mlsanityData to 14 Oct 2026

Rethinking Robustness in Machine Learning: A Posterior Agreement Approach

arXiv 2503.16271 ↗First posted 20 Mar 2025cs.LGcited by 1

Not on the map. Why?

Abstract (arXiv)

The robustness of algorithms against covariate shifts is a fundamental problem with critical implications for the deployment of machine learning algorithms in the real world. Current evaluation methods predominantly measure robustness through the lens of standard generalization, relying on task performance measures like accuracy. This approach lacks a theoretical justification and underscores the need for a principled foundation of robustness assessment under distribution shifts. In this work, we set the desiderata for a robustness measure, and we propose a novel principled framework for the robustness assessment problem that directly follows the Posterior Agreement (PA) theory of model validation. Specifically, we extend the PA framework to the covariate shift setting and propose a measure for robustness evaluation. We assess the soundness of our measure in controlled environments and through an empirical robustness analysis in two different covariate shift scenarios: adversarial learning and domain generalization. We illustrate the suitability of PA by evaluating several models under different nature and magnitudes of shift, and proportion of affected observations. The results show that PA offers a reliable analysis of the vulnerabilities in learning algorithms across different shift conditions and provides higher discriminability than accuracy-based measures, while requiring no supervision.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 39 of its 66 references that are in the map. First posted on arXiv 20 Mar 2025.

Builds on

39 of 66 references.

References · 39

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  3. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  4. 2013Intriguing properties of neural networkscited by 5,155
  5. 2016Wide Residual Networkscited by 3,070
  6. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
  7. 2020Shortcut Learning in Deep Neural Networkscited by 1,969
  8. 2016Identity Mappings in Deep Residual Networkscited by 1,965
  9. 2019Invariant Risk Minimizationcited by 1,854
  10. 2016Adversarial examples in the physical worldcited by 1,769
  11. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
  12. 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,375
27 more
  1. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
  2. 2021Generalizing to Unseen Domains: A Survey on Domain Generalizationcited by 766
  3. 2020Fast is better than free: Revisiting adversarial trainingcited by 727
  4. 2020RobustBench: a standardized adversarial robustness benchmarkcited by 661
  5. 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 546
  6. 2019On Evaluating Adversarial Robustnesscited by 447
  7. 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 414
  8. 2017Adversarial Examples: Attacks and Defenses for Deep Learningcited by 351
  9. 2019Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attackcited by 334
  10. 2023Better Diffusion Models Further Improve Adversarial Trainingcited by 208
  11. 2022Improving Out-of-Distribution Robustness via Selective Augmentationcited by 202
  12. 2018Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approachcited by 182
  13. 2021A Fine-Grained Analysis on Distribution Shiftcited by 171
  14. 2022Is Out-of-Distribution Detection Learnable?cited by 109
  15. 2018SparseFool: a few pixels make a big differencecited by 94
  16. 2017Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compressioncited by 87
  17. 2021Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraintscited by 50
  18. 2022Scaling Adversarial Training to Large Perturbation Boundscited by 20
  19. 2022PACS: A Dataset for Physical Audiovisual CommonSense Reasoningcited by 18
  20. 2024AttackBench: Evaluating Gradient-based Attacks for Adversarial Examplescited by 14
  21. 2021Dompteur: Taming Audio Adversarial Examplescited by 10
  22. 2021DiagViB-6: A Diagnostic Benchmark Suite for Vision Models in the Presence of Shortcut and Generalization Opportunitiescited by 10
  23. 2018Gradient Masking Causes CLEVER to Overestimate Adversarial Perturbation Sizecited by 9
  24. 2018A randomized gradient-free attack on ReLU networkscited by 8
  25. 2020Detecting Adversarial Examples for Speech Recognition via Uncertainty Quantificationcited by 7
  26. 2023Hardening RGB-D Object Recognition Systems against Adversarial Patch Attackscited by 2
  27. 2023A Geometrical Approach to Evaluate the Adversarial Robustness of Deep Neural Networkscited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.