jun 2023
- 2023Beyond the Universal Law of Robustness: Sharper Laws for Random Features and Neural Tangent Kernels3 Feb 2023
- 2023Strong inductive biases provably prevent harmless interpolation18 Jan 2023
- 2022Margin-based sampling in high dimensions: When being active is less efficient than staying passive1 Dec 2022
- 2022Rethinking Cost-sensitive Classification in Deep Learning via Adversarial Data Augmentation24 Aug 2022
3 more
- 2022Hierarchical Shrinkage: improving the accuracy and interpretability of tree-based methodscited by 18
- 2023Beyond the Universal Law of Robustness: Sharper Laws for Random Features and Neural Tangent Kernelscited by 13
- 2022Why adversarial training can hurt robust accuracycited by 12
- 2023Strong inductive biases provably prevent harmless interpolationcited by 9
- 2023Theoretical Analysis of Robust Overfitting for Wide DNNs: An NTK Approachcited by 8
- 2024The Surprising Harmfulness of Benign Overfitting for Adversarial Robustnesscited by 7
- 2022Margin-based sampling in high dimensions: When being active is less efficient than staying passivecited by 3
- 2022Interpolation and Regularization for Causal Learningcited by 2
- 2023On Achieving Optimal Adversarial Test Errorcited by 1
- 2025Towards Better Generalization via Distributional Input Projection Networkcited by 1
- 2025On the Existence of Consistent Adversarial Attacks in High-Dimensional Linear Classificationcited by 1
- 2026On damage of interpolation to adversarial robustness in regressioncited by 1
12 most cited of 15 All 15 (JSON)
- 2026Adversarial Robustness of NTK Neural Networks28 Apr 2026
- 2026On damage of interpolation to adversarial robustness in regression22 Jan 2026
- 2025A Ridge Too Far: Correcting Over-Shrinkage via Negative Regularization24 Aug 2025
- 2025On the Existence of Consistent Adversarial Attacks in High-Dimensional Linear Classification14 Jun 2025
- 2025Towards Better Generalization via Distributional Input Projection Network5 Jun 2025
- 2024The Surprising Harmfulness of Benign Overfitting for Adversarial Robustness19 Jan 2024
- 2023Theoretical Analysis of Robust Overfitting for Wide DNNs: An NTK Approach9 Oct 2023
- 2023On Achieving Optimal Adversarial Test Error13 Jun 2023
- 2023Beyond the Universal Law of Robustness: Sharper Laws for Random Features and Neural Tangent Kernels3 Feb 2023
- 2023Strong inductive biases provably prevent harmless interpolation18 Jan 2023
- 2022Margin-based sampling in high dimensions: When being active is less efficient than staying passive1 Dec 2022
- 2022Rethinking Cost-sensitive Classification in Deep Learning via Adversarial Data Augmentation24 Aug 2022
12 newest of 15 All 15 (JSON)