<?xml-model href='http://www.tei-c.org/release/xml/tei/custom/schema/relaxng/tei_all.rng' schematypens='http://relaxng.org/ns/structure/1.0'?><TEI xmlns="http://www.tei-c.org/ns/1.0">
	<teiHeader>
		<fileDesc>
			<titleStmt><title level='a'>Popular decision tree algorithms are provably noise tolerant</title></titleStmt>
			<publicationStmt>
				<publisher></publisher>
				<date>2022</date>
			</publicationStmt>
			<sourceDesc>
				<bibl> 
					<idno type="par_id">10339736</idno>
					<idno type="doi"></idno>
					<title level='j'>International Conference on Machine Learning (ICML 2022)</title>
<idno></idno>
<biblScope unit="volume"></biblScope>
<biblScope unit="issue"></biblScope>					

					<author>G. Blanc</author><author>J. Lange</author><author>A. Malik</author><author>L. Tan</author>
				</bibl>
			</sourceDesc>
		</fileDesc>
		<profileDesc>
			<abstract><ab><![CDATA[Using the framework of boosting, we prove that all impurity-based decision tree learning algorithms, including the classic ID3, C4.5, and CART, are highly noise tolerant. Our guarantees hold under the strongest noise model of nasty noise, and we provide near-matching upper and lower bounds on the allowable noise rate. We further show that these algorithms, which are simple and have long been central to everyday machine learning, enjoy provable guarantees in the noisy setting that are unmatched by existing algorithms in the theoretical literature on decision tree learning. Taken together, our results add to an ongoing line of research that seeks to place the empirical success of these practical decision tree algorithms on firm theoretical footing.]]></ab></abstract>
		</profileDesc>
	</teiHeader>
	<text><body xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xlink="http://www.w3.org/1999/xlink">
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="1.">Introduction</head><p>Decision trees have been central to machine learning since its early days. They give a simple way to represent a dataset in a hierarchical and logical manner, and they are perhaps the most canonical example of an intepretable model. They are also quick to evaluate, with evaluation time scaling with the depth of the tree, a quantity that is typically exponentially smaller than the overall number of nodes. Classic decision tree learning algorithms such as ID3 <ref type="bibr">(Quinlan, 1986)</ref>, C4.5 <ref type="bibr">(Quinlan, 1993)</ref>, and CART <ref type="bibr">(Breiman et al., 1984)</ref>, as well as tree-based ensemble methods such as random forests <ref type="bibr">(Breiman, 2001)</ref> and XGBoost <ref type="bibr">(Chen &amp; Guestrin, 2016)</ref>, are therefore standard techniques in the modern machine learning toolkit.</p><p>Impurity-based algorithms are a broad class that captures ID3, C4.5, CART, and indeed essentially all decision tree Proceedings of the 39 th International Conference on Machine Learning, Baltimore, Maryland, USA, PMLR 162, 2022. Copyright 2022 by the author(s). algorithms used in practice. These algorithms build a binary decision tree for a labeled dataset S in a greedy top-down fashion. Each algorithm A G is defined by an impurity function G : [0, 1] &#8594; [0, 1] and a class H of allowable splitting functions. The root of the tree built by A G corresponds to the split of S into S 0 and S 1 by a function h &#8712; H that maximizes the purity gain with respect to G. The left and right subtrees are built by recursing on S 0 and S 1 respectively. We elaborate on this framework in the body of the paper, mentioning for now that the standard algorithms ID3, CART, and C4.5 can all be cast within this framework: ID3 and C4.5 use the binary entropy function G(p) = H 2 (p) and the associated purity gain is commonly called information gain, whereas CART uses the Gini impurity function G(p) = 4p(1 -p).</p><p>Prior work on provable performance guarantees. Motivated by the empirical success of impurity-based decision tree algorithms, a fruitful and ongoing line of work has focused on establishing provable guarantees on their performance in a variety of models and settings <ref type="bibr">(Kearns &amp; Mansour, 1996;</ref><ref type="bibr">Kearns, 1996;</ref><ref type="bibr">Dietterich et al., 1996;</ref><ref type="bibr">Fiat &amp; Pechyony, 2004;</ref><ref type="bibr">Lee, 2009;</ref><ref type="bibr">Blanc et al., 2020b;</ref><ref type="bibr">a;</ref><ref type="bibr">Brutzkus et al., 2019;</ref><ref type="bibr">2020;</ref><ref type="bibr">Blanc et al., 2021a)</ref>.</p><p>However, these existing results either only hold in the noiseless setting or require strong and stylized assumptions that limit their practical relevance. For example, the recent work of <ref type="bibr">Blanc et al. (2020a)</ref> provides guarantees under the assumptions that examples are distributed according to a product distribution, that noise only affects the labels and not the features (i.e. agnostic noise <ref type="bibr">(Haussler, 1992;</ref><ref type="bibr">Kearns et al., 1994)</ref>), and that the corrupted labels are monotone in the features.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="1.1.">Our contributions</head><p>Using the framework of boosting, we prove that all impuritybased decision tree algorithms are highly noise tolerant in a fully general setting: our results apply to arbitrary distributions over features and labels, and we consider the strongest noise model, allowing for adversarial corruptions of both features and labels (i.e. the nasty noise model of <ref type="bibr">Bshouty et al. (2002)</ref>, also known as strong contamination). Equivalently, we give the first formal guarantees on the robustness of impurity-based decision tree algorithms to distributional shifts; we elaborate on this perspective in the body of the paper. We further provide near-matching upper and lower bounds on the allowable noise rate, showing that our analysis is essentially optimal.</p><p>Lastly, specializing this result to the setting of product distributions over features, we show that these algorithms enjoy provable guarantees in the noisy setting that are unmatched by existing algorithms in the sizeable theoretical literature on decision tree learning. Most of these algorithms were developed after the invention of ID3, C4.5, and CART in the 1980s, and are more complicated and much less used in practice.</p><p>In more detail, our first result is the following: Theorem 1.1 (Impurity-based algorithms are noise-tolerant boosting algorithms; see Theorem 3.1 for formal version). For all impurity functions G and distributions D over features and labels, w.h.p. over the draw of a sample S from D, if A G is trained on an &#951;-nasty-noise corruption S of S where &#951; &#8804; O(&#949;&#947;), as long as the internal nodes of the tree are &#947;-advantage hypotheses, growing the tree to size exp(O(1/&#947; 2 &#949; 2 )) achieves error &#8804; &#949;.</p><p>In one of the first papers to study impurity-based decision tree algorithms from a theoretical perspective, <ref type="bibr">Kearns &amp; Mansour (1996)</ref> showed that they can be viewed as boosting algorithms. Theorem 1.1 generalizes these results of <ref type="bibr">Kearns &amp; Mansour (1996)</ref> to the setting of adversarial noise and shows that these algorithms are in fact highly noise-tolerant boosting algorithms.</p><p>Optimality of Theorem 1.1. Next, we show that the quantitative parameters of Theorem 1.1 are essentially optimal. First, even in the noiseless setting it can be seen that there are target functions for which the tree needs to be grown to size exp(&#8486;(1/&#947; 2 )) to achieve high accuracy; this was already observed in <ref type="bibr">Kearns &amp; Mansour (1996);</ref><ref type="bibr">Freund (1995)</ref>. Second, we prove that the guarantees of Theorem 1.1 cannot hold for noise rates &#951; &#8805; &#937;(&#949;&#947;), even under strong feature and distributional assumptions: Theorem 1.2 (Near-matching lower bound on noise rate; see Theorem 4.1 for formal version). Let the feature space be X = {&#177;1} d and &#951; &#8805; &#937;(&#949;&#947;). There is a distribution D whose marginal over X is uniform, such that for all impurity functions G, w.h.p. over the draw of a sample S from D, there is an &#951;-nasty-noise corruption S of S such that if A G is trained on S, even if all the internal nodes of the tree are &#947;-advantage hypotheses, the tree has to be grown to size 2 &#8486;(d) in order to achieve error &#8804; &#949;.</p><p>A weaker lower bound of &#951; &#8805; &#8486;( &#8730; &#947;) for constant &#949; follows from the work of <ref type="bibr">Dachman-Soled et al. (2015)</ref>. Theorem 1.2 improves this to the near-optimal &#951; &#8805; &#937;(&#949;&#947;). A key ingredient in our proof is the celebrated Kahn-Kalai-Linial theorem <ref type="bibr">(Kahn et al., 1988)</ref> from discrete Fourier analysis. We contrast the dimension-independent bound, exp(O(1/&#947; 2 &#949; 2 )), on the size of tree in Theorem 1.1 with the 2 &#8486;(d) lower bound in Theorem 1.2.</p><p>Improving on the theoretical state of the art. Specializing Theorem 1.1 to the setting of product distributions over binary features, we further show the following: Theorem 1.3 (Learning monotone decision trees in the presence of nasty noise; see Theorem 5.4 for formal version).</p><p>For any product distribution over {&#177;1} d , impurity-based decision tree algorithms learn size-s monotone decision trees in the presence of nasty noise in poly(d)</p><p>This problem of learning decision trees in the setting of product distributions has been intensively studied in learning theory <ref type="bibr">(Hancock, 1993;</ref><ref type="bibr">Bshouty, 1993;</ref><ref type="bibr">Kushilevitz &amp; Mansour, 1993;</ref><ref type="bibr">Blum et al., 1994;</ref><ref type="bibr">Jackson &amp; Servedio, 2006;</ref><ref type="bibr">O'Donnell &amp; Servedio, 2007;</ref><ref type="bibr">Gopalan et al., 2008;</ref><ref type="bibr">Lee, 2009;</ref><ref type="bibr">Kalai et al., 2009;</ref><ref type="bibr">Hazan et al., 2018;</ref><ref type="bibr">Chen &amp; Moitra, 2019;</ref><ref type="bibr">Brutzkus et al., 2020;</ref><ref type="bibr">Blanc et al., 2020b;</ref><ref type="bibr">2021b)</ref>. Many real-world learning scenarios are naturally monotone in nature, and relatedly, monotonicity is a commonly studied assumption in learning theory.</p><p>Prior to our work, the only algorithms provably resilient to nasty noise run in time d O(log s) <ref type="bibr">(Linial et al., 1993;</ref><ref type="bibr">Kalai et al., 2008a;</ref><ref type="bibr">Blanc et al., 2021c)</ref>, which is only poly(d) for constant s. These algorithms do not resemble the impurity-based algorithms used in practice. Theorem 1.3 therefore gives the first poly(d)-time algorithm for any s = &#969; d (1); our running time remains poly(d) for s as large as 2 O( &#8730; log d) . For the weaker model of agnostic noise, recent work of <ref type="bibr">(Blanc et al., 2020a)</ref> gives a poly(d)&#8226;s O(log s) time algorithm.</p><p>We discuss other related work in Appendix A.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="2.">Preliminaries</head><p>Notation. We use boldface (e.g. x &#8764; D) to denote random variables. We consider the binary classification setting where we have a distribution D X over an arbitrary domain X and a (randomised) classification function D Y =1|X : X &#8594; [0, 1]. Together, these define a distribution D over X &#215; {0, 1}. The goal of a learning algorithm is to use i.i.d. samples (x, y) &#8764; D to construct a hypothesis T : X &#8594; {0, 1} that achieves low error on D, where error is defined as:</p><p>(1)</p><p>We also define &#181;(D) := Pr D [y = 1], the bias of D towards the 1-label, and &#949;(D) := min{&#181;(D), 1 -&#181;(D)} to be the error of predicting the majority label on D.</p><p>Decision tree hypotheses. We consider binary decision trees T : X &#8594; {0, 1} whose internal nodes v are labeled by functions h v : X &#8594; {0, 1} from a class H of allowable splitting functions. The most standard class of splitting functions is the set of thresholds of a single feature, h(x) = 1[x i &#8805; &#952;], though our guarantees apply to any arbitrary class H. Each instance x &#8712; X follows a unique root-to-leaf path in T : at any internal node v, it follows either the left or right branch depending on the result of h v (x), until a leaf is reached. The set of leaves &#8712; leaves(T ) therefore form a partition of X . We write w D ( ) to denote the probability that x &#8764; D X reaches and we write D to denote D conditioned on x reaching . We write &#8764; (T, D) to denote the draw of a random leaf where each leaf &#8712; leaves(T ) is given weight w D ( ).</p><p>The prediction at a leaf is then taken to be the majority label of points that reach that leaf, i.e. 1[&#181;(D ) &#8805;<ref type="foot">foot_0</ref> 2 ]. The error of T on D is therefore given by the sum of the error at each leaf incurred by predicting the majority label, weighted by the probability of reaching that leaf:</p><p>We will need the notion of feature influences in the context of binary features:</p><p>X be a production distribution over {&#177;1} d . For i &#8712; [d], the influence of feature i on f , denoted as Inf i (f ) is given by the quantity 2 Pr x&#8764;D X ,b&#8764;D (i)</p><p>, where x i=b rerandomises the i-th bit of x with a random sample from D (i) X .</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="2.1.">Impurity-based decision tree learning algorithms</head><p>Essentially almost all decision tree learning algorithms used in practice, including the classic and popular ID3, C4.5, and CART, learn decision trees greedily in a top-down manner, using an impurity function as a measure of progress. (introduced and analyzed in <ref type="bibr">(Kearns &amp; Mansour, 1996)</ref>).</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head>Definition 2.2 (Impurity function). An impurity function</head><p>For this paper, we will focus on G(p) = 4p(1 -p) for simplicity, but our results hold generally for all impurity functions that have a second derivative bounded away from 0 (see Remark C.1 in appendix).</p><p>Impurity-based decision tree learning algorithms are parameterized by an impurity function G and a class H of allowable splitting functions. For a tree T , leaf , and label function h &#8712; H, we denote T ,h to be the extension of T that replaces the leaf with an internal node that splits on h. At every step, the algorithm loops through all possible leaves and labelling functions h &#8712; H, 1 looking for a potential split that will result in the largest reduction G(T ) -G(T ,h ) of the impurity function, and hence also (hopefully) the error of the new tree.</p><p>Definition 2.3 (Purity gain). Let h be a splitting function, be a leaf of T , and D be D conditioned on x reaching . Let 0 be the leaf of T ,h corresponding to h(x) = 0, 1 be the leaf corresponding to h(x) = 1, and D 0 and D 1 be their respective conditional distributions.</p><p>We define the local drop in G at this leaf, after splitting with h, as:</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="2.2.">Impurity-based decision tree algorithms as boosting algorithms</head><p>Kearns &amp; <ref type="bibr">Mansour (1996)</ref> were the first to analyze impuritybased decision tree learning algorithms from the perspective of boosting. Their simple but key insight was that the splitting functions at the internal nodes of the tree can be viewed as weak hypotheses, and the decision tree construction as a process of creating a strong learner by combining these weak hypotheses. We recall that standard weak learning assumption from the literature on boosting:</p><p>Definition 2.4 (Standard distribution-independent weak learning assumption). Let f : X &#8594; {0, 1} be a target function and H be a class of hypotheses from X to {0, 1}. For &#947; &gt; 0, we say that H satisfies the distributionindependent &#947;-weak learning assumption w.r.t.</p><p>Definition 2.4 can be hard to satisfy because of the requirement that there exists a &#947;-advantage hypothesis for every distribution D X over X . Our analysis will only rely on a milder distribution-specific weak learning assumption that TOPDOWNDT H,G,D (t):</p><p>Given: Size bound t.</p><p>Output: Decision tree of size t approximating D, with internal nodes chosen from H.</p><p>1. Initialize T to be the empty tree.</p><p>2. While size(T ) &lt; t:</p><p>(a) Let ( , h ) be set to arg max</p><p>4. Return T .</p><p>Figure <ref type="figure">1</ref>: The decision tree boosting algorithm for hypothesis class H and impurity function G over distribution D.</p><p>For simplicity, we assume that &#8710; D (h), w D ( ), and &#181;(D ) can be computed exactly. In practice, these quantities can be replaced with empirical estimates from a random sample of D (see Appendix D for details).</p><p>is significantly easier to satisfy. Looking ahead, the mildness of our weak learning assumption will be crucial for our proof of Theorem 1.3. We first need the notion of an induced distribution:</p><p>Definition 2.5 (Induced distributions). Let D be a distribution over X &#215; {0, 1} and H be a class of hypotheses from X to {0, 1}. We say that D is a distribution induced by conditioning D on H if D can be expressed as</p><p>Remark 2.6. Note that all the conditional distributions, D , at the leaves of a decision tree are induced distributions of D conditioned on H. Moreover, if D is such that D X is a product distribution and if H is the class of hypotheses that threshold on a single feature (i.e. h(x) = 1[x i &#8805; &#952;]), then D X remains a product distribution for every distribution D that is induced by conditioning D on H.</p><p>Definition 2.7 (Our distribution-specific weak learning assumption). Let D be a distribution over X &#215; {0, 1} and H be a class of hypotheses from X to {0, 1}. For &#947; &gt; 0, we say H satisfies the &#947;-weak learning assumption w.r.t D if, for any distribution D that is induced by conditioning D on H, there exists an h &#8712; H that satisfies:</p><p>We call such an h a &#947;-advantage hypothesis with respect to D .</p><p>Remark 2.8. Our weak learning assumption in Definition 2.7 is a weaker assumption than the standard Definition 2.4. This is because Equation ( <ref type="formula">2</ref>) is equivalent to having Pr (x,y)&#8764;D bal [h(x) = y] &#8804; 1/2 -&#947;, where D bal is the balanced version of D , so that the points in X are reweighted to make the probability of a positive or negative label equally likely. Since Definition 2.4 has to hold for all distributions over X , it also has to hold in particular for the marginal distribution of D bal over X . Therefore, Definition 2.4 implies Definition 2.7.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="2.3.">Learning with adversarial noise</head><p>Adversarial noise can take on many strengths and forms, depending on both what kind of corruptions are allowed and when these corruptions can be made. We focus on the strongest model of noise called nasty noise <ref type="bibr">(Bshouty et al., 2002)</ref>. In this setting, we wish to learn a binary classifier on a distribution D over X &#215; {0, 1}. However, instead of receiving a set of samples S &#8764; D n , an adversary is allowed to replace any &#951;-fraction of points in S with arbitrary points to get a corrupted sample S. The algorithm then receives the corrupted sample S.</p><p>This noise model captures many other weaker forms of noise. For example, if the adversary can only change the labels of the &#951; corrupted fraction, we recover agnostic noise.</p><p>Similarly, if the adversary has to obliviously commit to a corruption strategy before seeing the sample S, this is equivalent to choosing a distribution D that is &#951;-close to D in Total Variation (TV) distance, and drawing S from that. This is often called the distributional shift setting.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="3.">Proof of Theorem 1.1: Impurity-based decision tree algorithms are noise-tolerant boosting algorithms</head><p>We can now state the formal version of Theorem 1.1, which states that impurity-based decision tree learning algorithms are boosting algorithms that are resilient to nasty noise.</p><p>We draw on a recent result by <ref type="bibr">Blanc et al. (2022)</ref>, which shows that learning in the presence of &#951;-nasty-noise corruption is equivalent to learning in the presence of &#951; distribution shift with respect to Total Variation distance (dist TV ), as long as the learner only interacts with its samples by computing expectations. For details on the formal relationship between Theorems 1.1 and 3.1, as well as the runtime analysis of TOPDOWNDT see Appendix D. </p><p>We now prove a few lemmas that will be useful for our proof of Theorem 3.1. We begin by quantifying how much the impurity function decreases when we split at this particular leaf with a splitting function h : X &#8594; {0, 1}. The following lemma lower bounds this decrease, &#8710; D (h), in terms of the covariance between h(x) and y. We state the lemma generally for an arbitrary distribution E since we will be applying it to the distributions, D , at each leaf.</p><p>Lemma 3.2 (Local drop in G in terms of covariance). Let E be any distribution over X &#215; {0, 1} and h : X &#8594; {0, 1} be a splitting function. Then:</p><p>Proof. This result follows almost directly from <ref type="bibr">Kearns &amp; Mansour (1996)</ref>. See Appendix G for details.</p><p>Our weak learning assumption (Definition 2.7) provides lower bounds on the covariance between h(x) and y on the uncorrupted distribution D . We want to relate this this to the covariance on an adversarially corrupted distribution D that is &#951; -close to D .</p><p>We will need the following useful facts relating the variance and covariance of bounded functions on two distributions that are close in TV distance. We consider an arbitrary domain V and, without loss of generality, functions from V to [0, 1]. We defer the proofs to Appendix B.</p><p>Lemma 3.3 (Moments and TV-distance). Let E, E be two distributions over a domain V with dist TV (E, E) &#8804; &#951; and let f, g : V &#8594; [0, 1] be functions. Then</p><p>(5)</p><p>We now use Lemma 3.3 with our weak learning assumption to prove the existence of an h at that has high covariance on the adversarially corrupted distribution at a given leaf:</p><p>Lemma 3.4 (Covariance on the corrupted distribution). Let D be a distribution over X &#215; {0, 1} and H be a class of splitting functions from X to {0, 1} that satisfies the &#947;-weak learning assumption w.r.t D. For a decision tree T and leaf of T , let D be any distribution with dist TV (D , D ) &#8804; &#951; . Then there is an h &#8712; H s.t. </p><p>We can now prove the theorem:</p><p>, by our assumption that &#951; &#8804; O(&#949;&#947;).</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head>Otherwise, if error D [T ] &#8805; 12&#951;</head><p>&#947; + &#949;, we prove the existence of a leaf * &#8712; T and splitting function h * &#8712; H such that splitting * according to h * results in a substantial reduction in G D (T ). In more detail, we consider the expected reduction in G D (T ) if a random leaf &#8764; (T, D) is split with the respective h from Lemma 3.4:</p><p>where we use the notation (x) + := max{0, x}.</p><p>All together, we have</p><p>(by assumption)</p><p>Rewriting the expectation, we get</p><p>If there are currently s leaves in T , there must exist a leaf such that</p><p>Since TOPDOWNDT greedily splits the leaf that results in the largest drop in G D (T ), it follows that the drop in G at timestep s is at least least 4&#947; 2 &#949; 2 /s. Therefore, after t steps, the total drop is at least:</p><p>Since the range of G D is [0, 1], we conclude that after t = exp(O(1/&#947; 2 &#949; 2 )) steps, we must be done i.e. </p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="4.">Proof of Theorem 1.2: Optimality of our parameters</head><p>Theorem 3.1 says that TOPDOWNDT can grow a tree with error &#8804; &#949; only when &#951; &#8804; O(&#949;&#947;), where &#951; is the amount of corruption and &#947; is the weak learning advantage. Here, we show that this bound is tight: If we allow &#951; = &#213;(&#949;&#947;), then we can design distributions D on which TOPDOWNDT fails to achieve error &#8804; &#949;.</p><p>We remark that for technical convenience, in both this section and Section 5, we switch to functions outputting {&#177;1} rather than {0, 1}. The two formulations are equivalent.</p><p>Theorem 4.1 (Formal version of Theorem 1.2). For any &#949;, &#947; &gt; 0 where &#947; 1/&#947; &#8804; &#949;, d &#8712; N, and &#951; &#8805; &#8486;(&#947;&#949; log(1/&#949;)).</p><p>There is a distribution D whose marginal over X := {&#177;1} d is uniform, an &#951;-nasty noise corruption D of D, and a hypothesis class, H, satisfying the &#947;-weak learning assumption w.r.t D, such that for all impurity function G, TOPDOWNDT H,G, D (t) fails to build an &#949;-error tree for D unless t &#8805; 2 d-O(log(1/&#947;)/&#947;) .</p><p>Proof sketch. We will design a function f : {&#177;1} d &#8594; {&#177;1} that only depends on its first k features (meaning f (x) = g(x [1:k] ) for some function g : {&#177;1} k &#8594; {&#177;1}) for k d and set D to the distribution of (x, f (x)) where x is uniform from {&#177;1} d . This function will be carefully designed so that there is an &#951;-corruption D of D in which every hypothesis h &#8712; H has a local drop in G of 0. As a result, TOPDOWNDT cannot identify the "important" k hypotheses and is likely to pick one of the d -k useless (because they are independent of the label) hypothesis. That continues until all d -k useless hypotheses have been used, which requires the tree to have depth d -k corresponding to a size of 2 d-k .</p><p>To formalize the above proof sketch, we will need to prove that the D we design satisfies the weak-learning hypothesis. To do so, we use the celebrated Kahn-Kalai-Linial inequality from the analysis of Boolean functions.</p><p>Fact 4.2 (KKL inequality, <ref type="bibr">(Kahn et al., 1988)</ref>). For any function f : {&#177;1} k &#8594; {&#177;1} and D X the uniform distribution over {&#177;1} k , there is a coordinate i &#8712; [k] for which</p><p>The KKL inequality will allow us to prove that a broad class of distributions satisfy the weak-learning assumption.</p><p>Definition 4.3 (Monotone functions). We say that a Boolean function f : {&#177;1} n &#8594; {&#177;1} is monotone if for any x, y &#8712; {&#177;1} n where x i &#8804; y i for all i &#8712; [n], f (x) &#8804; f (y).</p><p>Combining Fact 4.2 with Lemma 5.1 immediately gives the following.</p><p>Corollary 4.4. For any monotone function g :</p><p>We apply the above corollary to prove a class of distributions satisfying the weak-learning assumption. Before doing so, we'll need the notion of a restriction:</p><p>Restrictions. Given some domain X := {&#177;1} d , a restriction of that domain is a defined by value for each coordinate,</p><p>where we define to be equal to both +1 and -1. The coordinates i where &#961; i &#8712; {&#177;1} are said to be specified, and we define |&#961;| to be the number of coordinates specified. The number of inputs consistent with a restriction &#961; is 2 d-|&#961;| , and there is a natural projection proj &#961; from {&#177;1} d-|&#961;| to the subset of X consistent with &#961; that uses the input to proj &#961; for the unspecified coordinates and fills in the specified coordinates according to &#961;. Proof. Let D be any induced distribution of D by H. Our goal is to show that Equation ( <ref type="formula">2</ref>) is satisfied, or equivalently, that there is some i &#8712;</p><p>As H is the set of coordinate projections and D X is uniform over {&#177;1} d , every induced distribution D X corresponds to the uniform distribution over all elements of X consistent with some restriction &#961;. Given that restriction &#961;, we can define the function</p><p>As f is a monotone function of the first k coordinates of its input, f &#961; is a monotone function of the first (up to k) coordinates of its input. Hence, there is some k &#8804; k and monotone</p><p>Then,</p><p>This means that H satisfies our weak learning assumption w.r.t. D.</p><p>To design the distribution D of Theorem 4.1, we'll use the following proposition.</p><p>Proposition 4.6. For any &#949; &#8712; (0, 1/3] and d &#8805; log 2 (1/&#949;), for some integer k &#8804; d, there is a monotone function f : {&#177;1} k &#8594; {&#177;1} where, for x &#8764; {&#177;1} k chosen uniformly,</p><p>The proof of Proposition 4.6 is given in Appendix E.</p><p>Finally, we prove the main result of this section.</p><p>Proof of Theorem 4.1. Let</p><p>Note as we assume that &#947; 1/&#947; &#8804; &#949;, we have that &#8805; log 2 (1/&#949;). Therefore, by Proposition 4.6, we know for some k &#8804; , there exists a monotone g : {&#177;1} k &#8594; {&#177;1} where for x &#8764; {&#177;1} k chosen uniformly,</p><p>and, where &#951; is chosen as the unique solution of (1-&#951;)v -&#951; = 0 where v is as defined in Equation ( <ref type="formula">9</ref>). Note that this solution satisfies</p><p>As D is a mixture with (1 -&#951;) fraction coming from D, it is an &#951;-nasty noise corruption of D. Furthermore, as the contribution of E is chosen to exactly cancel out the correlations of D, for all i &#8712; [d],</p><p>This means that for any impurity function G, all hypotheses have a local drop in G of 0. Furthermore, all projections except for the first k are fully independent of one another and of the label. Therefore, if all internal nodes in the tree consists of projections for the last d -k coordinates, then all hypotheses at every leaf will still have impurity gain.</p><p>As a result, TOPDOWNDT will choose an arbitrary ( , h ) at each iteration. Unless t &#8805; 2 d-k , these arbitrary decisions can lead to the complete tree of depth log(t) being built, where all internal nodes have a hypothesis for one of the d -k projection functions that are independent of y.</p><p>In that case, by Equation ( <ref type="formula">8</ref>) for every leaf ,</p><p>Therefore, regardless of how TOPDOWNDT labels the leaves, the resulting tree will have error &#8805; 2&#949;.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="5.">Proof of Theorem 1.3: Learning monotone decision trees in the presence of nasty noise</head><p>In this section we consider distributions D for which the marginal D X is an arbitrary product distribution D X = D</p><p>(1)</p><p>X over {&#177;1} d (i.e. each bit is independent) and the deterministic target function D Y |X is monotone and representable by a size-s decision tree.</p><p>The following is a useful fact about the influence of features on monotone functions. See Appendix F for a proof. Lemma 5.1 (Influence = covariance for monotone functions).</p><p>X be an arbitrary product distribution over {&#177;1} d . For a monotone function f :</p><p>The key technical ingredient in our proof of Theorem 1.3 is a theorem of O'Donnell, Saks, Schramm, and Servedio from discrete Fourier analysis <ref type="bibr">(O'Donnell et al., 2005)</ref>: Theorem 5.2 (OSSS inequality). Let f : {&#177;1} d &#8594; {&#177;1} be function that is representable by a size-s decision tree and D X be a product distribution over {&#177;1} d . Then</p><p>where Inf i (f ) and Var[f ] are with respect to D X .</p><p>For the class of distributions described at the beginning of this section, Lemma 5.1 and Theorem 5.2 together imply that the weak learning assumption of Theorem 3.1 can be satisfied by the set H = {proj i : i &#8712; [d]} of projection functions:</p><p>Lemma 5.3 (Projection functions satisfy weak learning assumption). Let D be a distribution for which the marginal D X is a product distribution over X = {&#177;1} d and the target function f := D Y |X is monotone and can represented as a size-s decision tree. The set H = {proj i : i &#8712; [d]} of projection functions satisfies the &#947;-weak learning assumption w.r.t. D with &#947; = 1/ log s.</p><p>Proof. We first note that there is an h &#8712; H that is a &#947;advantage hypothesis with respect to D:</p><p>where we have used Lemma 5.1 for the equality and Theorem 5.2 for the inequality. Since H is the set of projection functions, every distribution D that is induced by conditioning</p><p>Similarly, since f is monotone and representable by a size-s decision tree, the same remains true for any restriction of f by the projection functions in H. Therefore, we can again apply Lemma 5.1 and Theorem 5.2 to infer the existence of a &#947;-advantage hypothesis h &#8712; H with respect to D . runs in poly(d) &#8226; s O((log s)/&#949; 2 ) time and constructs a size-t decision tree hypothesis T satisfying error D [T ] &#8804; &#949;.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="6.">Conclusion</head><p>We have given the first noise tolerance guarantees for the class of impurity-based decision tree learning algorithms that hold in a fully general setting. Theorem 3.1 shows that they are noise-tolerant boosting algorithms that combine &#947;-advantage weak hypotheses into a strong hypothesis with error &#8804; &#949;, even in the presence nasty noise of rate as high as &#951; &#8804; O(&#949;&#947;). Theorem 4.1 provides a near-matching lower bound ruling out, in a strong sense, any such guarantee for noise rates &#951; &#8805; &#937;(&#949;&#947;). Finally, instantiating Theorem 3.1 in the setting of product distributions over binary features-a setting that is particularly well studied in the theoretical literature-we show that these classic and widely-used algorithms achieve guarantees that are better than those known for any existing theoretical algorithms. Taken as a whole, our work helps place the popularity and empirical success of impurity-based decision tree learning algorithms on firm theoretical footing.</p><p>There are several immediate avenues for future research.</p><p>First, a natural next step is to establish similar formal noise tolerance guarantees for tree-based ensemble methods such as random forests and XGBoost. Second, the focus of our work has been on understanding properties of impuritybased decision tree learning algorithms exactly as they are, to provide theoretical justification for their practical effectiveness. It would nevertheless be interesting to consider possible modifications of these algorithms that are even more resilient to adversarial noise-for example, are there such modifications that evade our lower bounds? </p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="7.">Acknowledgments</head></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head>A. Other related work</head><p>Boosting by branching programs. <ref type="bibr">Kearns and Mansour (Kearns &amp; Mansour, 1996)</ref> (see also <ref type="bibr">(Kearns, 1996;</ref><ref type="bibr">Dietterich et al., 1996)</ref>) were the first to propose the perspective of viewing impurity-based decision tree algorithms as boosting algorithms. Their analysis assumes the noiseless setting. Subsequently, departing from <ref type="bibr">(Kearns &amp; Mansour, 1996)</ref>'s motivation of analyzing practical decision tree algorithms, <ref type="bibr">Mansour and McAllester (Mansour &amp; McAllester, 2002)</ref> initiated a line of work on boosting by branching programs, a variant of decision trees where the underlying graph is a DAG rather than a tree. While <ref type="bibr">(Mansour &amp; McAllester, 2002)</ref> assumes the noiseless setting, the followup works <ref type="bibr">(Kalai, 2004;</ref><ref type="bibr">Long &amp; Servedio, 2005;</ref><ref type="bibr">Kalai &amp; Servedio, 2005;</ref><ref type="bibr">Long &amp; Servedio, 2009)</ref> handle various types of random (i.e. non-adversarial) label noise, and the work of <ref type="bibr">(Kalai et al., 2008b)</ref> handles agnostic noise.</p><p>Our work differs from this line of work in two ways: first and foremost, our results apply to impurity-based decision tree algorithms such as ID3, CART, and C4.5-the overarching goal of our work is to analyze and establish noise tolerance properties of these algorithms that are widely used in practice-whereas branching programs are much less commonly used. Second, we handle the strongest noise model of nasty noise, whereas these results only allow for corruptions of labels and not features.</p><p>Theoretical work on decision tree learning. Decision trees are one of the most intensively studied concept classes in learning theory. The literature on this problem is rich and vast, spanning over three decades, and it continues to grow. However, in most of these works, the algorithms analyzed not resemble practical impurity-based decision tree algorithms. Indeed, most of them are improper algorithms, in the sense that their hypotheses are not themselves decision trees. Quoting <ref type="bibr">Kearns and Mansour (Kearns &amp; Mansour, 1996)</ref>, "In summary, it seems fair to say that despite their other successes, the models of computational learning theory have not yet provided significant insight into the apparent empirical success of programs like C4.5 and CART."</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head>B. Bounds with Total Variation Distance</head><p>Lemma B.1 (Expectation and TV-distance). Let E, E be two distributions over a domain V with dist TV (E, E) &#8804; &#951; and let</p><p>Proof. The result follows immediately from the following definition of total variation distance:</p><p>Lemma B.2 (Variance and TV-distance). Let E, E be two distributions over a domain V with dist TV (E, E) &#8804; &#951; and let</p><p>Proof. We can write</p><p>If dist TV (E, E) &#8804; &#951;, then it is easy to see that dist TV (E 2 , E 2 ) &#8804; 2&#951;, where E 2 indicates the product distribution of two independent draws from E, Moreover, since (f (x) -f (x )) 2 &#8804; 1, we can apply Lemma B.1 to Equation ( <ref type="formula">12</ref>) with E 2 and . Let E, E be two distributions over a domain V with dist TV (E, E) &#8804; &#951; and let f, g : V &#8594; [0, 1] be two functions. Then</p><p>Proof. We can write</p><p>, where E 2 indicates the product distribution of two independent draws from E, Moreover, since f, g : V &#8594; {0, 1}, we have</p><p>, so we can apply Lemma B.1 to Equation ( <ref type="formula">13</ref>) with</p><p>Lemma B.4. For any finite set L, (possibly infinite) set X, and distributions D, D each over the product domain L &#215; X,</p><p>where D is marginal distribution of for (x, ) &#8764; D and D x| is the conditional distribution of x when ( , x) &#8764; D conditioned upon = .</p><p>Intuitively, we will define a distribution D that "mixes" D and D: To sample ( , x) &#8764; D , we first draw &#8764; D and then x &#8764; D x| . We'll be able to show that the l.h.s. of Equation ( <ref type="formula">14</ref>) is equal to dist TV (D, D ). Proof of Lemma B.4. We compute,</p><p>We analyze each term of the above two terms separately. For the first, </p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head>C. General Impurity Functions</head><p>Remark C.1 (Other impurity functions). Lemma 3.2 is the only part of the proof of Theorem 3.1 that depends on the particular impurity function G. That Lemma goes through for any impurity function that, for any constant &#954;, satisfies G (x) &#8804; -&#954; for all x &#8712; (0, 1), though the 16 in Equation ( <ref type="formula">3</ref>) is replaced with 2&#954;. This is because (using the fact that The above holds with equality when G (x) = 4x(1 -x) for &#954; = 8. Therefore, the local drop in G will always be at least &#954; 8 as large as it is for G . The remainder of the proof of Theorem 3.1 goes through unmodified except for slight changes to the constants hidden by O(&#8226;).</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head>D. Learning with samples versus exact expectations</head><p>In the pseudocode provided in Figure <ref type="figure">1</ref>, we assume that we can exactly compute the drop in impurity and therefore can exactly compute expectations of the form &#181;(D ) = E x,y&#8764;D <ref type="bibr">[y]</ref>. If instead, those expectations are estimated using random samples (as in the statements of Theorems 1.1 and 1.3 in the introduction), the algorithm only can estimate them to within some tolerance &#177;&#964; . It is straightforward to carry out the proofs of Theorems 3.1 and 5.4 accounting for this &#177;&#964; error as long as &#964; &#8804; O( &#947; 2 &#949; 2 t ). As the TOPDOWNDT only needs to compute at most O(t 2 |H|) expectations, standard concentration inequalities can be used to show that a sample of size &#213;(1/&#964; 2 &#8226; t 2 &#8226; |H|) is sufficient to compute all expectations to accuracy &#964; with high probability. However, the situation with noise is slightly more nuanced, as the adversary gets to see the sample S &#8764; D n before deciding on &#951;-nasty-noise corruption &#348;. This means the adversary can choose how to modify empirical estimates after seeing the sample S. Luckily, Theorem 5 of <ref type="bibr">(Blanc et al., 2022)</ref> handles exactly this case. It says that as long as the sample has size &#213;(1/&#964; 2 &#8226; t 2 &#8226; |H|), with high probability, all empirical estimates computed on the corrupted sample &#348; will be within &#177;&#964; of the true expectations of some D that is &#951;-close to D. Therefore, by proving that TOPDOWNDT succeeds on every D that is &#951;-close to D, as we do in Theorem 3.1, we ensure that our algorithm succeeds even if an adversary gets to modify &#951;-fraction of a sample after seeing it.</p><p>Runtime analysis. Before proving that TOPDOWNDT build low error trees, we will briefly prove that it is efficient. Let &#950; be the time it takes to compute &#181;(D ) and Pr D [h(x) = 1] for some leaf of the tree. Typically, this will be proportional to the size of the data set. Then, as the number of leaves in each iteration will be at most t, the time required for an iteration of TOPDOWNDT is at most O(&#950;t &#8226; |H|). The algorithm runs for t iterations, so the total runtime is O(&#950;t 2 &#8226; |H|).</p></div><note xmlns="http://www.tei-c.org/ns/1.0" place="foot" n="1" xml:id="foot_0"><p>In the context of practical decision tree algorithms, the class of splitting functions H is usually finite and small. Standard implementations of these popular algorithms, such as in scikitlearn, do a brute force search over hypotheses.</p></note>
		</body>
		</text>
</TEI>
