mlsanityData to 14 Oct 2026

Test-Time Collective Action: Proxy-Based Perturbations for Correcting Algorithmic Harms

arXiv 2605.27689 ↗First posted 26 May 2026cs.LG cs.CRcited by 0

Not on the map. Why?

Abstract (arXiv)

When machine learning systems under-perform for particular subgroups, affected users typically have no way to correct these disparities without relying on platform-level fixes. Existing approaches to algorithmic fairness rely on provider-centric approaches to correct these failures, leaving users with no external lever when faced with harm. Recent work in Algorithmic Collective Action shows that coordinated users can steer an algorithmic system toward a collective goal, but the existing mechanisms require the provider to retrain on the collective's modified data which users may not have control over. We propose Test-Time Collective Action (TTCA), a framework through which a group of users who share query access to the platform, can correct disparities affecting under-served subgroup without participating in the platform's training loop. We implement this through a proxy-based mechanism where the collective pools query access to a black-box API to extract a proxy of the platform, then optimizes a per-class universal perturbation against the proxy. Each member applies this perturbation to their own inputs at submission time, requiring no cooperation from the platform. We empirically evaluate the mechanism on CIFAR-10, CIFAR-100, and FairFace, showing that modestly-sized collectives close most of the subgroup accuracy gap, transfer across architectures (a small proxy can attack a larger platform), and improve worst-group accuracy, equal-opportunity gap, and disparate impact. A query-budget analysis comparing a per-user black-box attack baseline shows that pooling is cheaper than each subgroup member attacking alone. Test-time collective action thus offers corrective intervention to users when platform-side remediation is unavailable or delayed.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 35 of its 45 references that are in the map. First posted on arXiv 26 May 2026.

Builds on

35 of 45 references.

References · 35

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  3. 2013Intriguing properties of neural networkscited by 5,155
  4. 2016Equality of Opportunity in Supervised Learningcited by 2,007
  5. 2016Universal adversarial perturbationscited by 784
  6. 2014Certifying and removing disparate impactcited by 715
  7. 2017Evasion Attacks against Machine Learning at Test Timecited by 689
  8. 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 685
  9. 2016Stealing Machine Learning Models via Prediction APIscited by 619
  10. 2017Adversarial Patchcited by 517
  11. 2020Fairness in Machine Learning: A Surveycited by 370
  12. 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
23 more
  1. 2018Knockoff Nets: Stealing Functionality of Black-Box Modelscited by 292
  2. 2019Simple Black-box Adversarial Attackscited by 251
  3. 2018Multiaccuracy: Black-Box Post-Processing for Fairness in Classificationcited by 222
  4. 2019High Accuracy and High Fidelity Extraction of Neural Networkscited by 214
  5. 2022Sociotechnical Harms of Algorithmic Systems: Scoping a Taxonomy for Harm Reductioncited by 138
  6. 2022Narcissus: A Practical Clean-Label Backdoor Attack with Limited Informationcited by 103
  7. 2018Low Frequency Adversarial Perturbationcited by 80
  8. 2022Fairness-aware Adversarial Perturbation Towards Bias Mitigation for Deployed Deep Modelscited by 47
  9. 2021Data Poisoning Won't Save You From Facial Recognitioncited by 45
  10. 2021RegNet: Self-Regulated Network for Image Classificationcited by 44
  11. 2021Undistillable: Making A Nasty Teacher That CANNOT teach studentscited by 36
  12. 2023Algorithmic Collective Action in Machine Learningcited by 31
  13. 2018POTs: Protective Optimization Technologiescited by 28
  14. 2020Data Leverage: A Framework for Empowering the Public in its Relationship with Technology Companiescited by 26
  15. 2024From Representational Harms to Quality-of-Service Harms: A Case Study on Llama 2 Safety Safeguardscited by 17
  16. 2019Simple iterative method for generating targeted universal adversarial perturbationscited by 14
  17. 2024Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defencescited by 9
  18. 2024Decline Now: A Combinatorial Model for Algorithmic Collective Actioncited by 8
  19. 2020GRAPHITE: Generating Automatic Physical Examples for Machine-Learning Attacks on Computer Vision Systemscited by 7
  20. 2024Understanding Model Ensemble in Transferable Adversarial Attackcited by 7
  21. 2025Algorithmic Collective Action with Two Collectivescited by 7
  22. 2025Crowding Out The Noise: Algorithmic Collective Action Under Differential Privacycited by 4
  23. 2025Minority Collective Action for User-Side Fairnesscited by 3

Built on by

Not cited yet.