← Search

Ilias Diakonikolas

70 accepted papers

2026

Efficiently Learning Drifting Halfspaces with Massart Noise

ICML 2026poster

We study the problem of learning a drifting concept in the presence of Massart noise. In this framework, an online learner has access to a history of independent samples whose labels are noisy versions of a target concept that may change from round to round. The goal is to output, in each round, a h…

Cited by 0SourceScholar
2026

Expressivity-Efficiency Tradeoffs for Hybrid Sequence Models

ICML 2026oral

Hybrid sequence models—combining Transformer and state-space model layers—seek to gain the expressive versatility of attention as well as the computational efficiency of state-space model layers. Despite burgeoning interest in hybrid models, we lack a basic understanding of the settings where—and un…

Cited by 0SourceScholar
2026

Sample Complexity Bounds for Robust Mean Estimation with Mean-Shift Contamination

ICML 2026poster

We study the basic task of mean estimation in the presence of mean-shift contamination. In the mean-shift contamination model, an adversary is allowed to replace a small constant fraction of the clean samples by samples drawn from arbitrarily shifted versions of the base distribution. Prior work cha…

Cited by 0SourceScholar
2025

Algorithms and SQ Lower Bounds for Robustly Learning Real-valued Multi-Index Models

NeurIPS 2025spotlight

We study the complexity of learning real-valued Multi-Index Models (MIMs) under the Gaussian distribution. A $K$-MIM is a function $f:\mathbb{R}^d\to \mathbb{R}$ that depends only on the projection of its input onto a $K$-dimensional subspace. We give a general algorithm for PAC learning a broad c…

Cited by 0SourceScholar
2025

Batch List-Decodable Linear Regression via Higher Moments

ICML 2025poster

We study the task of list-decodable linear regression using batches, recently introduced by Das et al. 2023.. In this setting, we are given $m$ batches with each batch containing $n$ points in $\mathbb R^d$. A batch is called clean if the points it contains are i.i.d. samples from an unknown linea…

Cited by 0SourcePDFScholar
2025

Efficient Multivariate Robust Mean Estimation Under Mean-Shift Contamination

ICML 2025poster

We study the algorithmic problem of robust mean estimation of an identity covariance Gaussian in the presence of mean-shift contamination. In this contamination model, we are given a set of points in $\mathbb{R}^d$ generated i.i.d. via the following process. For a parameter $\alpha<1/2$, the $i$-th…

Cited by 0SourcePDFScholar
2025

Information-Computation Tradeoffs for Noiseless Linear Regression with Oblivious Contamination

NeurIPS 2025poster

We study the task of noiseless linear regression under Gaussian covariates in the presence of additive oblivious contamination. Specifically, we are given i.i.d.\ samples from a distribution $(x, y)$ on $\mathbb R^d \times \mathbb R$ with $x \sim \mathcal N(0,I_d)$ and $y = x^\top \beta + z$, wh…

Cited by 0SourceScholar
2025

On Fine-Grained Distinct Element Estimation

ICML 2025poster

We study the problem of distributed distinct element estimation, where $\alpha$ servers each receive a subset of a universe $[n]$ and aim to compute a $(1+\varepsilon)$-approximation to the number of distinct elements using minimal communication. While prior work establishes a worst-case bound of $\…

Cited by 0SourcePDFScholar
2025

On Learning Parallel Pancakes with Mostly Uniform Weights

ICML 2025spotlight

We study the complexity of learning $k$-mixtures of Gaussians ($k$-GMMs) on $\mathbb R^d$. This task is known to have complexity $d^{\Omega(k)}$ in full generality. To circumvent this exponential lower bound on the number of components, research has focused on learning families of GMMs satisfying ad…

Cited by 0SourcePDFScholar
2025

Online Linear Classification with Massart Noise

ICML 2025poster

We study the task of online learning in the presence of Massart noise. Specifically, instead of assuming that the online adversary chooses an arbitrary sequence of labels, we assume that the context $\boldsymbol{x}$ is selected adversarially but the label $y$ presented to the learner disagrees wit…

Cited by 0SourcePDFScholar
2025

Statistical Query Hardness of Multiclass Linear Classification with Random Classification Noise

ICML 2025oral

We study the task of Multiclass Linear Classification (MLC) in the distribution-free PAC model with Random Classification Noise (RCN). Specifically, the learner is given a set of labeled examples $(x, y)$, where $x$ is drawn from an unknown distribution on $R^d$ and the labels are generated by…

Cited by 0SourcePDFScholar
2024

Active Learning of General Halfspaces: Label Queries vs Membership Queries

NeurIPS 2024poster

We study the problem of learning general (i.e., not necessarily homogeneous) halfspaces under the Gaussian distribution on $\mathbb{R}^d$ in the presence of some form of query access. In the classical pool-based active learning model, where the algorithm is allowed to make adaptive label queries…

Cited by 1SourcePDFScholar
2024

Fast Co-Training under Weak Dependence via Stream-Based Active Learning

ICML 2024oral

Co-training is a classical semi-supervised learning method which only requires a small number of labeled examples for learning, under reasonable assumptions. Despite extensive literature on the topic, very few hypothesis classes are known to be provably efficiently learnable via co-training, even un…

Cited by 3SourcePDFScholar
2024

How Does Unlabeled Data Provably Help Out-of-Distribution Detection?

ICLR 2024poster

Using unlabeled data to regularize the machine learning models has demonstrated promise for improving safety and reliability in detecting out-of-distribution (OOD) data. Harnessing the power of unlabeled in-the-wild data is non-trivial due to the heterogeneity of both in-distribution (ID) and OOD da…

2024

Learning a Single Neuron Robustly to Distributional Shifts and Adversarial Label Noise

NeurIPS 2024poster

We study the problem of learning a single neuron with respect to the $L_2^2$-loss in the presence of adversarial distribution shifts, where the labels can be arbitrary, and the goal is to find a "best-fit" function. More precisely, given training samples from a reference distribution $p_0$, the goa…

Cited by 0SourcePDFScholar
2024

Robust Sparse Estimation for Gaussians with Optimal Error under Huber Contamination

ICML 2024poster

We study Gaussian sparse estimation tasks in Huber's contamination model with a focus on mean estimation, PCA, and linear regression. For each of these tasks, we give the first sample and computationally efficient robust estimators with optimal error guarantees, within constant factors. All prior ef…

Cited by 0SourcePDFScholar
2024

Robustly Learning Single-Index Models via Alignment Sharpness

ICML 2024poster

We study the problem of learning Single-Index Models under the $L_2^2$ loss in the agnostic model. We give an efficient learning algorithm, achieving a constant factor approximation to the optimal loss, that succeeds under a range of distributions (including log-concave distributions) and a broad cl…

Cited by 6SourcePDFScholar
2024

Sample and Computationally Efficient Robust Learning of Gaussian Single-Index Models

NeurIPS 2024poster

A single-index model (SIM) is a function of the form $\sigma(\mathbf{w}^{\ast} \cdot \mathbf{x})$, where $\sigma: \mathbb{R} \to \mathbb{R}$ is a known link function and $\mathbf{w}^{\ast}$ is a hidden unit vector. We study the task of learning SIMs in the agnostic (a.k.a. adversarial label noise)…

Cited by 1SourcePDFScholar
2023

A Spectral Algorithm for List-Decodable Covariance Estimation in Relative Frobenius Norm

NeurIPS 2023spotlight

We study the problem of list-decodable Gaussian covariance estimation. Given a multiset $T$ of $n$ points in $\mathbb{R}^d$ such that an unknown $\alpha<1/2$ fraction of points in $T$ are i.i.d. samples from an unknown Gaussian $\mathcal{N}(\mu, \Sigma)$, the goal is to output a list of $O(1/\alpha)…

Cited by 4SourcePDFScholar
2023

Efficient Testable Learning of Halfspaces with Adversarial Label Noise

NeurIPS 2023poster

We give the first polynomial-time algorithm for the testable learning of halfspaces in the presence of adversarial label noise under the Gaussian distribution. In the recently introduced testable learning model, one is required to produce a tester-learner such that if the data passes the tester, t…

Cited by 17SourcePDFScholar
2023

First Order Stochastic Optimization with Oblivious Noise

NeurIPS 2023poster

We initiate the study of stochastic optimization with oblivious noise, broadly generalizing the standard heavy-tailed noise setup. In our setting, in addition to random observation noise, the stochastic gradient may be subject to independent \emph{oblivious noise}, which may not have bounded momen…

Cited by 1SourcePDFScholar
2023

Near-Optimal Algorithms for Gaussians with Huber Contamination: Mean Estimation and Linear Regression

NeurIPS 2023poster

We study the fundamental problems of Gaussian mean estimation and linear regression with Gaussian covariates in the presence of Huber contamination. Our main contribution is the design of the first sample near-optimal and almost linear-time algorithms with optimal error guarantees for both thes…

Cited by 4SourcePDFScholar
2023

Near-Optimal Bounds for Learning Gaussian Halfspaces with Random Classification Noise

NeurIPS 2023poster

We study the problem of learning general (i.e., not necessarily homogeneous) halfspaces with Random Classification Noise under the Gaussian distribution. We establish nearly-matching algorithmic and Statistical Query (SQ) lower bound results revealing a surprising information-computation gap for…

Cited by 2SourcePDFScholar
2023

Near-Optimal Cryptographic Hardness of Agnostically Learning Halfspaces and ReLU Regression under Gaussian Marginals

ICML 2023poster

We study the task of agnostically learning halfspaces under the Gaussian distribution. Specifically, given labeled examples $(\\mathbf{x},y)$ from an unknown distribution on $\\mathbb{R}^n \\times \\{\pm 1 \\}$, whose marginal distribution on $\\mathbf{x}$ is the standard Gaussian and the labels $y$…

Cited by 31SourcePDFScholar
2023

Nearly-Linear Time and Streaming Algorithms for Outlier-Robust PCA

ICML 2023poster

We study principal component analysis (PCA), where given a dataset in $\mathbb R^d$ from a distribution, the task is to find a unit vector $v$ that approximately maximizes the variance of the distribution after being projected along $v$. Despite being a classical task, standard estimators fail drast…

Cited by 10SourcePDFScholar
2023

Robust Second-Order Nonconvex Optimization and Its Application to Low Rank Matrix Sensing

NeurIPS 2023poster

Finding an approximate second-order stationary point (SOSP) is a well-studied and fundamental problem in stochastic nonconvex optimization with many applications in machine learning. However, this problem is poorly understood in the presence of outliers, limiting the use of existing nonconvex algor…

Cited by 3SourcePDFScholar
2023

Robustly Learning a Single Neuron via Sharpness

ICML 2023oral

We study the problem of learning a single neuron with respect to the $L_2^2$-loss in the presence of adversarial label noise. We give an efficient algorithm that, for a broad family of activations including ReLUs, approximates the optimal $L_2^2$-error within a constant factor. Notably, our algorith…

Cited by 9SourcePDFScholar
2023

SQ Lower Bounds for Non-Gaussian Component Analysis with Weaker Assumptions

NeurIPS 2023poster

We study the complexity of Non-Gaussian Component Analysis (NGCA) in the Statistical Query (SQ) model. Prior work developed a methodology to prove SQ lower bounds for NGCA that have been applicable to a wide range of contexts. In particular, it was known that for any univariate distribution $A$ sati…

Cited by 17SourcePDFScholar
2022

Cryptographic Hardness of Learning Halfspaces with Massart Noise

NeurIPS 2022accept

We study the complexity of PAC learning halfspaces in the presence of Massart noise. In this problem, we are given i.i.d. labeled examples $(\mathbf{x}, y) \in \mathbb{R}^N \times \{ \pm 1\}$, where the distribution of $\mathbf{x}$ is arbitrary and the label $y$ is a Massart corruption of $f(\mathbf…

Cited by 26SourcePDFScholar
2022

Hardness of Learning a Single Neuron with Adversarial Label Noise

AISTATS 2022poster

We study the problem of distribution-free learning of a single neuron under adversarial label noise with respect to the squared loss. For a wide range of activation functions, including ReLUs and sigmoids, we prove hardness of learning results in the Statistical Query model and under a well-studied…

Cited by 14SourcePDFScholar
2022

Learning General Halfspaces with Adversarial Label Noise via Online Gradient Descent

ICML 2022spotlight

We study the problem of learning general {—} i.e., not necessarily homogeneous {—} halfspaces with adversarial label noise under the Gaussian distribution. Prior work has provided a sophisticated polynomial-time algorithm for this problem. In this work, we show that the problem can be solved directl…

Cited by 16SourcePDFScholar
2022

List-Decodable Sparse Mean Estimation via Difference-of-Pairs Filtering

NeurIPS 2022accept

We study the problem of list-decodable sparse mean estimation. Specifically, for a parameter $\alpha \in (0, 1/2)$, we are given $m$ points in $\mathbb{R}^n$, $\lfloor \alpha m \rfloor$ of which are i.i.d. samples from a distribution $D$ with unknown $k$-sparse mean $\mu$. No assumptions are made on…

Cited by 15SourcePDFScholar
2022

Nearly-Tight Bounds for Testing Histogram Distributions

NeurIPS 2022accept

We investigate the problem of testing whether a discrete probability distribution over an ordered domain is a histogram on a specified number of bins. One of the most common tools for the succinct approximation of data, $k$-histograms over $[n]$, are probability distributions that are piecewise con…

Cited by 8SourcePDFScholar
2022

Outlier-Robust Sparse Estimation via Non-Convex Optimization

NeurIPS 2022accept

We explore the connection between outlier-robust high-dimensional statistics and non-convex optimization in the presence of sparsity constraints, with a focus on the fundamental tasks of robust sparse mean estimation and robust sparse PCA. We develop novel and simple optimization formulations for th…

2022

Outlier-Robust Sparse Mean Estimation for Heavy-Tailed Distributions

NeurIPS 2022accept

We study the fundamental task of outlier-robust mean estimation for heavy-tailed distributions in the presence of sparsity. Specifically, given a small number of corrupted samples from a high-dimensional heavy-tailed distribution whose mean $\mu$ is guaranteed to be sparse, the goal is to efficient…

Cited by 16SourcePDFScholar
2022

SQ Lower Bounds for Learning Single Neurons with Massart Noise

NeurIPS 2022accept

We study the problem of PAC learning a single neuron in the presence of Massart noise. Specifically, for a known activation function $f: \mathbb{R}\to \mathbb{R}$, the learner is given access to labeled examples $(\mathbf{x}, y) \in \mathbb{R}^d \times \mathbb{R}$, where the marginal distribution of…

Cited by 5SourcePDFScholar
2022

Streaming Algorithms for High-Dimensional Robust Statistics

ICML 2022spotlight

We study high-dimensional robust statistics tasks in the streaming model. A recent line of work obtained computationally efficient algorithms for a range of high-dimensional robust statistics tasks. Unfortunately, all previous algorithms require storing the entire dataset, incurring memory at least…

Cited by 29SourcePDFScholar
2021

Learning Online Algorithms with Distributional Advice

ICML 2021spotlight

We study the problem of designing online algorithms given advice about the input. While prior work had focused on deterministic advice, we only assume distributional access to the instances of interest, and the goal is to learn a competitive algorithm given access to i.i.d. samples. We aim to be com…

Cited by 37SourcePDFScholar
2021

List-Decodable Mean Estimation in Nearly-PCA Time

NeurIPS 2021spotlight

Robust statistics has traditionally focused on designing estimators tolerant to a minority of contaminated data. {\em List-decodable learning}~\cite{CharikarSV17} studies the more challenging regime where only a minority $\tfrac 1 k$ fraction of the dataset, $k \geq 2$, is drawn from the distributio…

Cited by 24SourcePDFScholar
2021

Statistical Query Lower Bounds for List-Decodable Linear Regression

NeurIPS 2021spotlight

We study the problem of list-decodable linear regression, where an adversary can corrupt a majority of the examples. Specifically, we are given a set $T$ of labeled examples $(x, y) \in \mathbb{R}^d \times \mathbb{R}$ and a parameter $0< \alpha <1/2$ such that an $\alpha$-fraction of the points in $…

Cited by 26SourcePDFScholar
2020

Efficiently Learning Adversarially Robust Halfspaces with Noise

ICML 2020poster

We study the problem of learning adversarially robust halfspaces in the distribution-independent setting. In the realizable setting, we provide necessary and sufficient conditions on the adversarial perturbation sets under which halfspaces are efficiently robustly learnable. In the presence of rando…

Cited by 40SourcePDFScholar
2020

High-dimensional Robust Mean Estimation via Gradient Descent

ICML 2020poster

We study the problem of high-dimensional robust mean estimation in the presence of a constant fraction of adversarial outliers. A recent line of work has provided sophisticated polynomial-time algorithms for this problem with dimension-independent error guarantees for a range of natural distribution…

Cited by 44SourcePDFScholar
2020

Near-Optimal SQ Lower Bounds for Agnostically Learning Halfspaces and ReLUs under Gaussian Marginals

NeurIPS 2020poster

We study the fundamental problems of agnostically learning halfspaces and ReLUs under Gaussian marginals. In the former problem, given labeled examples $(\bx, y)$ from an unknown distribution on $\R^d \times \{ \pm 1\}$, whose marginal distribution on $\bx$ is the standard Gaussian and the labels…

Cited by 75SourcePDFScholar
2020

Non-Convex SGD Learns Halfspaces with Adversarial Label Noise

NeurIPS 2020poster

We study the problem of agnostically learning homogeneous halfspaces in the distribution-specific PAC model. For a broad family of structured distributions, including log-concave distributions, we show that non-convex SGD efficiently converges to a solution with misclassification error $O(\opt)+\e…

Cited by 34SourcePDFScholar
2020

Outlier Robust Mean Estimation with Subgaussian Rates via Stability

NeurIPS 2020poster

We study the problem of outlier robust high-dimensional mean estimation under a bounded covariance assumption, and more broadly under bounded low-degree moment assumptions. We consider a standard stability condition from the recent robust statistics literature and prove that, except with exponential…

Cited by 76SourcePDFScholar
2020

The Complexity of Adversarially Robust Proper Learning of Halfspaces with Agnostic Noise

NeurIPS 2020poster

We study the computational complexity of adversarially robust proper learning of halfspaces in the distribution-independent agnostic PAC model, with a focus on $L_p$ perturbations. We give a computationally efficient learning algorithm and a nearly matching computational hardness result for this pro…

Cited by 25SourcePDFScholar
2019

A Polynomial Time Algorithm for Log-Concave Maximum Likelihood via Locally Exponential Families

NeurIPS 2019poster

We consider the problem of computing the maximum likelihood multivariate log-concave distribution for a set of points. Specifically, we present an algorithm which, given $n$ points in $\mathbb{R}^d$ and an accuracy parameter $\eps>0$, runs in time $\poly(n,d,1/\eps),$ and returns a log-concave dist…

Cited by 12SourcePDFScholar
2019

Distribution-Independent PAC Learning of Halfspaces with Massart Noise

NeurIPS 2019oral

We study the problem of {\em distribution-independent} PAC learning of halfspaces in the presence of Massart noise. Specifically, we are given a set of labeled examples $(\bx, y)$ drawn from a distribution $\D$ on $\R^{d+1}$ such that the marginal distribution on the unlabeled points $\bx$ is arb…

Cited by 103SourcePDFScholar
2019

Nearly Tight Bounds for Robust Proper Learning of Halfspaces with a Margin

NeurIPS 2019spotlight

We study the problem of {\em properly} learning large margin halfspaces in the agnostic PAC model. In more detail, we study the complexity of properly learning $d$-dimensional halfspaces on the unit ball within misclassification error $\alpha \cdot \opt_{\gamma} + \eps$, where $\opt_{\gamma}$ is th…

Cited by 23SourcePDFScholar
2019

Outlier-Robust High-Dimensional Sparse Estimation via Iterative Filtering

NeurIPS 2019poster

We study high-dimensional sparse estimation tasks in a robust setting where a constant fraction of the dataset is adversarially corrupted. Specifically, we focus on the fundamental problems of robust sparse mean estimation and robust sparse PCA. We give the first practically viable robust estimators…

2019

Private Testing of Distributions via Sample Permutations

NeurIPS 2019poster

Statistical tests are at the heart of many scientific tasks. To validate their hypothesis, researchers in medical and social sciences use individuals' data. The sensitivity of participants' data requires the design of statistical tests that ensure the privacy of the individuals in the most effici…

Cited by 33SourcePDFScholar
2019

Sever: A Robust Meta-Algorithm for Stochastic Optimization

ICML 2019oral

In high dimensions, most machine learning methods are brittle to even a small fraction of structured outliers. To address this, we introduce a new meta-algorithm that can take in a base learner such as least squares or stochastic gradient descent, and harden the learner to be resistant to outliers.…

2018

Differentially Private Identity and Equivalence Testing of Discrete Distributions

ICML 2018oral

We study the fundamental problems of identity and equivalence testing over a discrete population from random samples. Our goal is to develop efficient testers while guaranteeing differential privacy to the individuals of the population. We provide sample-efficient differentially private testers for…

Cited by 47SourcePDFScholar
2018

Robust Learning of Fixed-Structure Bayesian Networks

NeurIPS 2018poster

We investigate the problem of learning Bayesian networks in a robust model where an $\epsilon$-fraction of the samples are adversarially corrupted. In this work, we study the fully observable discrete case where the structure of the network is given. Even in this basic setting, previous learning a…

Cited by 37SourcePDFScholar
2018

Testing for Families of Distributions via the Fourier Transform

NeurIPS 2018poster

We study the general problem of testing whether an unknown discrete distribution belongs to a specified family of distributions. More specifically, given a distribution family P and sample access to an unknown discrete distribution D , we want to distinguish (with high probability) between the case…

Cited by 6SourcePDFScholar
2017

Being Robust (in High Dimensions) Can Be Practical

ICML 2017poster

Robust estimation is much more challenging in high-dimensions than it is in one-dimension: Most techniques either lead to intractable optimization problems or estimators that can tolerate only a tiny fraction of errors. Recent work in theoretical computer science has shown that, in appropriate distr…

2017

Communication-Efficient Distributed Learning of Discrete Distributions

NeurIPS 2017oral

We initiate a systematic investigation of distribution learning (density estimation) when the data is distributed across multiple servers. The servers must communicate with a referee and the goal is to estimate the underlying distribution with as few bits of communication as possible. We focus on no…

Cited by 49SourcePDFScholar
2015

Differentially Private Learning of Structured Discrete Distributions

NeurIPS 2015poster

We investigate the problem of learning an unknown probability distribution over a discrete population from random samples. Our goal is to design efficient algorithms that simultaneously achieve low error in total variation norm while guaranteeing Differential Privacy to the individuals of the popula…

Cited by 76SourcePDFScholar