NeurIPS 2025poster0 citations

The Cost of Robustness: Tighter Bounds on Parameter Complexity for Robust Memorization in ReLU Nets

Yujun Kim, Chaewon Moon, Chulhee Yun

Abstract

We study the parameter complexity of robust memorization for ReLU networks: the number of parameters required to interpolate any dataset with $\epsilon$-separation between differently labeled points, while ensuring predictions remain consistent within a $\mu$-ball around each training example. We establish upper and lower bounds on the parameter count as a function of the robustness ratio $\rho = \mu / \epsilon$. Unlike prior work, we provide a fine-grained analysis across the entire range $\rho \in (0,1)$ and obtain tighter upper and lower bounds that improve upon existing results. Our findings reveal that the parameter complexity of robust memorization matches that of non-robust memorization when $\rho$ is small, but grows with increasing $\rho$. As a special case, when the input dimension is comparable to or exceeds the dataset size, our bounds become tight (up to logarithmic factors) across the entire range of $\rho$.

Robust memorizationMemorizationAdversarial trainingParameter Complexity
BibTeX
@inproceedings{
kim2025the,
title={The Cost of Robustness: Tighter Bounds on Parameter Complexity for Robust Memorization in Re{LU} Nets},
author={Yujun Kim and Chaewon Moon and Chulhee Yun},
booktitle={The Thirty-ninth Annual Conference on Neural Information Processing Systems},
year={2025},
url={https://openreview.net/forum?id=Jsln9ZyMl4}
}
The Cost of Robustness: Tighter Bounds on Parameter Complexity for Robust Memorization in ReLU Nets · NeurIPS 2025