mlsanityData to 7 Oct 2026

Robust Decision Aggregation with Adversarial Experts

arXiv 2403.08222 ↗First posted 13 Mar 2024cs.LG cs.AIcited by 1

Not on the map. Why?

Abstract (arXiv)

We consider a robust aggregation problem in the presence of both truthful and adversarial experts. The truthful experts will report their private signals truthfully, while the adversarial experts can report arbitrarily. We assume experts are marginally symmetric in the sense that they share the same common prior and marginal posteriors. The rule maker needs to design an aggregator to predict the true world state from these experts' reports, without knowledge of the underlying information structures or adversarial strategies. We aim to find the optimal aggregator that outputs a forecast minimizing regret under the worst information structure and adversarial strategies. The regret is defined by the difference in expected loss between the aggregator and a benchmark who aggregates optimally given the information structure and reports of truthful experts. We focus on binary states and reports. Under L1 loss, we show that the truncated mean aggregator is optimal. When there are at most k adversaries, this aggregator discards the k lowest and highest reported values and averages the remaining ones. For L2 loss, the optimal aggregators are piecewise linear functions. All the optimalities hold when the ratio of adversaries is bounded above by a value determined by the experts' priors and posteriors. The regret only depends on the ratio of adversaries, not on their total number. For hard aggregators that output a decision, we prove that a random version of the truncated mean is optimal for both L1 and L2. This aggregator randomly follows a remaining value after discarding the k lowest and highest reported values. We extend the hard aggregator to multi-state setting. We evaluate our aggregators numerically in an ensemble learning task. We also obtain negative results for general adversarial aggregation problems under broader information structures and report spaces.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 8 of its 42 references that are in the map. First posted on arXiv 13 Mar 2024.

Builds on

8 of 42 references.

References · 8

  1. 2018Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learningcited by 219
  2. 2020Adversarial Crowdsourcing Through Robust Rank-One Matrix Completioncited by 21
  3. 2016Avoiding Imposters and Delinquents: Adversarial Crowdsourcing and Peer Predictioncited by 15
  4. 2021Are You Smarter Than a Random Expert? The Robust Aggregation of Substitutable Signalscited by 13
  5. 2021Data Poisoning Attacks and Defenses to Crowdsourcing Systemscited by 12
  6. 2023Robust Decision Aggregation with Second-order Informationcited by 7
  7. 2021Truthful Information Elicitation from Hybrid Crowdscited by 2
  8. 2022A Population's Feasible Posterior Beliefscited by 2

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.