Skip to content

Adversarial Training–Based Deep Imbalanced Learning

Sep 2026 · INFORMS journal on computing · 0 citations

TL;DR

Extensive evaluations on seven real-world financial data sets demonstrate that ATDIL outperforms state-of-the-art imbalanced learning methods across multiple metrics while exhibiting superior resilience under adversarial conditions, offering a robust and practical framework for enhancing financial fraud detection systems.

Abstract

Financial fraud detection is crucial in the banking and financial sectors, but it faces considerable challenges because of class imbalance in transaction data and the growing threat of adversarial attacks. These issues frequently undermine the effectiveness of deep neural networks despite their demonstrated potential in this domain. To address these challenges, this paper proposes a novel approach, adversarial training–based deep imbalanced learning (ATDIL), which integrates imbalanced learning and adversarial defense into a unified approach. ATDIL leverages an adversarial autoencoder to efficiently synthesize high-quality minority-class samples that are informative and adversarial, while maintaining low computational complexity. The effectiveness of ATDIL is rigorously validated through both theoretical and experimental analyses. Theoretically, the optimal solution form for the inner optimization problem in ATDIL is derived, and its convergence under mild assumptions is established. Extensive evaluations on seven real-world financial data sets demonstrate that ATDIL outperforms state-of-the-art imbalanced learning methods across multiple metrics while exhibiting superior resilience under adversarial conditions. This combination of theoretical guarantees and empirical evidence highlights ATDIL’s ability to effectively address class imbalance and model security, offering a robust and practical framework for enhancing financial fraud detection systems. History: Accepted by Ram Ramesh, Area Editor for Data Science and Machine Learning. Funding: This work was supported by the National Natural Science Foundation of China [Grant 72401208], the Key Program of the National Natural Science Foundation of China [Grant 72331007], the Natural Science Foundation of Sichuan Province [Grant 2025NSFSC1981], the Postdoctoral Fellowship Program of the China Postdoctoral Science Foundation [Grant GZB20240504], the International Visiting Program for Excellent Young Scholars of Sichuan University (SCU), and the Humanities and Social Science Youth Foundation of the Ministry of Education of China [Grant 23YJCZH088]. Supplemental Material: The software that supports the findings of this study is available within the paper and its Supplemental Information ( https://pubsonline.informs.org/doi/suppl/10.1287/ijoc.2025.1251 ) as well as from the IJOC GitHub software repository ( https://github.com/INFORMSJoC/2025.1251 ). The complete IJOC Software and Data Repository is available at https://informsjoc.github.io/ .

View source

Similar papers

Open access 2026

A Two-Stage Adversarial Defense Architecture for Robust Fraud Detection on Imbalanced Financial Data

This paper proposes a unified dual-defense framework that jointly integrates adversarial training with a denoising autoencoder (DAE)-based filtering mechanism, specifically designed for imbalanced tabular financial data under adversarial conditions, and explicitly targets adversarial robustness in financial fraud detec...

M. Javeed, Jannatul Maua, M. Mridha et al. · 0 citations
Sep 2026

Combating Overfitting of Adversarial Training Efficiently via Balanced Instance Adaptive Defense

Adversarial training, one of the most effective methods for enhancing neural network robustness, is typically formulated as a min-max game between an attacker and a defender. Despite its success, most adversarial training methods suffer from robust overfitting, leading to a significant gap in robustness between the tra...

Xin-Yue Zhang, Shao-Cong Wu, Qiben Shan et al. · 0 citations
Open access Aug 2026

Enhanced Robustness in Neural Network Models against Adversarial Attacks and their Performance Analysis

Among the evaluated models, CNNs exhibit the highest baseline robustness, whereas DNNs and RNNs rely more heavily on defense mechanisms to maintain performance, whereas DNNs and RNNs rely more heavily on defense mechanisms to maintain performance.

Surekha M., A. K. Sagar, Vineeta Khemchandani · 0 citations
Preprint Aug 2026

Faults That Fortify: CNN Adversarial Robustness via GPU Undervolting

GPU undervolting is a readily deployable hardware-level defense requiring no algorithmic change, and opens a promising direction in which robustness and energy efficiency move together.

Behnam Omidi, Ahmad Tahmasivand, Husam Alsyouri et al. · 0 citations
Open access Sep 2026

White-Box and Transfer-Based Black-Box Adversarial Attacks on Neural Network Models for Credit Card Fraud Detection

Machine learning models deployed for credit card fraud detection operate in adversarial, security-critical settings, and their robustness against evasion attacks directly affects financial and operational risk. However, despite extensive work on models for credit card fraud detection, comparatively fewer studies have e...

A. Miljković, Milan Gnjatović, Marijana Joksimović et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.