We provide recovery guarantees for compressible signals that have been corrupted with noise and extend the framework introduced in \cite{bafna2018thwarting} to defend neural networks against ℓ0-norm, ℓ2-norm, and ℓ∞-norm attacks. Our results are general as they can be applied to most unitary tr…
A new PCA method using Tℓ1-norm outperforms existing methods.
problem Outliers and noise sensitivity in classical PCA.
method PCA based on Tℓ1-norm maximization. result The method outperforms PCA-ℓp, ℓpSPCA, and PCA in numerical experiments. In this paper, we propose ℓp-norm regularized models to seek near-optimal sparse portfolios. These sparse solutions reduce the complexity of portfolio implementation and management. Theoretical results are established to guarantee the sparsity of the second-order KKT points of the ℓp-norm regularized models…
Paper finds a fast method for a matrix norm proximal operator.
problem Optimizing mixed ℓ1,∞ matrix norms efficiently. method Closed-form computation using soft-thresholding, iterative algorithm for thresholds.
result Mixed ℓ1,∞ prox can be computed in closed form. Signal estimation problems with smoothness and sparsity priors can be naturally modeled as quadratic optimization with ℓ0-"norm" constraints. Since such problems are non-convex and hard-to-solve, the standard approach is, instead, to tackle their convex surrogates based on ℓ1-norm relaxations. In this paper…
AdamW optimizes a constrained loss with ℓ∞ norm constraint.
problem Understanding the optimization behavior of AdamW with ℓ∞ norm constraint. method Analyzing AdamW as a smoothed version of SignGD and connecting it to Frank-Wolfe optimization.
result AdamW implicitly performs constrained optimization with ℓ∞ norm constraint. Generalizes inequality for complete manifolds involving homology classes.
problem Volume and simplicial volume inequality for closed manifolds.
method Extends inequality to ℓ1-norm of homology classes on complete manifolds. result Inequality involving critical exponent and mass of homology classes.
The paper studies the minimum ℓ₁-norm interpolator's risk behavior in over-parameterized settings.
problem Understanding the risk behavior of minimum ℓ₁-norm interpolators in high-dimensional settings.
method Exact characterization of the risk behavior through a system of two non-linear equations.
result Observation of a multi-descent phenomenon in the generalization risk of the minimum ℓ₁-norm interpolator.
This paper tackles robustness of ensemble stumps and trees under general ℓ_p norm perturbations.
problem The vulnerability of ensemble stumps and trees to small input perturbations under the ℓ_∞ norm.
method Developed dynamic programming algorithms for robustness verification and certified defense under general ℓ_p norm perturbations.
result First certified defense method for ensemble stumps and trees under ℓ_p norm perturbations.
Advances robust principal component analysis with transformed ℓ1 regularization.
problem Recovering low-rank structures from noisy, partially observed data corrupted by sparse outliers.
method Proposes transformed ℓ1 (TL1) regularization to improve approximations of rank and ℓ0 functional.
result Achieves higher accuracy in estimating low-rank and sparse components compared to classical convex models, especially under non-uniform sampling schemes.
State-of-the-art subspace clustering methods are based on expressing each data point as a linear combination of other data points while regularizing the matrix of coefficients with ℓ1, ℓ2 or nuclear norms. ℓ1 regularization is guaranteed to give a subspace-preserving affinity (i.e., there are no conne…
CNN layers with large norms are still robust to adversarial attacks.
problem Understanding the relationship between layer norms and adversarial robustness in CNNs.
method Theoretical analysis of ℓ1 and ℓ∞ norms, norm decay method, adversarial training frameworks. result Adversarially robust CNNs can have comparable or larger layer norms than non-adversarially robust ones.
Paper tackles low-rank matrix recovery with column ℓ2,0-norm regularization.
problem Low-rank matrix recovery problems with column sparsity constraints.
method Developed alternating majorization-minimization (AMM) methods with extrapolation and hybrid AMM.
result Global convergence analysis and superior performance in matrix completion problems.
In many applications, high-dimensional data points can be well represented by low-dimensional subspaces. To identify the subspaces, it is important to capture a global and local structure of the data which is achieved by imposing low-rank and sparseness constraints on the data representation matrix. In low-rank sparse …
This paper assesses Gaussian and Exponential mechanisms for certifying adversarial robustness.
problem Certifying adversarial robustness using randomized smoothing mechanisms.
method Proposes a generic framework to assess the appropriateness of randomized smoothing mechanisms.
result Gaussian mechanism is an appropriate option for certifying both ℓ2-norm and ℓ∞-norm robustness. In compressed sensing, in order to recover a sparse or nearly sparse vector from possibly noisy measurements, the most popular approach is ℓ1-norm minimization. Upper bounds for the ℓ2- norm of the error between the true and estimated vectors are given in [1] and reviewed in [2], while bounds for the $\ell_…
New algorithm solves ℓ0-norm constrained multilinear logistic regression for tensor data.
problem Non-convex and nonsmooth ℓ0-norm constraints in multilinear logistic regression. method APALM+ method for globally convergent optimization. result APALM+ ensures convergence to a first-order critical point. The paper proposes a new method for dictionary learning using ℓp-norm maximization.
problem Complete dictionary learning problem in signal processing and data analytics.
method The paper investigates ℓp-norm maximization approaches for complete dictionary learning, proving global maximizers are close to the true dictionary and developing an efficient algorithm based on the generalized power method. result The ℓp-based approaches are more efficient and robust than conventional methods, with p=3 performing best. Feature hashing and other random projection schemes are commonly used to reduce the dimensionality of feature vectors. The goal is to efficiently project a high-dimensional feature vector living in Rn into a much lower-dimensional space Rm, while approximately preserving Euclidean norm. These sc…
We give improved algorithms for the ℓp-regression problem, minx∥x∥p such that Ax=b, for all p∈(1,2)∪(2,∞). Our algorithms obtain a high accuracy solution in O~p(m2p+∣p−2∣∣p−2∣)≤O~p(m31) iterations, where each iteration requires s…
New method for factor analysis using nuclear and ℓ0 norms.
problem Finding a low-rank plus sparse decomposition from noisy covariance matrix.
method Formulated an optimization problem with nuclear norm, ℓ0 norm, and KL divergence. Used alternating minimization algorithm. result Algorithm effectively decomposes covariance matrices in synthetic and real datasets.
Adversarial training is a principled approach for training robust neural networks. Despite of tremendous successes in practice, its theoretical properties still remain largely unexplored. In this paper, we provide new theoretical insights of gradient descent based adversarial training by studying its computational prop…
The paper tackles multi-armed bandits with vector losses, focusing on minimizing the ℓ∞-norm of relative losses.
problem Minimizing the ℓ∞-norm of relative losses in multi-armed bandits with multiple losses. method Defines relative loss vector, derives lower bounds, and provides matching algorithms for both fixed-confidence best-arm identification and regret minimization.
result Derives problem-dependent sample complexity lower bound and matching algorithms for fixed-confidence best-arm identification.
Paper develops algorithms for sparse linear regression with generalized elastic net penalty.
problem Sparse linear regression with robust penalty for high-dimensional data.
method Iterative Reweighted Framework based on ADMM and PMM with SNN.
result Efficient algorithms provide superior performance in both simulated and real data.
We study the robustness properties of ℓ1 norm minimization for the classical linear regression problem with a given design matrix and contamination restricted to the dependent variable. We perform a fine error analysis of the ℓ1 estimator for measurements errors consisting of outliers coupled with noise. We…
Uniformly finite homology is a coarse homology theory, defined via chains that satisfy a uniform boundedness condition. By construction, uniformly finite homology carries a canonical ℓ∞-semi-norm. We show that, for uniformly discrete spaces of bounded geometry, this semi-norm on uniformly finite homology in …
A data filtering method for cluster analysis is proposed, based on minimizing a least squares function with a weighted ℓ0-norm penalty. To overcome the discontinuity of the objective function, smooth non-convex functions are employed to approximate the ℓ0-norm. The convergence of the global minimum points o…
This work improves robustness guarantees for neural networks using low rank representations.
problem Certified robustness to adversarial perturbations in neural networks.
method Low rank representations to provide improved robustness guarantees.
result Improved robustness guarantees for ℓ∞ perturbations using natural low rank representations. Paper refines cross-lingual word embeddings using Manhattan norm.
problem Sensitivity of ℓ2 norm loss function to outliers in CLWEs. method Post-processing step using ℓ1 norm to improve CLWEs. result The ℓ1 refinement substantially outperforms state-of-the-art baselines. The paper proposes a novel MKL approach for OCC using ℓp-norm constraints.
problem Addressing the MKL problem for one-class classification.
method A min-max saddle point Lagrangian optimisation problem is formulated and solved efficiently.
result The proposed method outperforms baselines and other algorithms on various data sets.
Proposes an efficient method for sparse index tracking with ℓ0-norm constraints.
problem Constructing a sparse portfolio to track a financial index.
method Formulates a new problem using ℓ0-norm constraints, develops an efficient algorithm based on primal-dual splitting. result Demonstrates effectiveness through experiments on S&P500 and Russell3000 datasets.
We discuss the problem of adaptive discrete-time signal denoising in the situation where the signal to be recovered admits a "linear oracle" -- an unknown linear estimate that takes the form of convolution of observations with a time-invariant filter. It was shown by Juditsky and Nemirovski (2009) that when the $\ell_2…
Proposes a new method for joint sample and feature selection in multi-view data.
problem Cannot detect latent subsets of samples and remove outliers.
method Weighted Sparse Partial Least Squares (ℓ∞/ℓ0-wsPLS) method for joint sample and feature selection. result Developed globally convergent algorithm and iterative algorithms for multi-view data fusion.
An elementary proof found for the double bubble problem in a specific norm.
problem Finding the shapes that minimize perimeter for given volumes in a specific norm.
method Direct comparison to a small family of parameterized sets for analysis.
result Existence of minimizing sets for any volume ratio parameter.
Study tightens bounds for interpolating noisy data using minimum l1-norm.
problem Predicting noisy data with minimum l1-norm interpolation.
method Provided matching upper and lower bounds for prediction error.
result Tight consistency up to negligible terms for d≫n. Unified analysis of parameter norms in overparameterized linear models, revealing scaling laws and thresholds.
problem Understanding the scaling of parameter norms in overparameterized linear models.
method Simple dual-ray analysis revealing competition between signal spike and bulk of null coordinates.
result Unified closed-form predictions for parameter norm scaling, including elbow and threshold laws.
Novel framework improves randomized smoothing for various norms.
problem Developing robust defenses against adversarial attacks.
method Proposed a novel framework for devising and analyzing randomized smoothing schemes.
result Significantly improved certified accuracy in ℓ1 on standard datasets.
We establish a theoretical link between adversarial training and operator norm regularization for deep neural networks. Specifically, we prove that ℓp-norm constrained projected gradient ascent based adversarial training with an ℓq-norm loss on the logits of clean and perturbed inputs is equivalent to data-…
We study the column subset selection problem with respect to the entrywise ℓ1-norm loss. It is known that in the worst case, to obtain a good rank-k approximation to a matrix, one needs an arbitrarily large nΩ(1) number of columns to obtain a (1+ε)-approximation to the best entrywise ℓ1-norm low ra…
Algorithm reduces regret in online learning with varying norms.
problem Online convex optimization with changing norms.
method Adaptive online learning algorithm that adjusts to varying norms without tuning.
result Achieves improved regret bounds for full-matrix AdaGrad.
We show how to turn any classifier that classifies well under Gaussian noise into a new classifier that is certifiably robust to adversarial perturbations under the ℓ2 norm. This "randomized smoothing" technique has been proposed recently in the literature, but existing guarantees are loose. We prove a tight robu…
In this paper, we study the problem of estimating the covariance matrix under differential privacy, where the underlying covariance matrix is assumed to be sparse and of high dimensions. We propose a new method, called DP-Thresholding, to achieve a non-trivial ℓ2-norm based error bound, which is significantly bet…
We simplify Thurston norm computation for 2-bridge link complements.
problem Understanding the complexity of Thurston norm unit balls in 3-manifolds.
method Utilized Floyd and Hatcher's surface description and integral class minimization.
result Thurston norm unit balls of 2-bridge link complements have at most 8 faces.
This paper tackles the problem of defending a neural network against adversarial attacks crafted with different norms (in particular ℓ∞ and ℓ2 bounded adversarial examples). It has been observed that defense mechanisms designed to protect against one type of attacks often offer poor performance against…
Semantify-NN verifies neural network robustness against semantic perturbations.
problem Verifying robustness of neural networks against semantic adversarial attacks.
method Inserting semantic perturbation layers (SP-layers) into neural networks to verify robustness.
result Semantify-NN significantly improves robustness verification performance over ℓp-norm-based methods. Improved bounds for discrete probability distribution estimation under the ℓ∞ norm.
problem Estimating discrete probability distributions under the ℓ∞ norm with improved bounds.
method Minimax bounds in expectation and high-probability tail bounds.
result Resolved open questions posed in Kontorovich and Painsky (JMLR, 2025), including a fully empirical tightest risk bound and identifying the worst-case extremal distribution.
We consider the empirical risk minimization problem for linear supervised learning, with regularization by structured sparsity-inducing norms. These are defined as sums of Euclidean norms on certain subsets of variables, extending the usual ℓ1-norm and the group ℓ1-norm by allowing the subsets to overlap. T…
We propose ℓ1 norm regularized quadratic surface support vector machine models for binary classification in supervised learning. We establish their desired theoretical properties, including the existence and uniqueness of the optimal solution, reduction to the standard SVMs over (almost) linearly separable data s…