mlsanityData to 14 Oct 2026

Understanding the Impact of Adversarial Robustness on Accuracy Disparity

arXiv 2211.15762 ↗First posted 28 Nov 2022cs.LG stat.MLcited by 9

Not on the map. Why?

Abstract (arXiv)

While it has long been empirically observed that adversarial robustness may be at odds with standard accuracy and may have further disparate impacts on different classes, it remains an open question to what extent such observations hold and how the class imbalance plays a role within. In this paper, we attempt to understand this question of accuracy disparity by taking a closer look at linear classifiers under a Gaussian mixture model. We decompose the impact of adversarial robustness into two parts: an inherent effect that will degrade the standard accuracy on all classes due to the robustness constraint, and the other caused by the class imbalance ratio, which will increase the accuracy disparity compared to standard training. Furthermore, we also show that such effects extend beyond the Gaussian mixture model, by generalizing our data model to the general family of stable distributions. More specifically, we demonstrate that while the constraint of adversarial robustness consistently degrades the standard accuracy in the balanced class setting, the class imbalance ratio plays a fundamentally different role in accuracy disparity compared to the Gaussian case, due to the heavy tail of the stable distribution. We additionally perform experiments on both synthetic and real-world datasets to corroborate our theoretical findings. Our empirical results also suggest that the implications may extend to nonlinear models over real-world datasets. Our code is publicly available on GitHub at https://github.com/Accuracy-Disparity/AT-on-AD.

Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Builds on 28 of its 55 references that are in the map. First posted on arXiv 28 Nov 2022.

Builds on

28 of 55 references.

References · 28

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2014Adam: A Method for Stochastic Optimizationcited by 37,240
  3. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
  4. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  5. 2013Intriguing properties of neural networkscited by 5,155
  6. 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
  7. 2016Equality of Opportunity in Supervised Learningcited by 2,007
  8. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
  9. 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 953
  10. 2016Adversarial Machine Learning at Scalecited by 936
  11. 2018Robustness May Be at Odds with Accuracycited by 880
  12. 2020RobustBench: a standardized adversarial robustness benchmarkcited by 661
16 more
  1. 2017A Downsampled Variant of ImageNet as an Alternative to the CIFAR datasetscited by 377
  2. 2020Attacks Which Do Not Kill Training Make Adversarial Learning Strongercited by 243
  3. 2020BREEDS: Benchmarks for Subpopulation Shiftcited by 155
  4. 2020Understanding and Mitigating the Tradeoff Between Robustness and Accuracycited by 149
  5. 2020To be Robust or to be Fair: Towards Fairness in Adversarial Trainingcited by 137
  6. 2018Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Modelscited by 135
  7. 2019Adversarial Training Can Hurt Generalizationcited by 132
  8. 2021Trustworthy AI: A Computational Perspectivecited by 93
  9. 2020Fairness Through Robustness: Investigating Robustness Disparity in Deep Learningcited by 56
  10. 2019Lower Bounds on Adversarial Robustness from Optimal Transportcited by 53
  11. 2020Robustness May Be at Odds with Fairness: An Empirical Study on Class-wise Accuracycited by 45
  12. 2020Provable tradeoffs in adversarially robust classificationcited by 40
  13. 2021Analysis and Applications of Class-wise Robustness in Adversarial Trainingcited by 33
  14. 2020Sharp Statistical Guarantees for Adversarially Robust Gaussian Classificationcited by 28
  15. 2020More Data Can Expand the Generalization Gap Between Adversarially Robust and Standard Modelscited by 27
  16. 2021Understanding and Mitigating Accuracy Disparity in Regressioncited by 17

Built on by

Cited by year

Citing papers per year: 2023: 2; 2024: 6; 2025: 1.

9 papers.