cs.LGOct 17, 2024

Adaptive and oblivious statistical adversaries are equivalent

Authors: Guy Blanc, Gregory Valiant

Organizations: Stanford

Abstract

We resolve a fundamental question about the ability to perform a statistical task, such as learning, when an adversary corrupts the sample. Such adversaries are specified by the types of corruption they can make and their level of knowledge about the sample. The latter distinguishes between sample-adaptive adversaries which know the contents of the sample when choosing the corruption, and sample-oblivious adversaries, which do not. We prove that for all types of corruptions, sample-adaptive and sample-oblivious adversaries are \emph{equivalent} up to polynomial factors in the sample size. This resolves the main open question introduced by [BLMT22] and further explored in [CHL+23]. Specifically, consider any algorithm AA that solves a statistical task even when a sample-oblivious adversary corrupts its input. We show that there is an algorithm A′A' that solves the same task when the corresponding sample-adaptive adversary corrupts its input. The construction of A′A' is simple and maintains the computational efficiency of AA: It requests a polynomially larger sample than AA uses and then runs AA on a uniformly random subsample.

Explore similar work

CardsList
  1. Adversarially Robust PAC Learning with Optimal VC Rates

    Sep 21, 2026Steve Hanneke, Amirreza ShaeiriBounded AdversaryLearnability

  2. Learning with Monotone Adversarial Corruptions

    Jan 5, 2026Kasper Green Larsen, Chirag Pabbaraju, Abhishek ShettyAdversarial TrainingOptimal Learner

  3. Publicly-Verifiable Certificates for Statistical Algorithms

    Jul 17, 2026Michael Ngo, Michael P. KimZero-Knowledge ProofsCertificates