A Law of Robustness beyond Isoperimetry
Not on the map. Why?
Abstract (arXiv)
We study the robust interpolation problem of arbitrary data distributions supported on a bounded space and propose a two-fold law of robustness. Robust interpolation refers to the problem of interpolating n noisy training data points in ℝd by a Lipschitz function. Although this problem has been well understood when the samples are drawn from an isoperimetry distribution, much remains unknown concerning its performance under generic or even the worst-case distributions. We prove a Lipschitzness lower bound Omega(√n/p) of the interpolating neural network with p parameters on arbitrary data distributions. With this result, we validate the law of robustness conjecture in prior work by Bubeck, Li, and Nagaraj on two-layer neural networks with polynomial weights. We then extend our result to arbitrary interpolating approximators and prove a Lipschitzness lower bound Omega(n1/d) for robust interpolation. Our results demonstrate a two-fold law of robustness: i) we show the potential benefit of overparametrization for smooth data interpolation when n=poly(d), and ii) we disprove the potential existence of an O(1)-Lipschitz robust interpolating function when n=exp(ω(d)).
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 20 of its 40 references that are in the map. First posted on arXiv 23 Feb 2022.
Builds on
20 of 40 references.
References · 20
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2021Pervasive Label Errors in Test Sets Destabilize Machine Learning Benchmarkscited by 388
- 2018Adversarially Robust Generalization Requires More Datacited by 318
- 2018Certified Adversarial Robustness with Additive Noisecited by 178
- 2021A Universal Law of Robustness via Isoperimetrycited by 150
- 2020Randomized Smoothing of All Shapes and Sizescited by 146
- 2018Rademacher Complexity for Adversarially Robust Generalizationcited by 132
- 2019VC Classes are Adversarially Robustly Learnable, but Only Improperlycited by 83
8 more
- 2019Convergence of Adversarial Training in Overparametrized Neural Networkscited by 58
- 2020Curse of Dimensionality on Randomized Smoothing for Certifiable Robustnesscited by 56
- 2020A law of robustness for two-layers neural networkscited by 54
- 2019Lower Bounds on Adversarial Robustness from Optimal Transportcited by 52
- 2020Provable tradeoffs in adversarially robust classificationcited by 39
- 2020Random Smoothing Might be Unable to Certify ℓ_∞ Robustness for High-Dimensional Imagescited by 35
- 2020Sharp Statistical Guarantees for Adversarially Robust Gaussian Classificationcited by 27
- 2018PAC-learning in the presence of evasion adversariescited by 23
Built on by
Citing papers per year: 2023: 2; 2024: 4; 2025: 0; 2026: 3.
9 papers.
- 2023A Resilient and Accessible Distribution-Preserving Watermark for Large Language Modelscited by 47
- 2024A Watermark for Order-Agnostic Language Modelscited by 14
- 2024De-mark: Watermark Removal in Large Language Modelscited by 11
- 2023Solving a Class of Non-Convex Minimax Optimization in Federated Learningcited by 10
- 2024Distortion-free Watermarks are not Truly Distortion-free under Watermark Key Collisionscited by 10
- 2024A direct proof of a unified law of robustness for Bregman divergence lossescited by 4
- 2026On damage of interpolation to adversarial robustness in regressioncited by 1
- 2026Does Order Matter : Connecting The Law of Robustness to Robust Generalizationcited by 1
- 2026A law of robustness for two-layer neural networks with arbitrary weightscited by 0
- 2026A law of robustness for two-layer neural networks with arbitrary weights8 Jul 2026
- 2026Does Order Matter : Connecting The Law of Robustness to Robust Generalization24 Feb 2026
- 2026On damage of interpolation to adversarial robustness in regression22 Jan 2026
- 2024De-mark: Watermark Removal in Large Language Models17 Oct 2024
- 2024A Watermark for Order-Agnostic Language Models17 Oct 2024
- 2024Distortion-free Watermarks are not Truly Distortion-free under Watermark Key Collisions2 Jun 2024
- 2024A direct proof of a unified law of robustness for Bregman divergence losses26 May 2024
- 2023A Resilient and Accessible Distribution-Preserving Watermark for Large Language Models11 Oct 2023
- 2023Solving a Class of Non-Convex Minimax Optimization in Federated Learning5 Oct 2023