The Many Faces of Adversarial Risk
Muni Sreenivas Pydi, Varun Jog

TL;DR
This paper rigorously analyzes various definitions of adversarial risk, introduces new theoretical tools from optimal transport and game theory, and establishes fundamental connections between adversarial robustness, hypothesis testing, and Nash equilibria.
Contribution
It generalizes Strassen's theorem to unbalanced optimal transport, links adversarial robustness to robust hypothesis testing, and proves the existence of Nash equilibria in adversarial settings.
Findings
Generalizes Strassen's theorem for unbalanced optimal transport.
Establishes equivalence between adversarial robustness and robust hypothesis testing.
Proves existence of pure Nash equilibrium in adversarial games.
Abstract
Adversarial risk quantifies the performance of classifiers on adversarially perturbed data. Numerous definitions of adversarial risk -- not all mathematically rigorous and differing subtly in the details -- have appeared in the literature. In this paper, we revisit these definitions, make them rigorous, and critically examine their similarities and differences. Our technical tools derive from optimal transport, robust statistics, functional analysis, and game theory. Our contributions include the following: generalizing Strassen's theorem to the unbalanced optimal transport setting with applications to adversarial classification with unequal priors; showing an equivalence between adversarial robustness and robust hypothesis testing with -Wasserstein uncertainty sets; proving the existence of a pure Nash equilibrium in the two-player game between the adversary and the algorithm;…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
Taxonomy
TopicsNuclear Issues and Defense · Bacillus and Francisella bacterial research
