|
Abstract : |
In this paper we prove various results about PAC learning in the presence of malicious noise. Our main interest is the sample size behaviour of learning algorithms. We prove the first nontrivial sample complexity lower bound in this model by showing that order of "=\Delta 2 + d=\Delta (up to logarithmic factors) examples are necessary for PAC learning any target class of f0; 1gvalued functions of VC dimension d, where " is the desired accuracy and j = "=(1 + ") \Gamma \Delta the malicious noise rate (it is well known that any nontrivial target class cannot be PAC learned with accuracy " and malicious noise rate j "=(1 + "), this irrespective to sample complexity). We also show that this result cannot be significantly improved in general by presenting efficient learning algorithms for the class of all subsets of d elements and the class of unions of at most d intervals on the real line. This is especially interesting as we can also show that the popular minimum disagreement strategy needs samples of size d"=\Delta 2, hence is not optimal with respect to sample size. We then discuss the use of randomized hypotheses. For these the bound "=(1 + ") on the noise rate is no longer true and is replaced by 2"=(1 + 2"). In fact, we present a generic algorithm using randomized hypotheses which can tolerate noise rates slightly larger than "=(1 + ") while using samples of size d= " as in the noise-free case. Again one observes a quadratic powerlaw (in this case d"=\Delta 2, |
