A Jointly Efficient and Near-Optimal Algorithm for Heteroskedastic Generalized Linear Bandits with Adversarial Corruptions
summary
The gist
The gist A Jointly Efficient and Optimal Algorithm for Heteroskedastic Generalized Linear Bandits with Adversarial Corruptions proposes HCW-GLB-OMD, an algorithm that simultaneously tackles
In short
The HCW-GLB-OMD algorithm addresses heteroskedastic generalized linear bandits facing adversarial corruptions. It combines online mirror descent with Hessian-based confidence weights to achieve instance-wise minimax optimality. This provides a robust framework for sequential decision-making when rewards follow complex models subject to adaptive manipulations.
Key concepts
- Generalized Linear Bandits (GLBs)
- GLBs are a type of bandit problem where the expected reward for an arm depends on the context through a generalized linear model. The reward follows a distribution defined by an exponential link function, making it suitable for modeling diverse real-world scenarios where outcomes are not simple averages.
- Adversarial Corruption
- This refers to an adaptive adversary that can manipulate the observed rewards by adding noise or corruption, constrained by a budget. The learner must develop a strategy robust enough to estimate the true underlying model despite these deliberate, time-varying manipulations.
- Online Mirror Descent (OMD)
- OMD is an online optimization technique used to update parameters sequentially without needing all data at once. In this context, it is used to maintain an estimator ($ heta_t$) that adapts quickly while ensuring the confidence weights remain analyzable and the algorithm remains computationally efficient.
- Hessian-based Confidence Weights
- These weights assign importance to different directions in parameter space based on local curvature (the Hessian). High curvature or high dispersion in a specific direction leads to lower confidence, causing the algorithm to downweight observations from those uncertain areas.
Terminology used across episodes
This episode discusses
- A Jointly Efficient and Near-Optimal Algorithm for Heteroskedastic Generalized Linear Bandits with Adversarial Corruptions · Paper Radio
- An algorithm with nearly optimal pseudo-regret for both stochastic and adversarial bandits
- On the Performance of Thompson Sampling on Logistic Bandits
- LLM Misalignment via Adversarial RLHF Platforms
- Foundations of Reinforcement Learning and Interactive Decision Making · Paper Radio
- Adapting to Misspecification in Contextual Bandits
- Confidence Estimation via Sequential Likelihood Mixing
- Cost-Minimized Label-Flipping Poisoning Attack to LLM Alignment
- Stochastic bandits robust to adversarial corruptions
- Model-based Reinforcement Learning and the Eluder Dimension
- Linear Contextual Bandits with Adversarial Corruptions
The paper
A Jointly Efficient and Near-Optimal Algorithm for Heteroskedastic Generalized Linear Bandits with Adversarial Corruptions · Read on arXiv
Sanghwa Kim, Junghyun Lee, Se-Young Yun Kim
Graduate School of AI, KAIST
We consider heteroskedastic generalized linear bandits (GLBs) with adversarial corruptions and propose HCW-GLB-OMD, a simple algorithm that combines an online mirror descent (OMD)-based estimator with Hessian-based confidence weights. Although both components are well studied, establishing guarantees for the combined algorithm requires a nontrivial analysis. We establish a corruption-robust confidence sequence using technical tools not required in prior analyses, including a weighted likelihood supermartingale and a self-bounding argument. For the regret analysis, we derive a new Hessian potential lemma to handle the interaction between adversarial corruption and adaptive confidence weighting. For self-concordant GLMs, we prove a high-probability regret bound of (d sqrt sum t g(τ t) μ t, + d squared g κ+ d(1+κ)(C 1)), where μ t, is the slope of μ at the optimal arm at time t, g(τ t) is the observed dispersion, g= t g(τ t), κ is the worst-case inverse slope of μ, and C is the corruption budget. The algorithm attains this bound with one OMD update per round and O(d 2) storage. We complement this guarantee with matching lower bounds for the leading sqrt T term and, up to κ, the dC corruption term.
Transcript
Introduction to the show: ident: AI Radio. Generated commentary on the latest Artificial Intelligence papers.
Tom: Hi, I'm Tom.
Jane: And I'm Jane, here with Lu, Meng and our in-house large language model, Lalam.
Tom: We're looking at the paper: "A Jointly Efficient and Near-Optimal Algorithm for Heteroskedastic Generalized Linear Bandits with Adversarial Corruptions".
Jane: Here's the gist of the paper. The gist A Jointly Efficient and Optimal Algorithm for Heteroskedastic Generalized Linear Bandits with Adversarial Corruptions proposes HCW-GLB-OMD, an algorithm that simultaneously tackles heteroskedastic GLBs with adversarial corruptions to achieve instance-wise minimax optimality.
Tom: This is important because it provides a unified framework for sequential decision making under uncertainty in complex real-world scenarios where rewards follow generalized linear models and are subject to adaptive adversarial manipulations.
Jane: Problem Setting The problem involves generalized linear bandits (GLBs), where the expected reward for an arm xt is given by E
rtxt; θ⋆: = µ(⟨xt, θ⋆⟩) with a known inverse link function µ and an unknown parameter θ⋆ in R d The learner receives a potentially time-varying contextual arm-set Xt ⊂ R d (which can be adversarial), selects an action xt ∈ Xt, and observes a stochastic reward rt ∼ GLM(· xt, τt; θ⋆), where the probability density is dp(r x, τt; θ⋆) ∝ exp r⟨x, θ⋆⟩ − m(⟨x, θ⋆⟩) g(τt)-1 dν (1) The only unknown to the learner is theta⋆ ∈ R d and the others are known: g: R -> R>0 is the dispersion function controlling the variability; dν is an appropriate base measure (e.g., Lebesgue or counting); and m: R -> R is the log-partition function satisfying Assumption 1.
Tom: Assumption 1 states that m(·) is three-times differentiable and convex We adopt several standard assumptions from the GLB literature (Lee et al., 2024a; Russac et al., 2021) Denoting X
T: := S t∈
T: Xt, Assumption 2 states that X
T: ⊆ X ≜ B d(1) and θ⋆ ∈ Θ ≜ B d(S) for a known S ∈ (0,∞) Assumption 3 states that there exists Lµ ∈ (0, ∞) and Rs ∈
0, ∞) such that for all (x, θ) ∈ X[T: × Θ, µ˙(⟨x, θ⟩) ≤ Lµ and µ¨(⟨x, θ⟩) ≤ Rsµ˙(⟨x, θ⟩) After observing xt and rt, the adaptive adversary then chooses a corruption level ct ∈ R subject to a corruption budget P tct ≤ C, and reveals only the corrupted reward r˜t = rt + ct to the learner The goal of the learner is to minimize the cumulative pseudo-regret: Reg(T):= X T t=1 µ(⟨xt,⋆, θ⋆⟩) − X T t=1 µ(⟨xt, θ⋆⟩), where xt,⋆ ≜ arg max x∈Xt µ(⟨x, θ⋆⟩) Our Algorithm: HCW-GLB-OMD The algorithm is designed under two principles: first, the algorithm downweights observations from highly uncertain directions.
Paper summary: Tom: So, wrapping up on "A Jointly Efficient and Near-Optimal Algorithm for Heteroskedastic Generalized Linear Bandits with Adversarial Corruptions". The authors propose HCW-GLB-OMD.
Jane: They show this method simultaneously handles the heteroskedastic nature of the rewards and the threat of adversarial manipulations by using online mirror descent combined with Hessian confidence weights.
Lu: The main implication is that we get a corruption-robust regret bound that depends on time, dimension d, and those dispersion functions, which is tighter than what’s typically achieved without accounting for corruption or heteroskedasticity.
Meng: From a deployment standpoint, it suggests a way to keep the model stable against adaptive attacks while maintaining reasonable computational overhead per step.
Tom: The authors prove this bound using technical tools like a weighted likelihood supermartingale and a self-bounding argument, which are new for prior analyses in this area.
Jane: It means we have a more rigorous framework for sequential decision making when the underlying model parameters are unknown and the data stream is potentially malicious.
Lu: The work provides that high-probability regret bound of (d sqrt sum t g(tau t) mu t, + d squared g kappa+ d(g + kappa)C) <ref:2602.10971#pg1>.
Tom: And they matched this with lower bounds, showing this is near-optimal performance for this class of problems. It’s a solid result based on rigorous analysis.
Conclusion: Tom: So we’re wrapping up on this paper about heteroskedastic generalized linear bandits and adversarial corruptions by the authors of HCW-GLB-OMD.
Jane: Basically, they developed an algorithm that tackles two tricky problems at once—the reward variance changing over time, and someone actively trying to trick the system.
Lu: They used a combination of online mirror descent for the updates and Hessian based confidence weights to keep things stable against those attacks.
Meng: From where I stand on deployment, the key is that this whole thing runs with just one update per round, which keeps the computational cost manageable.
Lalam: The main result is a regret bound that handles both the uncertainty from heteroskedasticity and the corruption budget C.
Tom: That bound looks pretty solid—it's (d sqrt sum t g(tau t) mu t, + d squared g kappa+ d(g + kappa)C.
Jane: What this means in plain language is that if your rewards are messy, and someone is trying to mess with the data stream, you still get a predictable performance guarantee.
Lu: They established a corruption-robust confidence sequence using tools like a weighted likelihood supermartingale which was pretty novel for this setup.
Meng: The caveat I see is that the complexity of that analysis means applying it in practice needs careful tuning because those technical requirements are quite demanding to implement.
Tom: So the authors proved they can get near-optimal performance, matching lower bounds for both the standard uncertainty term and the corruption term dC.
Jane: It really shows how important it is to think about these combined factors—variance and attack budget—when you're building sequential decision systems in complex environments.
Lu: This kind of joint efficiency is what we need when we move beyond simple bandits into more realistic, messy applications where data quality isn't guaranteed.
Tom: It sets a new baseline for how robust these learners can be when they face both inherent noise and malicious interference simultaneously.
More episodes
- 2507.03949-POSID: Target-Task-Unsupervised Person-Attribute Extraction from Heterogeneous Public-Safety Text
- 2508.21256-CrossTL: Hub-Based Translation of GPU Programs and the Preservation of Source Rules
- 2509.03526-Enhancing Speech Large Language Models through Reinforced Behavior Alignment
- 2509.15476-Evaluating Multimodal Large Language Models on Spoken Sarcasm Detection
- 2509.25063-Learning from Convenience Samples: Fine-Tuning LLMs to Predict Voting Choices from Biased Survey Samples
- 2510.07167-Reasoning for Hierarchical Text Classification: The Case of Patents
- 2511.09966-REAP: Enhancing RAG with Recursive Evaluation and Adaptive Planning for Multi-Hop Question Answering
- 2601.21476-Thinking Seeds: Restarting On-Policy RL from the Model's Own Past Reasoning States
- 2602.08945-GitSearch: Enhancing Community Notes Generation with Gap-Informed Targeted Search
- 2602.20759-Overton Pluralistic Reinforcement Learning for Large Language Models