cs.LGAug 5, 2026

The Sample Complexity of Distributionally Robust PAC Learning under Cressie--Read Divergences

Authors: Elad Aigner-HorevDaniel RosenbergRoi Weiss

Organizations: School of Computer Science and AI Ariel University 40800 Ariel, Israel

Abstract

We study distributionally robust PAC learning for the 00--11-loss, where adversarial perturbations of the data distribution are constrained by a Cressie--Read divergence of order k>1k>1 and radius ρ0ρ\geq 0. For hypothesis classes with VC dimension dd, we establish realizable and agnostic sample-complexity bounds tight up to constant and logarithmic factors, respectively; ordinary empirical risk minimization attains both rates up to logarithmic factors. For target accuracy ε(0,1)\varepsilon\in(0,1) and confidence δ(0,1)δ\in(0,1), their respective orders are

max ⁣{1ε,ρ1k1εk}(d+logδ1)andmax ⁣{1ε2,ρ1k1εk2}(d+logδ1),\max\!\left\{\frac{1}{\varepsilon}, \frac{ρ^{\frac 1{k-1}}}{\varepsilon^{k_\star}} \right\}\cdot(d+\log δ^{-1}) \qquad\text{and}\qquad \max\!\left\{\frac{1}{\varepsilon^2}, \frac{ρ^{\frac1{k-1}}}{\varepsilon^{k_\star\vee 2}} \right\}\cdot(d+\log δ^{-1}),

where k=k/(k1)k_\star={k}/{(k-1)}. For every fixed ρ>0ρ>0, robustness changes the realizable ε\varepsilon-dependence from ε1\varepsilon^{-1} to εk\varepsilon^{-k_\star} as ε0\varepsilon\downarrow0. In the agnostic case, for 1<k<21<k<2, robustness changes the ε\varepsilon-dependence from ε2\varepsilon^{-2} to εk\varepsilon^{-k_\star}, whereas for k2k\geq2 the exponent remains the classical 22, with nontrivial ρρ-dependence. Building on the known scalar reduction of robust 00--11 risk to ordinary classification error, our analysis reveals a scale-sensitive interaction between the statistical estimation of classification error and its amplification by robustness, sharply explaining the transition in the agnostic rate. We extend the previously studied χ2χ^2-divergence case to every Cressie--Read order k>1k>1, close its upper--lower gaps, and recover standard PAC learning rates as ρ0ρ\to0, unlike previous bounds that fail to interpolate correctly in this limit.

Explore similar work

Sep 21, 2026stat.ML

Adversarially Robust PAC Learning with Optimal VC Rates

We study the problem of \emph{adversarially robust} PAC learning. In this framework, the learner observes independent samples from an unknown distribution over X×{0,1}\mathcal{X} \times \{0,1\}, as in classical PAC learning. However, given a perturbation map U:X2X\mathcal{U} : \mathcal{X} \to 2^{\mathcal{X}} known to the learner, the goal is to output, with high probability, a predictor that correctly classifies \emph{every} perturbation zU(x)z \in \mathcal{U}(x) of most future examples (x,y)(x,y) drawn from the same underlying distribution. We determine the \emph{optimal} U\mathcal{U}-independent sample complexity of this problem in both the realizable and agnostic settings. More specifically, for every concept class H\mathcal{H} of VC\operatorname{VC} dimension dd, we prove upper bounds of O(d/ε+log(1/δ)/ε)\mathcal{O} \big( d/ε+ \log(1/δ)/ε\big) in the realizable setting and O(d/ε2+log(1/δ)/ε2)\mathcal{O} \big( d/ε^2 + \log(1/δ)/ε^2 \big) in the agnostic setting, together with an optimal first-order refinement of the latter. These bounds match the corresponding lower bounds for classical PAC learning. Consequently, and perhaps surprisingly, adversarial robustness incurs \emph{no additional} distribution-free statistical cost, uniformly over all perturbation maps. Our bounds improve exponentially on those of [Montasser, Hanneke, and Srebro; COLT '19]. On the technical side, we present short and elementary proofs based on a new algorithmic principle that we call \emph{binomial-bagging}. We believe that binomial-bagging and its analysis may be of independent interest.
Steve Hanneke, Amirreza Shaeiri
Aug 6, 2026cs.LG

An Optimal Agnostic PAC Algorithm

Let H{1,+1}XH\subseteq\{-1,+1\}^X be a class of finite VC dimension d1d\ge1. Writing LL for the binary risk and L=minhHL(h)L^*=\min_{h\in H}L(h), we construct a learner achieving the statistically optimal risk bound: from an i.i.d.\ sample of size nn, for every 0<δ1/20<δ\le 1/2, with probability at least 1δ1-δ, L(h^)L+7108(L(d+log(1/δ))n+d+log(1/δ)n).L(\widehat h) \le L^*+ 7\cdot10^8\left( \sqrt{\frac{L^*(d+\log(1/δ))}{n}} +\frac{d+\log(1/δ)}{n} \right). This settles the sample complexity of agnostic PAC learning up to universal constants at every fixed LL^*, matching the lower bounds of Devroye, Györfi, and Lugosi [A Probabilistic Theory of Pattern Recognition, Springer, 1996].
Markus Engelund Mathiasen, Jian Qian, Nikita Zhivotovskiy
Aug 13, 2026stat.ML

Bagging Robustly Learns VC Classes with Linear Sample Complexity

We revisit the problem of learning predictors robust to adversarial examples at test-time. We prove that VC classes are adversarially robustly learnable with sample complexity linear in the VC dimension dd, providing an exponential improvement over the previous upper bound of Montasser, Hanneke, and Srebro (2019). Remarkably, this result is achieved with a simple improper algorithm that combines the classic heuristic bagging (bootstrap aggregation) of Breiman (1996) with robust empirical risk minimization (RERM). Our algorithm computes RERMs on O(d)O(d^\star) independent bootstrap samples and outputs their majority vote, where dd^\star denotes the dual VC dimension. We complement this result with a lower bound showing that this is unavoidable: in general, any learner in this oracle model requires Ω(d)Ω(d^\star) calls to an RERM oracle, even when given arbitrarily many training examples.
Omar Montasser