Understanding the Impact of Adversarial Robustness on Accuracy Disparity
Not on the map. Why?
Abstract (arXiv)
While it has long been empirically observed that adversarial robustness may be at odds with standard accuracy and may have further disparate impacts on different classes, it remains an open question to what extent such observations hold and how the class imbalance plays a role within. In this paper, we attempt to understand this question of accuracy disparity by taking a closer look at linear classifiers under a Gaussian mixture model. We decompose the impact of adversarial robustness into two parts: an inherent effect that will degrade the standard accuracy on all classes due to the robustness constraint, and the other caused by the class imbalance ratio, which will increase the accuracy disparity compared to standard training. Furthermore, we also show that such effects extend beyond the Gaussian mixture model, by generalizing our data model to the general family of stable distributions. More specifically, we demonstrate that while the constraint of adversarial robustness consistently degrades the standard accuracy in the balanced class setting, the class imbalance ratio plays a fundamentally different role in accuracy disparity compared to the Gaussian case, due to the heavy tail of the stable distribution. We additionally perform experiments on both synthetic and real-world datasets to corroborate our theoretical findings. Our empirical results also suggest that the implications may extend to nonlinear models over real-world datasets. Our code is publicly available on GitHub at https://github.com/Accuracy-Disparity/AT-on-AD.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Builds on 28 of its 55 references that are in the map. First posted on arXiv 28 Nov 2022.
Builds on
28 of 55 references.
References · 28
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2013Intriguing properties of neural networkscited by 5,155
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
- 2016Equality of Opportunity in Supervised Learningcited by 2,007
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 953
- 2016Adversarial Machine Learning at Scalecited by 936
- 2018Robustness May Be at Odds with Accuracycited by 880
- 2020RobustBench: a standardized adversarial robustness benchmarkcited by 661
16 more
- 2017A Downsampled Variant of ImageNet as an Alternative to the CIFAR datasetscited by 377
- 2020Attacks Which Do Not Kill Training Make Adversarial Learning Strongercited by 243
- 2020BREEDS: Benchmarks for Subpopulation Shiftcited by 155
- 2020Understanding and Mitigating the Tradeoff Between Robustness and Accuracycited by 149
- 2020To be Robust or to be Fair: Towards Fairness in Adversarial Trainingcited by 137
- 2018Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Modelscited by 135
- 2019Adversarial Training Can Hurt Generalizationcited by 132
- 2021Trustworthy AI: A Computational Perspectivecited by 93
- 2020Fairness Through Robustness: Investigating Robustness Disparity in Deep Learningcited by 56
- 2019Lower Bounds on Adversarial Robustness from Optimal Transportcited by 53
- 2020Robustness May Be at Odds with Fairness: An Empirical Study on Class-wise Accuracycited by 45
- 2020Provable tradeoffs in adversarially robust classificationcited by 40
- 2021Analysis and Applications of Class-wise Robustness in Adversarial Trainingcited by 33
- 2020Sharp Statistical Guarantees for Adversarially Robust Gaussian Classificationcited by 28
- 2020More Data Can Expand the Generalization Gap Between Adversarially Robust and Standard Modelscited by 27
- 2021Understanding and Mitigating Accuracy Disparity in Regressioncited by 17
Built on by
Citing papers per year: 2023: 2; 2024: 6; 2025: 1.
9 papers.
- 2024DAFA: Distance-Aware Fair Adversarial Trainingcited by 11
- 2024Investigating the Impact of Quantization on Adversarial Robustnesscited by 9
- 2024DD-RobustBench: An Adversarial Robustness Benchmark for Dataset Distillationcited by 8
- 2023SoK: Unintended Interactions among Machine Learning Defenses and Riskscited by 6
- 2024Adversarially Robust Feature Learning for Breast Cancer Diagnosiscited by 3
- 2023Distribution-restrained Softmax Loss for the Model Robustnesscited by 2
- 2024Combining Machine Learning Defenses without Conflictscited by 2
- 2024VTruST: Controllable value function based subset selection for Data-Centric Trustworthy AIcited by 0
- 2025TRIX- Trading Adversarial Fairness via Mixed Adversarial Trainingcited by 0
- 2025TRIX- Trading Adversarial Fairness via Mixed Adversarial Training10 Jul 2025
- 2024Combining Machine Learning Defenses without Conflicts14 Nov 2024
- 2024Investigating the Impact of Quantization on Adversarial Robustness8 Apr 2024
- 2024DD-RobustBench: An Adversarial Robustness Benchmark for Dataset Distillation20 Mar 2024
- 2024VTruST: Controllable value function based subset selection for Data-Centric Trustworthy AI8 Mar 2024
- 2024Adversarially Robust Feature Learning for Breast Cancer Diagnosis13 Feb 2024
- 2024DAFA: Distance-Aware Fair Adversarial Training23 Jan 2024
- 2023SoK: Unintended Interactions among Machine Learning Defenses and Risks7 Dec 2023
- 2023Distribution-restrained Softmax Loss for the Model Robustness22 Mar 2023