How can ERM be fooled?

How can ERM be fooled?

🎙 Dr. Eitan Farchi (IBM) 👥 46 📅 January 20, 2022 ⏱ 21 min 👁 11 📄 expert opinion 🧭 2026-08-18
Available in: English (current) Français

Keywords

ERMadversarialdensity functionprobabilitylearning theory

Summary

The video, presented by Dr. Eitan Farchi, addresses the question of whether Empirical Risk Minimization (ERM) can be fooled. It begins by defining ERM as the process of selecting a function from a hypothesis space that minimizes errors on a training set. The speaker then introduces a formal example where an adversary can construct a probability distribution that makes ERM completely fail. The key insight is that if the true labeling function is non-zero only on a finite set of points, and the data distribution is continuous (has a density), then the probability of observing any of those points in a finite sample is zero. Consequently, the training data will contain only zeros, providing no information about the true function. The video concludes that ERM is highly sensitive to the assumptions about the data distribution, and an adversary can exploit this to fool the learning algorithm.

146 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides a clear and rigorous demonstration of a fundamental limitation of ERM. The argument is logically structured: it defines ERM, introduces the concept of density functions, and then constructs a counterexample where the training data is uninformative. The reasoning is mathematically sound and accessible to an audience with basic knowledge of probability. The value lies in highlighting a subtle but important issue in machine learning, which is often overlooked in practical applications. The argumentation is solid, though it could be strengthened by discussing real-world implications or connections to broader learning theory.

Scientific Rigor, Source Quality, Title Accuracy

The video is a lecture without citations or references, so the scientific rigor relies on the internal consistency of the argument. The mathematical reasoning is correct, and the example is well-constructed. The title accurately reflects the content. No external sources are provided, which limits the ability to verify claims or explore further. The presentation is informal but clear, and the lack of references is a minor weakness.

175 words

Title / Content Match

The title accurately reflects the content: the video demonstrates a specific scenario where ERM can be fooled by an adversary.

Quality & Reliability

7/10

The video presents a formal argument about the limitations of Empirical Risk Minimization (ERM) using a clear mathematical example. The reasoning is sound and based on well-established probability theory. However, it is a short lecture without citations or references, and the presentation is informal, which limits its depth and verifiability.

Key Moments

Contribution & Novelties

The video provides a clear and concise demonstration of a known theoretical limitation of ERM, but it does not introduce new research. Its contribution is pedagogical, making the concept accessible.

Pour aller plus loin :

80 words

Radar Profile

The radar profile shows high scores in quality of information and technical level, but lower in quantity of information and global reliability due to lack of sources. This indicates a focused, expert-level explanation with limited breadth.

Reliability 7/10