{"id":"https://openalex.org/W4391211950","doi":"https://doi.org/10.1109/tit.2026.3702992","title":"The Surprising Harmfulness of Benign Overfitting for Adversarial Robustness","display_name":"The Surprising Harmfulness of Benign Overfitting for Adversarial Robustness","publication_year":2026,"publication_date":"2026-06-12","ids":{"openalex":"https://openalex.org/W4391211950","doi":"https://doi.org/10.1109/tit.2026.3702992"},"language":"en","primary_location":{"id":"doi:10.1109/tit.2026.3702992","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tit.2026.3702992","pdf_url":null,"source":{"id":"https://openalex.org/S4502562","display_name":"IEEE Transactions on Information Theory","issn_l":"0018-9448","issn":["0018-9448","1557-9654"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Theory","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/tit.2026.3702992","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5036205023","display_name":"Yifan Hao","orcid":"https://orcid.org/0009-0002-9823-2573"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yifan Hao","raw_affiliation_strings":["Department of Computer Science, University of Illinois Urbana–Champaign, Champaign, IL, USA"],"raw_orcid":"https://orcid.org/0009-0002-1888-5671","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Illinois Urbana–Champaign, Champaign, IL, USA","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100378754","display_name":"Tong Zhang","orcid":"https://orcid.org/0000-0001-6212-4891"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tong Zhang","raw_affiliation_strings":["Department of Computer Science, University of Illinois Urbana–Champaign, Champaign, IL, USA"],"raw_orcid":"https://orcid.org/0000-0002-5511-2558","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Illinois Urbana–Champaign, Champaign, IL, USA","institution_ids":["https://openalex.org/I157725225"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I157725225"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.00196744,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"72","issue":"8","first_page":"6023","last_page":"6053"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/overfitting","display_name":"Overfitting","score":0.9241392612457275},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7352079749107361},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6630947589874268},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5900810956954956},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5852659940719604},{"id":"https://openalex.org/keywords/estimator","display_name":"Estimator","score":0.5507791638374329},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.47456008195877075},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.4300295412540436},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.41941410303115845},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.3367716073989868},{"id":"https://openalex.org/keywords/econometrics","display_name":"Econometrics","score":0.3248734474182129},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.19751563668251038},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.15654057264328003}],"concepts":[{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.9241392612457275},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7352079749107361},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6630947589874268},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5900810956954956},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5852659940719604},{"id":"https://openalex.org/C185429906","wikidata":"https://www.wikidata.org/wiki/Q1130160","display_name":"Estimator","level":2,"score":0.5507791638374329},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.47456008195877075},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.4300295412540436},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.41941410303115845},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.3367716073989868},{"id":"https://openalex.org/C149782125","wikidata":"https://www.wikidata.org/wiki/Q160039","display_name":"Econometrics","level":1,"score":0.3248734474182129},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.19751563668251038},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.15654057264328003},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tit.2026.3702992","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tit.2026.3702992","pdf_url":null,"source":{"id":"https://openalex.org/S4502562","display_name":"IEEE Transactions on Information Theory","issn_l":"0018-9448","issn":["0018-9448","1557-9654"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Theory","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2401.12236","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2401.12236","pdf_url":"https://arxiv.org/pdf/2401.12236","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},{"id":"doi:10.48550/arxiv.2401.12236","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2401.12236","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1109/tit.2026.3702992","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tit.2026.3702992","pdf_url":null,"source":{"id":"https://openalex.org/S4502562","display_name":"IEEE Transactions on Information Theory","issn_l":"0018-9448","issn":["0018-9448","1557-9654"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Theory","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.49000000953674316}],"awards":[{"id":"https://openalex.org/G1781724745","display_name":null,"funder_award_id":"N000142512318","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4362597605","https://openalex.org/W1574414179","https://openalex.org/W3009056573","https://openalex.org/W4297676672","https://openalex.org/W2922073769","https://openalex.org/W4281702477","https://openalex.org/W2490526372","https://openalex.org/W4376166922","https://openalex.org/W4378510483","https://openalex.org/W4221142204"],"abstract_inverted_index":{"Recent":[0],"empirical":[1,166],"and":[2,45,112],"theoretical":[3,175],"studies":[4],"have":[5],"established":[6],"the":[7,36,46,55,84,97,109,113,134,142,148,178,185],"generalization":[8],"capabilities":[9],"of":[10,54,116,141],"large":[11],"machine":[12],"learning":[13],"models":[14,203],"that":[15,33,122,204],"are":[16,70,205],"trained":[17],"to":[18,42,72,93,202],"(approximately":[19],"or":[20],"exactly)":[21],"fit":[22],"noisy":[23],"data.":[24],"In":[25],"this":[26,60],"work,":[27],"we":[28,102,152],"prove":[29],"a":[30],"surprising":[31],"result":[32,107],"even":[34],"if":[35],"true":[37,186],"model":[38,49,90],"itself":[39],"is":[40,50,191],"robust":[41,192],"adversarial":[43,73,94,194],"examples,":[44],"benignly":[47],"overfitted":[48,198],"benign":[51,61],"in":[52,87,96,168,182],"terms":[53],"\u201cstandard\u201d":[56],"out-of-sample":[57,68],"risk":[58,111,115],"objective,":[59],"overfitting":[62],"process":[63],"can":[64],"be":[65,131],"harmful":[66],"when":[67],"data":[69],"subject":[71],"manipulation.":[74],"More":[75],"specifically,":[76],"our":[77],"main":[78],"results":[79,155],"contain":[80],"two":[81,127],"parts:":[82],"(i)":[83],"min-norm":[85],"estimator":[86],"overparameterized":[88],"linear":[89],"always":[91],"leads":[92],"vulnerability":[95],"\u201cbenign":[98],"overfitting\u201d":[99],"setting;":[100],"(ii)":[101],"verify":[103],"an":[104],"asymptotic":[105],"trade-off":[106],"between":[108],"standard":[110],"\u201cadversarial\u201d":[114],"every":[117],"ridge":[118,143],"regression":[119],"estimator,":[120],"implying":[121],"under":[123,147],"suitable":[124],"conditions":[125],"these":[126],"items":[128],"cannot":[129],"both":[130],"small":[132],"at":[133],"same":[135],"time":[136],"by":[137],"any":[138],"single":[139],"choice":[140],"regularization":[144],"parameter.":[145],"Furthermore,":[146],"lazy":[149],"training":[150],"regime,":[151],"demonstrate":[153],"parallel":[154],"on":[156],"two-layer":[157],"neural":[158,170,199],"tangent":[159],"kernel":[160],"(NTK)":[161],"model,":[162],"which":[163],"align":[164],"with":[165],"observations":[167],"deep":[169],"networks.":[171],"Our":[172],"finding":[173],"provides":[174],"insights":[176],"into":[177],"puzzling":[179],"phenomenon":[180],"observed":[181],"practice,":[183],"where":[184],"target":[187],"function":[188],"(e.g.,":[189],"human)":[190],"against":[193],"attack,":[195],"while":[196],"beginly":[197],"networks":[200],"lead":[201],"not":[206],"robust.":[207]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2024-01-25T00:00:00"}