Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Improving Adversarial Robustness via Unlabeled Out-of-Domain Data   Data augmentation by incorporating cheap unlabeled data from multiple domains
is a powerful way to improve prediction especially when there is limited
labeled data. In this work, we investigate how adversarial robustness can be
enhanced by leveraging out-of-domain unlabeled data. We demonstrate that for
broad classes of distributions and classifiers, there exists a sample
complexity gap between standard and robust classification. We quantify to what
degree this gap can be bridged via leveraging unlabeled samples from a shifted
domain by providing both upper and lower bounds. Moreover, we show settings
where we achieve better adversarial robustness when the unlabeled data come
from a shifted domain rather than the same domain as the labeled data. We also
investigate how to leverage out-of-domain data when some structural
information, such as sparsity, is shared between labeled and unlabeled domains.
Experimentally, we augment two object recognition datasets (CIFAR-10 and SVHN)
with easy to obtain and unlabeled out-of-domain data and demonstrate
substantial improvement in the model's robustness against $\ell_\infty$
adversarial attacks on the original domain.

32
The categories of this paper are: atom-ph
31
The categories of this paper are: ao-sci
17
The categories of this paper are: q-fin
20
The categories of this paper are: acc-phys
34
The categories of this paper are: chem-ph
30
The categories of this paper are: q-alg
36
The categories of this paper are: cmp-lg
7
The categories of this paper are: hep-th
37
The categories of this paper are: supr-con
11
The categories of this paper are: hep-lat
15
The categories of this paper are: nucl-ex
8
The categories of this paper are: hep-ex
10
The categories of this paper are: q-bio
26
The categories of this paper are: bayes-an
4
The categories of this paper are: cond-mat
9
The categories of this paper are: nlin