Enhancing Robustness of Gradient-Boosted Decision Trees through One-Hot Encoding and Regularization
Not on the map. Why?
Abstract (arXiv)
Gradient-boosted decision trees (GBDT) are widely used and highly effective machine learning approach for tabular data modeling. However, their complex structure may lead to low robustness against small covariate perturbation in unseen data. In this study, we apply one-hot encoding to convert a GBDT model into a linear framework, through encoding of each tree leaf to one dummy variable. This allows for the use of linear regression techniques, plus a novel risk decomposition for assessing the robustness of a GBDT model against covariate perturbations. We propose to enhance the robustness of GBDT models by refitting their linear regression forms with L1 or L2 regularization. Theoretical results are obtained about the effect of regularization on the model performance and robustness. It is demonstrated through numerical experiments that the proposed regularization approach can enhance the robustness of the one-hot-encoded GBDT models.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Builds on 12 of its 20 references that are in the map. First posted on arXiv 26 Apr 2023.
Builds on
12 of 20 references.
References · 12
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2016XGBoost: A Scalable Tree Boosting Systemcited by 5,166
- 2013Intriguing properties of neural networkscited by 5,155
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2019Benign Overfitting in Linear Regressioncited by 549
- 2019On Evaluating Adversarial Robustnesscited by 447
- 2018Adversarial Robustness Toolbox v1.0.0cited by 215
- 2020Benign overfitting in ridge regressioncited by 153
- 2020Precise Tradeoffs in Adversarial Training for Linear Regressioncited by 77
- 2022The Implicit Bias of Benign Overfittingcited by 38
- 2019Robustness Verification of Tree-based Modelscited by 33
- 2019Provably Robust Boosted Decision Stumps and Trees against Adversarial Attackscited by 26
Built on by
Citing papers per year: 2023: 2; 2024: 1; 2025: 1.
4 papers.
- 2024RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identificationcited by 91
- 2023GRANDE: Gradient-Based Decision Tree Ensembles for Tabular Datacited by 11
- 2023PiML Toolbox for Interpretable Machine Learning Model Development and Diagnosticscited by 4
- 2025Review on Determining the Number of Communities in Network Datacited by 0
- 2025Review on Determining the Number of Communities in Network Data1 Mar 2025
- 2024RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification22 Apr 2024
- 2023GRANDE: Gradient-Based Decision Tree Ensembles for Tabular Data29 Sep 2023
- 2023PiML Toolbox for Interpretable Machine Learning Model Development and Diagnostics7 May 2023