Mining Data Impressions from Deep Models as Substitute for the Unavailable Training Data
Pretrained deep models hold their learnt knowledge in the form of model parameters. These parameters act as "memory" for the trained models and help them generalize well on unseen data. However, in absence of training data, the utility of a trained model is merely limited to either inference or better initialization towards a target task. In this paper, we go further and extract synthetic data by leveraging the learnt model parameters. We dub them "Data Impressions", which act as proxy to the training data and can be used to realize a variety of tasks. These are useful in scenarios where only the pretrained models are available and the training data is not shared (e.g., due to privacy or sensitivity concerns). We show the applicability of data impressions in solving several computer vision tasks such as unsupervised domain adaptation, continual learning as well as knowledge distillation. We also study the adversarial robustness of lightweight models trained via knowledge distillation using these data impressions. Further, we demonstrate the efficacy of data impressions in generating data-free Universal Adversarial Perturbations (UAPs) with better fooling rates. Extensive experiments performed on benchmark datasets demonstrate competitive performance achieved using data impressions in absence of original training data.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial RobustnessContinual LearningDomain AdaptationKnowledge DistillationUnsupervised Domain AdaptationMethods 이 논문이 사용한 방법론
Similar Papers 제목 키워드 기반
The Economic Value of User Tracking for Publishers
Regulators and browsers increasingly restrict user tracking to protect users' privacy online. In two large-scale empirical studies, we study the economic implications for publishers relying on selling advertising space t…
Sexing Caucasian 2D footprints using convolutional neural networks
Footprints are left, or obtained, in a variety of scenarios from crime scenes to anthropological investigations. Determining the sex of a footprint can be useful in screening such impressions and attempts have been made …
FrictionImpression-CLIP: Contrastive Shape-Impression Embedding for Fonts
Fonts convey different impressions to readers. These impressions often come from the font shapes. However, the correlation between fonts and their impression is weak and unstable because impressions are subjective. To ca…
Cross-Modal RetrievalRetrievalArtificial Impressions: Evaluating Large Language Model Behavior Through the Lens of Trait Impressions
We introduce and study artificial impressions--patterns in LLMs' internal representations of prompts that resemble human impressions and stereotypes based on language. We fit linear probes on generated prompts to predict…
ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models
Deep neural networks (DNNs) are one of the most prominent technologies of our time, as they achieve state-of-the-art performance in many machine learning tasks, including but not limited to image classification, text min…
Adversarial AttackAdversarial DefenseAutonomous DrivingDimensionality Reduction+2