paper-with-me

홈 › Papers

The Geometry of Over-parameterized Regression and Adversarial Perturbations

2021-03-25 · Jason W. Rocks, Pankaj Mehta

Classical regression has a simple geometric description in terms of a projection of the training labels onto the column space of the design matrix. However, for over-parameterized models -- where the number of fit parameters is large enough to perfectly fit the training data -- this picture becomes uninformative. Here, we present an alternative geometric interpretation of regression that applies to both under- and over-parameterized models. Unlike the classical picture which takes place in the space of training labels, our new picture resides in the space of input features. This new feature-based perspective provides a natural geometric interpretation of the double-descent phenomenon in the context of bias and variance, explaining why it can occur even in the absence of label noise. Furthermore, we show that adversarial perturbations -- small perturbations to the input features that result in large changes in label values -- are a generic feature of biased models, arising from the underlying geometry. We demonstrate these ideas by analyzing three minimal models for over-parameterized linear least squares regression: without basis functions (input features equal model features) and with linear or nonlinear basis functions (two-layer neural networks with linear or nonlinear activation functions, respectively).

📄 PDF Abstract BibTeX arXiv:2103.14108

Code (0)

등록된 구현이 없습니다.

Tasks

regression

Similar Papers 제목 키워드 기반

Benign Overfitting in Adversarially Robust Linear Classification

2021-12-31 · Jinghui Chen, Yuan Cao, Quanquan Gu

"Benign overfitting", where classifiers memorize noisy training data yet still achieve a good generalization performance, has drawn great attention in the machine learning community. To explain this surprising phenomenon…

Classification

Surprises in adversarially-trained linear regression

2022-05-25 · Antônio H. Ribeiro, Dave Zachariah, Thomas B. Schön

State-of-the-art machine learning models can be vulnerable to very small input perturbations that are adversarially constructed. Adversarial training is an effective approach to defend against such examples. It is formul…

regression

Classification and Adversarial examples in an Overparameterized Linear Model: A Signal Processing Perspective

2021-09-27 · Adhyyan Narang, Vidya Muthukumar, Anant Sahai

State-of-the-art deep learning classifiers are heavily overparameterized with respect to the amount of training examples and observed to generalize well on "clean" data, but be highly susceptible to infinitesmal adversar…

Regularization properties of adversarially-trained linear regression

2023-10-16 · NeurIPS 2023 11 · Antônio H. Ribeiro, Dave Zachariah, Francis Bach, Thomas B. Schön

State-of-the-art machine learning models can be vulnerable to very small input perturbations that are adversarially constructed. Adversarial training is an effective approach to defend against it. Formulated as a min-max…

regression

Adaptive versus Standard Descent Methods and Robustness Against Adversarial Examples

2019-11-09 · Marc Khoury

Adversarial examples are a pervasive phenomenon of machine learning models where seemingly imperceptible perturbations to the input lead to misclassifications for otherwise statistically accurate models. In this paper we…