Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Lower Bounds on Adversarial Robustness from Optimal Transport   While progress has been made in understanding the robustness of machine
learning classifiers to test-time adversaries (evasion attacks), fundamental
questions remain unresolved. In this paper, we use optimal transport to
characterize the minimum possible loss in an adversarial classification
scenario. In this setting, an adversary receives a random labeled example from
one of two classes, perturbs the example subject to a neighborhood constraint,
and presents the modified example to the classifier. We define an appropriate
cost function such that the minimum transportation cost between the
distributions of the two classes determines the minimum $0-1$ loss for any
classifier. When the classifier comes from a restricted hypothesis class, the
optimal transportation cost provides a lower bound. We apply our framework to
the case of Gaussian data with norm-bounded adversaries and explicitly show
matching bounds for the classification and transport problems as well as the
optimality of linear classifiers. We also characterize the sample complexity of
learning in this setting, deriving and extending previously known results as a
special case. Finally, we use our framework to study the gap between the
optimal classification performance possible and that currently achieved by
state-of-the-art robustly trained neural networks for datasets of interest,
namely, MNIST, Fashion MNIST and CIFAR-10.

34
The categories of this paper are: chem-ph
28
The categories of this paper are: alg-geom
11
The categories of this paper are: hep-lat
36
The categories of this paper are: cmp-lg
21
The categories of this paper are: adap-org
32
The categories of this paper are: atom-ph
30
The categories of this paper are: q-alg
24
The categories of this paper are: dg-ga
9
The categories of this paper are: nlin
15
The categories of this paper are: nucl-ex
20
The categories of this paper are: acc-phys
14
The categories of this paper are: math-ph
33
The categories of this paper are: plasm-ph
29
The categories of this paper are: funct-an
25
The categories of this paper are: patt-sol
37
The categories of this paper are: supr-con