Domain Adaptation with Asymmetrically-Relaxed Distribution Alignment
Yifan Wu, Ezra Winston, Divyansh Kaushik, Zachary Lipton
Introduction
Despite breakthroughs in supervised deep learning across a variety of challenging tasks, current techniques depend precariously on the i.i.d. assumption. Unfortunately, real-world settings often demand not just generalization to unseen examples but robustness under a variety of shocks to the data distribution. Ideally, our models would leverage unlabeled test data, adapting in real time to produce improved predictions. Unsupervised domain adaptation formalizes this problem as learning a classifier from labeled source domain data and unlabeled data from a target domain, to maximize performance on the target distribution.
Without further assumptions, guarantees of target-domain accuracy are impossible (Ben-David et al., 2010b). However, well-chosen assumptions can make possible algorithms with non-vacuous performance guarantees. For example, under the covariate shift assumption (Heckman, 1977; Shimodaira, 2000), although the input marginals can vary between source and target (), the conditional distribution of the labels (given features) exhibits invariance across domains (). Some consider the reverse setting label shift (Saerens et al., 2002; Zhang et al., 2013; Lipton et al., 2018), where although the label distribution shifts (), the class-conditional input distribution is invariant (). Traditional approaches to both problems require the source distributions’ support to cover the target support, estimating adapted classifiers via importance-weighted risk minimization (Shimodaira, 2000; Huang et al., 2007; Gretton et al., 2009; Yu & Szepesvári, 2012; Lipton et al., 2018).
Problematically, assumptions of contained support are violated in practice. Moreover, most theoretical analyses do not guaranteed target accuracy when the source distribution support does not cover that of the target. A notable exception, Ben-David et al. (2010a) leverages capacity constraints on the hypothesis class to enable generalization to out-of-support samples. However, their results (i) do not hold for high-capacity hypothesis classes, e.g., neural networks; and (ii) do not provide intuitive interpretations on what is sufficient to guarantee a good target domain performance.
A recent sequence of deep learning papers have proposed empirically-justified adversarial training schemes aimed at practical problems with non-overlapping supports (Ganin et al., 2016; Tzeng et al., ). Example problems include generalizing from gray-scale images to colored images or product images on white backgrounds to photos of products in natural settings. While importance-weighting solutions are useless here (with non-overlapping support, weights are unbounded), domain-adversarial networks (Ganin et al., 2016) and subsequently-proposed variants report strong empirical results on a variety of image recognition challenges.
The key idea of domain-adversarial networks is to simultaneously minimize the source error and align the two distributions in representation space. The scheme consists of an encoder, a label classifier, and a domain classifier. During training, the domain classifier is optimized to predict each image’s domain given its encoding. The label classifier is optimized to predict labels from encodings (for source images). The encoder weights are optimized for the twin objectives of accurate label classification (of source data) and fooling the domain classifier (for all data).
Although Ganin et al. (2016) motivate their idea via theoretical results due to Ben-David et al. (2010a), the theory is insufficient to justify their method. Put simply, Ben-David et al. (2010a) bound the test error by a sum of three terms. The domain-adversarial objective minimizes two among these, but this minimization may cause the third term to increase. This is guaranteed to happen when the label distribution shifts between source and target. Consider the case of cat-dog classification with non-overlapping support. Say that the source distribution contains dogs and cats, while the target distribution contains dogs and cats. Successfully aligning these distributions in representation space requires the classifier to predict the same fraction of dogs and cats on source and target. If one achieves accuracy on the source data, then target accuracy will be at most (Figure 1(a)).
In this paper, we propose asymmetrically-relaxed distribution alignment, a relaxed distance for aligning data across domains that can be minimized without requiring latent-space distributions to match exactly. The new distance is minimized whenever the density ratios in representation space from target to source are upper bounded by a certain constant, such that the target representation support is contained in the source representation’s. The relaxed distribution alignment need not lead to a poor classifier on the target domain under label distribution mismatch (Figure 1(b)). We demonstrate theoretically that the relaxed alignment is sufficient for a good target domain performance under a concrete set of assumptions on the data distributions. Further, we propose several practical ways to achieve the relaxed distribution alignment, translating the new distance into adversarial learning objectives. Empirical results on synthetic and real datasets show that incorporating our relaxed distribution alignment loss into adversarial domain adaptation gives better classification performance on the target domain. We make the following key contributions:
We propose an asymmetrically relaxed distribution matching objective, overcoming the limitation of standard objectives under label distribution shift.
We provide theoretical analysis demonstrating that under a clear set of assumptions, the asymmetrically relaxed distribution alignment can provide target-domain performance guarantees.
We propose several distances that satisfy the desired properties and are optimizable by adversarial training.
We empirically show that our asymmetrically relaxed distribution matching losses improve target performance when there is a label distribution shift in the target domain, and perform comparably otherwise.
Preliminaries
We are interested in bounding the classification risk of a -pair on the target domain:
The second term in (2) becomes zero if the latent space labeling function is domain-invariant. To see this, we apply
The third term in (2) is zero when and are the same.
Domain-adversarial learning
Domain-adversarial approaches focus on minimizing the first and third term in (2) jointly. Informally, these approaches minimize the source domain classification risk and the distance between the two distributions in the latent space:
where is a distance metric between distributions and is a regularization term. Standard choices of such as a domain classifier (Jensen-Shannon (JS) divergence Per (Nowozin et al., 2016), there is a slight difference between JS-divergence and the original GAN objective (Goodfellow et al., 2014). We will use the term JS-divergence for the GAN objective. ) (Ganin et al., 2016), Wasserstein distance (Shen et al., 2018) or Maximum Mean Discrepancy (Huang et al., 2007) have the property that if and otherwise. In the next section, we will show that minimizing (4) with such will lead to undesirable performance and propose an alternative objective to align and instead of driving them to be identically distributed.
A Motivating Scenario
If if and only if , indicates .
The proof follows the intuition of Figure 1(a): If , the best we can do is to map proportion of positive samples from the target inputs to regions of latent space corresponding to negative examples from the source domain while maintaining the label consistency for remaining ones. Switching the term positive/negative gives a similar argument for . Proposition 3.1 says that if there is a label distribution mismatch , minimizing the objective (4) to zero imposes a positive lower bound on the target error. This is especially problematic in cases where a perfect pair may exist, achieving zero error on both source and target data (Figure 1(b)).
Asymmetrically-relaxed distribution alignment It may appear contradictory that minimizing the first and third term of (2) to zero guarantees a positive and thus a positive second term when there exists a pair of such that (all three terms are zero). However, this happens because although is a sufficient condition for the third term of (2) to be zero, it is not a necessary condition. We now examine the third term of (2):
This expression (5) shows that if the source error is zero then it is sufficient to say the third term of (2) is zero when the density ratio is upper bounded by some constant for all . Note that it is impossible to bound by a constant that is smaller than so we write this condition as for some . Note that this is a relaxed condition compared with , which is a special case with .
Relaxing the exact matching condition to the more forgiving bounded density ratio condition makes it possible to obtain a perfect target domain classifier in many cases where the stricter condition does not, by requiring only that the (latent space) target domain support is contained in the source domain support, as shown in Figure 1(b). The following proposition states that our relaxed matching condition does not suffer from the previously-described problems concerning shifting label distributions (Proposition 3.1), and provides intuition regarding just how large may need to be to admit a perfect target domain classifier.
For every , there exists a construction of such that , and .
Given this motivation, we propose relaxing from exact distribution matching to bounding the density ratio in the domain-adversarial learning objective (4). We call this asymmetrically-relaxed distribution alignment since we aim at upper bounding (but not ). We now introduce a class of distances between distributions that can be minimized to achieve the relaxed alignment:
Given a family of distributions defined on the same space , a distance metric between distributions is called -admissible if when and otherwise.
Our proposed approach is to replace the typical distribution distance in the domain-adversarial objective (4) with a -admissible distance so that minimizing the new objective does not necessarily lead to a failure under label distribution shift. However, it is still premature to claim the justification of our approach due to the following issues: (i) We may not be able get a perfect source domain classifier with . This also indicates a trade-off in selecting as (a) higher will increase the upper bound ( according to (5)) on the third term in (2) (b) lower will make a good target classifier impossible under label distribution shift. (ii) Minimizing as part of an objective does not necessarily mean that we will obtain a solution with . There may still be some proportion of samples from the target domain lying outside the support of source domain in the latent space . In this case, the density ratio is unbounded and (5) becomes vacuous. (iii) Even when we are able optimize the objective perfectly, i.e., , with a proper choice of such that there exists such that holds simultaneously (e.g. Figure 1(b), Proposition 3.2), it is still not guaranteed that such is learned (e.g. Figure 2(a)), as the second term of (2) is unbounded and changes with . Put simply, the problem is that although there may exist alignments perfect for prediction, there also exist other alignments that satisfy the objective but predict poorly (on target data). To our knowledge this problem effects all domain-adversarial methods proposed in the literature, and how to theoretically guarantee that the desired alignment is learned remains an open question.
Next, we theoretically study the target classification error under asymmetrically-relaxed distribution alignment. Our analysis resolves the above issues by (i) working with imperfect source domain classifier and relaxed distribution alignment; and (ii) providing concrete assumptions under which a good target domain classifier can be learned.
Bounding the Target Domain Error
In a manner similar to (2), Ben-David et al. (2007, 2010a) bound the target domain error by a sum of three terms: (i) the source domain error (ii) an -divergence between and (iii) the best possible classification error that can be achieved on the combination of and . We motivate our analysis by explaining why their results are insufficient to give a meaningful bound for domain-adversarial learning approaches. From a theoretical upper bound, we may desire to make claims in the following pattern:
Let be a set of models that satisfy a set of properties (e.g. with low training error), and be a set of assumptions on the data distributions . For any given model , its performance can be bounded by a certain quantity, i.e. .
Ideally, should be observable on available data information (i.e. without knowing target labels), and assumptions should be model-independent (independent of which model is learned among ). In the results of Ben-David et al. (2007, 2010a), terms (i) and (ii) are observable so can be set as achieving low quantities on these two terms. Since term (iii) is unobservable we may want to make assumptions on it. This term, however, is model-dependent when is learned jointly. To make a model-independent assumption on term (iii), we need to take the supremum over all , i.e., all possible models that achieve low values on (i) and (ii). This supremum can be vacuous without further assumptions as a cross-label mapping may also achieve low source error and distribution alignment (e.g. Figure 2(a) v.s. Figure 1(b)). Moreover, when contains all possible binary classifiers, the -divergence is minimized only if the two distributions are the same, thus suffering the same problem as Proposition 3.1 and is therefore not suitable for motivating a learning objective.
To overcome these limitations, we propose a new theoretical bound on the target domain error which (a) treats the difference between and asymmetrically and (b) bounds the label consistency (second term in 2) by exploiting the Lipschitz-ness of as well as the separation and connectedness of data distributions. Our result can be interpreted as a combination of observable model properties and unobservable model-independent assumptions while being non-vacuous: it is able to guarantee correct classification for (some fraction of) data points from the target domain even where the source domain has zero density.
We introduce our result with the following construction:
The following statements hold simultaneously:
(Lipschitzness of representation mapping.) is -Lipschitz: for any .
(Imperfect asymmetrically-relaxed distribution alignment.) For some , there exist a set such that holds for all and .
(Separation of source domain in the latent space.) There exist two sets that satisfy:
.
For , for all .
.
Note that this construction does not require any information about target domain labels so the statements can be viewed as observable properties of . We now introduce our model-independent assumption:
(Connectedness from target domain to source domain.) Given constants , assume that, for any with and , there exists that satisfies the following conditions:
For any , there exists such that one can find a sequence of points with , , and for all .
Given a -Lipschitz mapping and a binary classifier , if satisfies the properties in Construction 4.1 with constants , and Assumption 4.2 holds with the same set of constants plus , then the target domain error can be bounded as
Notice that it is always possible to make Construction 4.1 by adjusting the constants . Given these constants, Assumption 4.2 can always be satisfied by adjusting . So Theorem 4.3 is a general bound.
The key challenge in bounding is to bound the second term in (2) by identifying sufficient conditions that prevent cross-label mapping (e.g. Figure 2(a)). To resolve this challenge, we exploit the fact that if there exist a path from a target domain sample to a source domain sample in the input space and all samples along the path are mapped into two separate regions in the latent space (due to distribution alignment), then these two connected samples cannot be mapped to different regions, as shown in Figure 2(b).
2 Example of a perfect target domain classifier
To interpret our result, we construct a simple situation where is guaranteed when the domain adversarial objective with relaxed distribution alignment is minimized to zero, exploiting pure data-dependent assumptions:
Proof follows directly by observing that a construction of exists in Theorem 4.3. A simple example that satisfies Assumption 4.4 is Figure 2(b). For a real world example, consider the cat-dog classification problem. Say that source domain contains small-to-medium cats and dogs while target domain contains medium-to-large cats and dogs. The target domain consists of clusters (e.g. cats and dogs, or multiple sub-categories) and each of them overlaps with the source domain (the medium ones).
Asymmetrically-relaxed distances
So far, we have motivated the use of asymmetrically-relaxed distribution alignment which aims at bounding by a constant instead of driving towards . More specifically, we propose to use a -admissible (Definition 3.3) distance in objective (4) to align the source and target encodings rather than the standard distances corresponding an adversarial domain classifier. In this section, we derive several -admissible distance metrics that can be practically minimized with adversarial training. More specifically, we propose three types of distances (i) f-divergences; (ii) modified Wasserstein distance; (iii) reweighting distances; and demonstrate how to optimize them by adversarial training.
where .
It can be shown that is continuous, convex and . As we already explained, if and only if for all . Hence is is -admissible.
Adversarial training According to Nowozin et al. (2016), adversarial training (Goodfellow et al., 2014) can be viewed as minimizing the dual form of -divergences
Plugging in the corresponding for JS-divergence gives
where can be parameterized by a neural network with sigmoid output as typically used in adversarial training.
2 Wasserstein distance
The idea behind modifying the Wasserstein distance is to model the optimal transport from to the region where distributions have maximal density ratio with respect to . We define the relaxed Wassertein distance as
where is defined as the set of joint distributions over such that
is -admissible since no transportation is needed if already lies in the qualified region with respect to .
Adversarial training Following the derivation for the original Wasserstein distance, the dual form becomes
Optimization with adversarial training can be done by parameterizing as a non-negative function (e.g. with soft-plus output or RELU output ) and following Arjovsky et al. (2017); Gulrajani et al. (2017) to enforce its Lipschitz continuity approximately.
3 Reweighting distance
Given any distance metric , a generic way to make it -admissible is to allow reweighting for one of the distances within a -dependent range. The relaxed distance is then defined as the minimum achievable distance by such reweighting.
Then the relaxed distance can be defined as
Such is -admissible since the set is exactly the set of such that .
Adversarial training We propose an implicit-reweighting-by-sorting approach to optimize without parameterizing the function when can be optimized by adversarial training. Adversarially trainable shares a general form as
where and are monotonically increasing functions. According to (9), the relaxed distance can be written as
One step of alternating minimization on , could consist of fixing and optimizing . Then the problem becomes
Observe that the optimal solution to (11) is to assign for the fraction of from distribution , where take the largest values. Based on this observation, we propose to do the following sub-steps when optimizing (11) as an alternating minimization step: (i) Sample a minibatch of ; (ii) Sort these in descending order according to ; (iii) Assign to the first fraction of the list. Note that this optimization procedure is not justified in principle with mini-batch adversarial training but we found it to work well in our experiments.
Experiments
To evaluate our approach, we implement Domain Adversarial Neural Networks (DANN), (Ganin et al., 2016) replacing the JS-divergence (domain classifier) with our proposed -admissible distances (Section 5). Our experiments address the following questions: (i) Does DANN suffer the limitation as anticipated (Section 3) when faced with label distribution shift? (ii) If so, do our -admissible distances overcome these limitations? (iii) Absent shifting label distributions, is our approach comparable to DANN?
We implement adversarial training with different -admissible distances (Section 5) and compare their performance with vanilla DANN. We name different implementations as follows. (a) Source: source-only training. (b) DANN: JS-divergence (original DANN). (c) WDANN: original Wasserstein distance. (d) fDANN-: -admissible -divergence, JS-version (7). (e) sDANN-: reweighting JS-divergence (10), optimized by our proposed implicit-reweighting-by-sorting. (f) WDANN1-: -admissible Wasserstein distance (8) with soft-plus on critic output. (g) WDANN2-: -admissible Wasserstein distance (8) with RELU on critic output. (h) sWDANN-: reweighting Wasserstein distance (10), optimized by implicit-reweighting-by-sorting. Adversarial training on Wasserstein distances follows Gulrajani et al. (2017) but uses one-sided gradient-penalty. We always perform adversarial training with alternating minimization (see Appendix for details).
We create a mixture-of-Gaussians binary classification dataset where each domain contains two Gaussian distributions, one per label. For each label, the distributions in source and target domain have a small overlap, validating the assumptions in our analysis. We create a label distribution shift with balanced source data (50% 0’s v.s. 50% 1’s) and imbalanced target data (10% 0’s v.s. 90% 1’s) as shown in Figure 3(a). Table 1 shows the target domain accuracy for different approaches. As expected, vanilla DANN fails under label distribution shift because a proportion of samples from the target inputs are mapped to regions of latent space corresponding to negative samples from the source domain (Figure 3(b)). In contrast, with our -admissible distances, domain-adversarial networks are able to adapt successfully (Figure 3(c)), improving target accuracy from 89% (source-only) to 99% accuracy (with adaptation), except the cases where is too small to admit a good target domain classifier (in this case we need ). We also experiment with label-balanced target data (no label distribution shift). All approaches except source-only achieve an accuracy above 99%, so we do not present these results in a separate table.
Real datasets
We experiment with the MNIST and USPS handwritten-digit datasets. For both directions (MNIST USPS and USPS MNIST), we experiment both with and without label distribution shift. The source domain is always class-balanced. To simulate label distribution shift, we sample target data from only half of the digits, e.g. or . Tables 2 and 3 show the target domain accuracy for different approaches with/without label distribution shift. As on synthetic datasets, we observe that DANN performs much worse than source-only training under label distribution shift. Compared to the original DANN, our approaches fair significantly better while achieving comparable performance absent label distribution shift.
Related work
Our paper makes distinct theoretical and algorithmic contributions to the domain adaptation literature. Concerning theory, we provide a risk bound that explains the behavior of domain-adversarial methods with model-independent assumptions on data distributions. Existing theories without assumptions of contained support (Ben-David et al., 2007, 2010a; Ben-David & Urner, 2014; Mansour et al., 2009; Cortes & Mohri, 2011) do not exhibit this property since (i) when applied to the input space, their results are not concerned with domain-adversarial learning as no latent space is introduced, (ii) when applied to the latent space, their unobservable constants/assumptions become -dependent, which is undesirable as explained in Section 4. Concerning algorithms, several prior works demonstrate empirical success of domain-adversarial approaches, (Tzeng et al., 2014; Ganin et al., 2016; Bousmalis et al., 2016; Tzeng et al., ; Hoffman et al., 2017; Shu et al., 2018). Among those, Cao et al. (2018a, b) deal with the label distribution shift scenario through a heuristic reweighting scheme. However, their re-weighting presumes that they have a good classifier in the first place, creating a cyclic dependency.
Conclusions
We propose to use asymmetrically-relaxed distribution distances in domain-adversarial learning objectives, replacing standard ones which seek exact distribution matching in the latent space. While overcoming some limitations of the standard objectives under label distribution mismatch, we provide a theoretical guarantee for target domain performance under assumptions on data distributions. As our connectedness assumptions may not cover all cases where we expect domain adaptation to work in practice, (e.g. when the two domains are completely disjoint), providing analysis under other type of assumptions might be of future interest.
This work was made possible by a generous grant from the Center for Machine Learning and Health, a joint venture of Carnegie Mellon University, UPMC, and the University of Pittsburgh, in support of our collaboration with Abridge AI to develop robust models for machine learning in healthcare. We are also supported in this line of research by a generous faculty award from Salesforce Research.
References
Appendix A Proofs
where we use the following fact: For any fixed , , if then for all . Similarly, when , we have for all . Thus we can move the integral over inside the absolute operation. ∎
Applying the fact that for all ,
Let be the uniform distribution over $p_{T}ff(x)=1x\in[0,\rho_{S}]\cup[2,2+\rho_{T}]\rho_{S}\rho_{T}\phix\in\phi(x)=xx\in[2,2+\rho_{T}]\phi(x)=(x-2)\rho_{S}/\rho_{T}x\in[2+\rho_{T},3]\phi(x)=1-(3-x)(1-\rho_{S})/(1-\rho_{T})\phip_{S}^{\phi}p_{T}^{\phi}(z)=\rho_{T}/\rho_{S}z\in[0,\rho_{S}]p_{T}^{\phi}(z)=(1-\rho_{T})/(1-\rho_{S})z\in[\rho_{S},1]p_{S}^{\phi}(z)=1z\in\sup_{z\in\mathcal{Z}}p_{T}^{\phi}(z)/p_{S}^{\phi}(z)\leq\max\left\{\frac{\rho_{T}}{\rho_{S}},\frac{1-\rho_{T}}{1-\rho_{S}}\right\}$ . ∎
Instead of working with Assumption 4.2 we first extend Construction 4.1 with the following addition
(Connectedness from target domain to source domain.) Let be a set of points in the raw data space that satisfy the following conditions:
.
For any , there exists such that one can find a sequence of points with , , and for all .
We now proceed to prove bound based on Constructions 4.1 and A.1. Later on we will show that Assumption 4.2 indicates the existence of Construction A.1 so that the bound holds with a combination of Constructions 4.1 and Assumption 4.2.
For the second term of (2), plugging in gives
Applying to the first part of (13) gives
Similarly, applying to the second part of (13) gives
Combining the second part of (14) and the second part of (15)
For if then and . So if or holds we must have . Therefore, following (16) gives
Now looking at the first part of (14) and the first part of (15)
Next we show that the first part of (18) is . Recall that and if there exists with a sequence of points such that , , and for all . So for and , we pick such . Since is -Lipschitz and we have and for all . Applying the fact that we know that if for some then . From and we have . Since we can conclude and thus if for any . Therefore, if , neither nor can hold. Hence the first part of (18) is .
So far by combining (17) and (18) we have shown that the sum of (14) and (15) (which are the first two parts of (13)) can be upper bounded by . For the third part of (13) we have
Plugging (12) and (20) into (2) gives the result of Theorem 4.3 under Constructions 4.1 and A.1.
It remains to show that Assumption 4.2 implies the existence of a Construction A.1. To prove this, we first write as . By Construction 4.1 we have . From (19) we have
Setting and in Assumption 4.2 gives a construction of Construction A.1, thus concluding the proof.
The Fenchel Dual of can be written as
where .
Therefore, the modified -divergence can be written as
According to Nowozin et al. (2016), the GAN objecitve uses . Hence , and . So we need to parameterize T:\mathcal{Z}\mapsto\big{(}-\infty,\log\frac{1}{2+\beta}\big{]}. with satisfies the range constraint for . Plugging into (6) gives the result of (7).
Appendix B Experiment Details
Synthetic datasets For source distribution, we sample class from and class from . For target distribution, we sample class from and class from . For label classifier, we use a fully-connect neural net with 3 hidden layers and the latent space is set as the last hidden layer. For domain classifier (critic) we use a fully-connect neural net with 2 hidden layers .
Image datasets For MNIST we subsample 2000 data points and for USPS we subsample 1800 data points. The subsampling process depends on the given label distribution (e.g. shift or no-shift). For label classifier, we use LeNet and the latent space is set as the last hidden layer. For domain classifier (critic) we use a fully-connect neural net with 2 hidden layers .
In all experiments, we use in the objective (4) and ADAM with learning rate 0.0001 and as the optimizer. We also apply a l2-regularization on the weights of and with coefficient .
More discussion on synthetic experiments. The only unexcepted failure is WDANN1-, which achieves only 20% accuracy in 2-out-of-5 runs. Looking in to the low accuracy runs we found that the l2-norm of the encoder weights is clearly higher than the successful runs. Large l2-norm of weights in likely results in a high Lipschitz constant , which is undesirable according to our theory. We only implemented l2-regularization to encourage Lipschitz continuity of the encoder , which might be insufficient. How to enforce Lipschitz continuity of a neural network is still an open question. Trying more sophisticated approaches for Lipschitz continuity can a future direction.
Choice of . Since a good value of may depend on the knowledge of target label distribution which is unknown, we experiment with different values of . Empirically we did not find any clear pattern of correlation between value of and performance as long as it is big enough to accommodate label distribution shift so we would leave it as an open question. In practice we suggest to use a moderate value such as or , or estimate based on prior knowledge of target label distribution.