paper-with-me

홈 › Papers

Do Adversarially Robust ImageNet Models Transfer Better?

2020-07-16 · NeurIPS 2020 12 · Hadi Salman, Andrew Ilyas, Logan Engstrom, Ashish Kapoor, Aleksander Madry

Transfer learning is a widely-used paradigm in deep learning, where models pre-trained on standard datasets can be efficiently adapted to downstream tasks. Typically, better pre-trained models yield better transfer results, suggesting that initial accuracy is a key aspect of transfer learning performance. In this work, we identify another such aspect: we find that adversarially robust models, while less accurate, often perform better than their standard-trained counterparts when used for transfer learning. Specifically, we focus on adversarially robust ImageNet classifiers, and show that they yield improved accuracy on a standard suite of downstream classification tasks. Further analysis uncovers more differences between robust and standard models in the context of transfer learning. Our results are consistent with (and in fact, add to) recent hypotheses stating that robustness leads to improved feature representations. Our code and models are available at https://github.com/Microsoft/robust-models-transfer .

📄 PDF Abstract BibTeX arXiv:2007.08489

Code (2)

MadryLab/robustness 공식 구현 pytorch
lengstrom/gitlinks

Tasks

Object RecognitionTransfer Learning

Similar Papers 제목 키워드 기반

Adversarially-Trained Deep Nets Transfer Better: Illustration on Image Classification

2020-07-11 · ICLR 2021 1 · Francisco Utrera, Evan Kravitz, N. Benjamin Erichson, Rajiv Khanna 외

Transfer learning has emerged as a powerful methodology for adapting pre-trained deep neural networks on image recognition tasks to new domains. This process consists of taking a neural network pre-trained on a large fea…

ClassificationGeneral Classificationimage-classificationImage Classification+1

Adversarially Robust Few-Shot Learning: A Meta-Learning Approach

2019-10-02 · NeurIPS 2020 12 · Micah Goldblum, Liam Fowl, Tom Goldstein

Previous work on adversarially robust neural networks for image classification requires large training sets and computationally expensive training procedures. On the other hand, few-shot learning methods are highly vulne…

ClassificationFew-Shot Image ClassificationFew-Shot LearningGeneral Classification+4

Exploring the Relationship between Architecture and Adversarially Robust Generalization

2022-09-28 · Aishan Liu, Shiyu Tang, Siyuan Liang, Ruihao Gong 외

Adversarial training has been demonstrated to be one of the most effective remedies for defending adversarial examples, yet it often suffers from the huge robustness generalization gap on unseen testing adversaries, deem…

Exploring the Relationship Between Architectural Design and Adversarially Robust Generalization

2023-01-01 · CVPR 2023 1 · Aishan Liu, Shiyu Tang, Siyuan Liang, Ruihao Gong 외

Adversarial training has been demonstrated to be one of the most effective remedies for defending adversarial examples, yet it often suffers from the huge robustness generalization gap on unseen testing adversaries, …

Inverting Adversarially Robust Networks for Image Synthesis

2021-06-13 · Renan A. Rojas-Gomez, Raymond A. Yeh, Minh N. Do, Anh Nguyen

Despite unconditional feature inversion being the foundation of many image synthesis applications, training an inverter demands a high computational budget, large decoding capacity and imposing conditions such as autoreg…

Anomaly DetectionDeep Feature InversionImage DenoisingImage Generation+1