stat.MLAug 13, 2026

Bagging Robustly Learns VC Classes with Linear Sample Complexity

Authors: Omar Montasser

Organizations: Yale University

Abstract

We revisit the problem of learning predictors robust to adversarial examples at test-time. We prove that VC classes are adversarially robustly learnable with sample complexity linear in the VC dimension dd, providing an exponential improvement over the previous upper bound of Montasser, Hanneke, and Srebro (2019). Remarkably, this result is achieved with a simple improper algorithm that combines the classic heuristic bagging (bootstrap aggregation) of Breiman (1996) with robust empirical risk minimization (RERM). Our algorithm computes RERMs on O(d)O(d^\star) independent bootstrap samples and outputs their majority vote, where dd^\star denotes the dual VC dimension. We complement this result with a lower bound showing that this is unavoidable: in general, any learner in this oracle model requires Ω(d)Ω(d^\star) calls to an RERM oracle, even when given arbitrarily many training examples.

Explore similar work

Aug 6, 2026stat.ML

Optimal Rates for Learning with Monotone Adversaries

A monotone adversary observes an i.i.d. labeled sample and appends a finite number of further examples of its choice, every one of them labeled correctly by the target hypothesis. The learner sees a uniform shuffle of the combined sample and is scored on the original distribution. Every example is correctly labeled, but the insertions depend on the clean sample, so the combined sample is not exchangeable. Larsen, Pabbaraju, and Shetty, who introduced this model, showed that empirical risk minimization attains expected error O((d/n)log(n/d))O((d/n)\log(n/d)) for classes of VC dimension dd, and that every known optimal learner can be pushed away from the Θ(d/n)Θ(d/n) rate, optimal for PAC learning. They asked whether the extra logarithm is an artifact of those particular algorithms or an inherent consequence of the lack of exchangeability. We show that this additional cost is inherent beyond VC dimension one. In the worst case over classes of VC dimension dd and over known finite insertion budgets, the minimax expected error is Θ(1/n)Θ(1/n) at d=1d=1 and Θ((d/n)log(n/d))Θ((d/n)\log(n/d)) for d2d\geq 2. The same rates hold with Littlestone dimension dLd_{\mathrm L} in place of dd, so the clean online-to-batch rate O(dL/n)O(d_{\mathrm L}/n) is unattainable as well. Thus, somewhat counterintuitively, adding correctly labeled examples can make learning harder by a logarithmic factor, even for classes that admit finite mistake bounds in online learning. The dimension-one upper bound is achieved by a simple improper learner whose analysis adapts the leave-one-out argument underlying the one-inclusion graph. All of our lower bounds are elementary and come from a single construction: an explicit class and prior on which two target hypothesis, which differ a point of nonnegligible mass, produce the same sample.
Anay Mehrotra
Jul 29, 2026cs.LG

Tight Generalization Bound for AdaBoost

In this paper we show that the generalization error of AdaBoost is Θ(dln(nγ2/d)nγ2+ln(1/δ)n)Θ\big(\tfrac{d\ln(nγ^{2}/d)}{nγ^2}+\tfrac{\ln(1/δ)}{n}\big), where γγ is the advantage guaranteed by the weak learner, dd is the VC-dimension of the class containing the weak hypotheses, nn is the sample size, and δδ is the confidence parameter. The contribution of this paper is the upper bound; the matching lower bound follows from prior work. The upper bound proof follows by combining the known fact that AdaBoost outputs a voting classifier whose voting function has zero empirical γ/2γ/2-margin loss with what is, to the best of our knowledge, a new margin-based generalization bound for voting classifiers.
Mikael Møller Høgsgaard
Aug 6, 2026cs.LG

An Optimal Agnostic PAC Algorithm

Let H{1,+1}XH\subseteq\{-1,+1\}^X be a class of finite VC dimension d1d\ge1. Writing LL for the binary risk and L=minhHL(h)L^*=\min_{h\in H}L(h), we construct a learner achieving the statistically optimal risk bound: from an i.i.d.\ sample of size nn, for every 0<δ1/20<δ\le 1/2, with probability at least 1δ1-δ, L(h^)L+7108(L(d+log(1/δ))n+d+log(1/δ)n).L(\widehat h) \le L^*+ 7\cdot10^8\left( \sqrt{\frac{L^*(d+\log(1/δ))}{n}} +\frac{d+\log(1/δ)}{n} \right). This settles the sample complexity of agnostic PAC learning up to universal constants at every fixed LL^*, matching the lower bounds of Devroye, Györfi, and Lugosi [A Probabilistic Theory of Pattern Recognition, Springer, 1996].
Markus Engelund Mathiasen, Jian Qian, Nikita Zhivotovskiy