math.STMay 23, 2026

On the Sample Complexity of Robust Binary Hypothesis Testing

Authors: Shankar VallinayagamAnkit PensiaVarun Jog

Abstract

We study the sample complexity of robust binary hypothesis testing under three standard contamination models: ε\varepsilon-additive (Huber), ε\varepsilon-subtractive, and ε\varepsilon-total variation (TV), denoted by nHub(ε)n^*_{\mathrm{Hub}}(\varepsilon), nSub(ε)n^*_{\mathrm{Sub}}(\varepsilon), and nTV(ε)n^*_{\mathrm{TV}}(\varepsilon), respectively. For subtractive contamination, we show that least favourable distributions exist and provide explicit formulas for the same, bringing this model in line with the classical Huber and TV models. Next we show that in all three models, sample complexity may be highly unstable in the contamination parameter ε\varepsilon, increasing by polynomial factors even for o(ε)o(\varepsilon) perturbations. Similarly, there may be polynomial factor gaps between the sample complexities when ε\varepsilon is known exactly versus when it is known up to o(ε)o(\varepsilon) error. Despite the instability of the sample complexity in all models, we show that the sample complexities across models are comparable up to constant-factor rescaling of ε\varepsilon. Specifically, for any fixed δ0>0δ_0>0, the following hold for all distributions pp and qq: (i) nHub(ε)nTV(ε)nHub(2ε)n^*_{\mathrm{Hub}}(\varepsilon) \lesssim n^*_{\mathrm{TV}}(\varepsilon) \lesssim n^*_{\mathrm{Hub}}(2\varepsilon), (ii) nSub(ε)nTV(ε)nSub((2+δ0)ε)n^*_{\mathrm{Sub}}(\varepsilon) \lesssim n^*_{\mathrm{TV}}(\varepsilon) \lesssim n^*_{\mathrm{Sub}}((2+δ_0)\varepsilon), and (iii) nSub(ε)nHub(ε)nSub((1+δ0)ε)n^*_{\mathrm{Sub}}(\varepsilon) \lesssim n^*_{\mathrm{Hub}}(\varepsilon) \lesssim n^*_{\mathrm{Sub}}((1+δ_0)\varepsilon), and the scaling constants are tight. Finally, we extend our results to adaptive versions of the contamination models.

Explore similar work

Jun 26, 2026stat.ML

Adversarial Contamination Meets Hard Thresholding: An Iterative Algorithm with Signal Adaptivity and Minimax Optimality

Pervasive data contamination -- stemming from measurement errors, outliers, or adversarial corruption -- has motivated the development of robust statistical methods. In this context, we propose a two-stage Adversarial Contamination-resistant Iterative Hard Thresholding (AC-IHT) algorithm for high-dimensional regression with contamination. Our nonconvex algorithm achieves minimax near-optimal (up to logarithmic terms) estimation by iteratively updating the coefficient vector and the contamination vector with different thresholding scales. We further demonstrate that our AC-IHT estimator is signal-adaptive: under proper signal conditions, it adaptively attains a sharper estimation rate and more accurate support recovery. Moreover, it enjoys the strong oracle property, laying a theoretical foundation for asymptotic inference. Numerical experiments confirm its superior finite-sample performance. Finally, we discuss theoretical extensions of the proposed procedure to generalized linear models and to heavy-tailed noise settings.
Shixiang Liu, Hanming Yang
May 2, 2026stat.ML

Mean Testing under Truncation beyond Gaussian

We characterize the fundamental limits of high-dimensional mean testing under arbitrary truncation, where samples are drawn from the conditional distribution P(S)P(\cdot \mid S) for an unknown truncation set SS that may hide up to an ε\varepsilon-fraction of the probability mass. For distributions with pp-th directional moments of magnitude at most νP,pν_{P,p}, truncation induces a bias of order O(νP,pε11/p)O(ν_{P,p}\varepsilon^{1-1/p}). This bias creates a sharp information-theoretic detectability floor: when the signal αα falls below this threshold, the null and alternative hypotheses are indistinguishable even with infinite data. Above this floor, we prove that a simple second-order test achieving near-optimal sample complexity n=O ⁣(ΣP(α4νP,pε11/p)2d)n = O\!\left(\frac{\|Σ_P\|}{(α-4ν_{P,p}\varepsilon^{1-1/p})^2}\sqrt{d}\right). We further identify a structural escape from this finite-moment bias barrier. Under a directional median regularity assumption, truncation bias improves to linear order O(ε)O(\varepsilon). This reveals an intermediate regime in which estimation requires Θ(d)Θ(d) samples for uniform recovery, while testing recovers the classical Θ(d)Θ(\sqrt d) rate once truncation bias is eliminated. Together, our results provide a unified framework for mean testing under truncation, connecting finite-moment, sub-Gaussian, and median-regular structural regimes.
Yuhao Wang, Roberto Imbuzeiro Oliveira, Themis Gouleakis
Sep 21, 2026stat.ML

Adversarially Robust PAC Learning with Optimal VC Rates

We study the problem of \emph{adversarially robust} PAC learning. In this framework, the learner observes independent samples from an unknown distribution over X×{0,1}\mathcal{X} \times \{0,1\}, as in classical PAC learning. However, given a perturbation map U:X2X\mathcal{U} : \mathcal{X} \to 2^{\mathcal{X}} known to the learner, the goal is to output, with high probability, a predictor that correctly classifies \emph{every} perturbation zU(x)z \in \mathcal{U}(x) of most future examples (x,y)(x,y) drawn from the same underlying distribution. We determine the \emph{optimal} U\mathcal{U}-independent sample complexity of this problem in both the realizable and agnostic settings. More specifically, for every concept class H\mathcal{H} of VC\operatorname{VC} dimension dd, we prove upper bounds of O(d/ε+log(1/δ)/ε)\mathcal{O} \big( d/ε+ \log(1/δ)/ε\big) in the realizable setting and O(d/ε2+log(1/δ)/ε2)\mathcal{O} \big( d/ε^2 + \log(1/δ)/ε^2 \big) in the agnostic setting, together with an optimal first-order refinement of the latter. These bounds match the corresponding lower bounds for classical PAC learning. Consequently, and perhaps surprisingly, adversarial robustness incurs \emph{no additional} distribution-free statistical cost, uniformly over all perturbation maps. Our bounds improve exponentially on those of [Montasser, Hanneke, and Srebro; COLT '19]. On the technical side, we present short and elementary proofs based on a new algorithmic principle that we call \emph{binomial-bagging}. We believe that binomial-bagging and its analysis may be of independent interest.
Steve Hanneke, Amirreza Shaeiri