The Implicit Bias of Gradient Descent toward Collaboration between Layers: A Dynamic Analysis of Multilayer Perceptions
Zheng Wang, Geyong Min, Wenjie Ruan
Abstract
The implicit bias of gradient descent has long been considered the primary mechanism explaining the superior generalization of over-parameterized neural networks without overfitting, even when the training error is zero. However, the implicit bias toward adversarial robustness has rarely been considered in the research community, although it is crucial for the trustworthiness of machine learning models. To fill this gap, in this paper, we explore whether layers in neural networks collaborate to strengthen adversarial robustness during gradient descent. By quantifying this collaboration between layers using our proposed concept, co-correlation , we demonstrate a monotonically increasing trend in co-correlation, which implies a decreasing trend in adversarial robustness during gradient descent. Additionally, we observe different behaviours between narrow and wide neural networks during gradient descent. We conducted extensive experiments that verified our proposed theorems.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Cited by top-tier papers4
- Do Neural Networks Need Gradient Descent to Generalize? A Theoretical StudyYotam Alexander, Yonatan Slutzky, Yuval Ran-Milo, Nadav CohenNeurIPS 2025 · 3 citations
- The Implicit Bias of Structured State Space Models Can Be Poisoned With Clean LabelsYonatan Slutzky, Yotam Alexander, Noam Razin, Nadav CohenNeurIPS 2025 · 2 citations
- Jailbreaking Vision-Language Models via Dissonance-Guided Suffix Optimization and Image-Phrase InjectionJiacheng Pi, Zhiguo Yang, Xingxing Huang, Dongsheng Xu et al.CVPR 2026
- Neural Differentiation in Deep Networks: A Theoretical Framework for Expressivity and Representational DiversityBoyuan Wang, Richard JiangCVPR 2026
Builds on14
- Distillation as a Defense to Adversarial Perturbations Against Deep Neural NetworksNicolas Papernot, Patrick D. McDaniel, Xi Wu, Somesh Jha et al.S&P 2016 · 3,275 citations
- Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacksFrancesco Croce, Matthias HeinICML 2020 · 2,337 citations
- Gradient Descent Maximizes the Margin of Homogeneous Neural NetworksKaifeng Lyu, Jian LiICLR 2020 · 402 citations
- Directional convergence and alignment in deep learningZiwei Ji, Matus TelgarskyNeurIPS 2020 · 226 citations
- Exploring Architectural Ingredients of Adversarially Robust Deep Neural NetworksHanxun Huang, Yisen Wang, Sarah M. Erfani, Quanquan Gu et al.NeurIPS 2021 · 124 citations
Related papers
- Feature Averaging: An Implicit Bias of Gradient Descent Leading to Non-Robustness in Neural NetworksBinghui Li, Zhixuan Pan, Kaifeng Lyu, Jian LiICLR 2025
- The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU NetworksSpencer Frei, Gal Vardi, Peter L. Bartlett, Nati SrebroNeurIPS 2023 · 25 citations
- Conflicting Biases at the Edge of Stability: Norm versus Sharpness RegularizationMaria Matveev, Vit Fojtik, Hung-Hsu Chou, Gitta Kutyniok et al.ICML 2026
- Coherent Gradients: An Approach to Understanding Generalization in Gradient Descent-based OptimizationSatrajit ChatterjeeICLR 2020 · 60 citations
- Implicit Regularization of SGD Reduces Shortcut LearningNahal Mirzaie, Alireza Alipanah, Ali Abbasi, Amirmahdi Farzane et al.ICLR 2026
