Skip to content
Preprint

Confusion-Geometry Rebalancing for Long-Tailed Adversarial Training

Aug 2026 · 0 citations · 28 references
Computer Science

TL;DR

A Confusion Geometry Rebalancing method for long tail adversarial training, a plug in framework that leverages directed robust errors as training signals and couples feedback weighted robust optimization with graph guided margin correction, thereby boosting the robustness of vulnerable classes and sharpening the critical boundaries that drive long tailed performance degradation.

Abstract

Adversarial training under long tailed distributions suffers from a dual imbalance: the class imbalance skews the training objective toward head classes, and the adversarial inner maximization may further amplify this bias. Existing methods mitigate this issue by correcting class priors or adapting class wise robust supervision, yet they treat each class in isolation and fail to identify which boundaries drive long tailed collapse. We propose a Confusion Geometry Rebalancing method (CGRm) for long tail adversarial training, a plug in framework that leverages directed robust errors as training signals. CGRm leverages periodic robust evaluations to derive source class loss weights, class wise robust coefficients, and a directed confusion geometry graph. The method then couples feedback weighted robust optimization with graph guided margin correction, thereby boosting the robustness of vulnerable classes and sharpening the critical boundaries that drive long tailed performance degradation. Experiments on long tailed benchmarks show that CGRm achieves consistent robust performance gains over existing methods, with ablations validating the contribution of each component. We provide the code in the supplement.

View source

Similar papers

Aug 2026

Balancing clean accuracy and gradient robustness via mask-guided mixup and adaptive label refinement

A robustness-oriented training framework that integrates Mask-Guided Adversarial Mixup (MGAM) and Adaptive Timescale Exponential Moving Average (AT-EMA) that provides a practical data-regularization strategy for improving training stability in adversarial learning is proposed.

Guo Niu, Huanlin Mo, Shengjun Deng et al. · 0 citations
#machine learning Preprint Aug 2026

RL-FAT: Reinforcement Learning for Fair Adversarial Training

RL-FAT is proposed, a reinforcement-learning-inspired fair adversarial training framework that uses policy-gradient based feedback from adversarial predictions to improve adversarial robustness while promoting a more balanced robustness distribution across classes.

Tejaswini Medi, Levan Mikeladze, Margret Keuper · 0 citations
Open access Sep 2026

DWAT: Density-Weighted Adversarial Training for Robustness Beyond the Training Perturbation Budget

Density-Weighted Adversarial Training is presented, a plug-in framework that spreads training over a set of sampled ϵ-balls and reweights each candidate adversarial example by a Gaussian density of its distance from the benign sample, and it is proved that the population objective upper-bounds the worst-case adversaria...

Jie-Ying Huang, Rui-Ming Zhu, Jia Xu et al. · 0 citations
Conference Open access Sep 2026

Parameter-Efficient Dual-Loss Adaptation with Logit Divergence: A Unified Approach for Adversarial Example Detection and Robust Inference

D3Adapter is presented, a threat-aware framework that unifies adversarial example detection (AED) and robust inference and scalability across datasets with varying numbers of classes is studied, showing that unified detection and robust inference can be achieved with predictable overhead proportional to the number of a...

Zi-Rui Fu, Marco Donato · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.