mlsanityData to 7 Oct 2026

Distribution-Free Sequential Prediction with Abstentions

arXiv 2602.17918 ↗First posted 20 Feb 2026cs.LG cs.DS stat.MLcited by 1

Not on the map. Why?

Abstract (arXiv)

We study a sequential prediction problem in which an adversary is allowed to inject arbitrarily many adversarial instances in a stream of i.i.d. instances, but at each round, the learner may also abstain from making a prediction without incurring any penalty if the instance was indeed corrupted. This semi-adversarial setting naturally sits between the classical stochastic case with i.i.d. instances for which function classes with finite VC dimension are learnable; and the adversarial case with arbitrary instances, known to be significantly more restrictive. For this problem, Goel et al. (2023) showed that, if the learner knows the distribution μ of clean samples in advance, learning can be achieved for all VC classes without restrictions on adversary corruptions. This is, however, a strong assumption in both theory and practice: a natural question is whether similar learning guarantees can be achieved without prior distributional knowledge, as is standard in classical learning frameworks (e.g., PAC learning or asymptotic consistency) and other non-i.i.d. models (e.g., smoothed online learning). We therefore focus on the distribution-free setting where μ is unknown and propose an algorithm AbstainBoost based on a boosting procedure of weak learners, which guarantees sublinear error for general VC classes in distribution-free abstention learning for oblivious adversaries. These algorithms also enjoy similar guarantees for adaptive adversaries, for structured function classes including linear classifiers. These results are complemented with corresponding lower bounds, which reveal an interesting polynomial trade-off between misclassification error and number of erroneous abstentions.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 19 of its 43 references that are in the map. First posted on arXiv 20 Feb 2026.

Builds on

19 of 43 references.

References · 19

  1. 2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 500
  2. 2019Mean estimation and regression under heavy-tailed distributions--a surveycited by 133
  3. 2019VC Classes are Adversarially Robustly Learnable, but Only Improperlycited by 83
  4. 2021Smoothed Analysis with Adaptive Adversariescited by 57
  5. 2022Smoothed Online Learning is as Easy as Statistical Learningcited by 50
  6. 2020Beyond Perturbations: Learning Guarantees with Arbitrary Adversarial Test Examplescited by 44
  7. 2020Reducing Adversarially Robust Learning to Non-Robust PAC Learningcited by 28
  8. 2021Adversarially Robust Learning with Unknown Perturbation Setscited by 24
  9. 2020Efficiently Learning Adversarially Robust Halfspaces with Noisecited by 22
  10. 2022Robustly-reliable learners under poisoning attackscited by 19
  11. 2022Adversarially Robust Learning: A Generic Minimax Optimal Learner and Characterizationcited by 17
  12. 2021Robust learning under clean-label attackcited by 15
7 more
  1. 2022On Optimal Learning Under Targeted Data Poisoningcited by 14
  2. 2021Learning and Certification under Instance-targeted Poisoningcited by 13
  3. 2024On the Performance of Empirical Risk Minimization with Smoothed Datacited by 13
  4. 20152 Notes on Classes with Vapnik-Chervonenkis Dimension 1cited by 12
  5. 2023Adversarial Resilience in Sequential Prediction via Abstentioncited by 11
  6. 2014Distribution-Independent Reliable Learningcited by 6
  7. 2025Distributionally-Constrained Adversaries in Online Learningcited by 3

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.