Rearchitecting Classification Frameworks For Increased Robustness
While generalizing well over natural inputs, neural networks are vulnerable to adversarial inputs. Existing defenses against adversarial inputs have largely been detached from the real world. These defenses also come at a cost to accuracy. Fortunately, there are invariances of an object that are its salient features; when we break them it will necessarily change the perception of the object. We find that applying invariants to the classification task makes robustness and accuracy feasible together. Two questions follow: how to extract and model these invariances? and how to design a classification paradigm that leverages these invariances to improve the robustness accuracy trade-off? The remainder of the paper discusses solutions to the aformenetioned questions.
Code (0)
등록된 구현이 없습니다.
Tasks
Autonomous DrivingClassificationGeneral ClassificationObjectSimilar Papers 제목 키워드 기반
High Precision Audience Expansion via Extreme Classification in a Two-Sided Marketplace
Airbnb search must balance a worldwide, highly varied supply of homes with guests whose location, amenity, style, and price expectations differ widely. Meeting those expectations hinges on an efficient retrieval stage th…
DeltaNN: Assessing the Impact of Computational Environment Parameters on the Performance of Image Recognition Models
Image recognition tasks typically use deep learning and require enormous processing power, thus relying on hardware accelerators like GPUs and TPUs for fast, timely processing. Failure in real-time image recognition task…
Autonomous DrivingDeep LearningEffective Targeted Attacks for Adversarial Self-Supervised Learning
Recently, unsupervised adversarial training (AT) has been highlighted as a means of achieving robustness in models without any label information. Previous studies in unsupervised AT have mostly focused on implementing se…
Adversarial AttackSelf-Supervised LearningAdversarial Robustness of Time-Series Classification for Crystal Collimator Alignment
In this paper, we analyze and improve the adversarial robustness of a convolutional neural network (CNN) that assists crystal-collimator alignment at CERN's Large Hadron Collider (LHC) by classifying a beam-loss monitor …
Adversarial RobustnessRobust Object Classification Approach using Spherical Harmonics
In this paper, we present a robust spherical harmonics approach for the classification of point cloud-based objects. Spherical harmonics have been used for classification over the years, with several frameworks existing …
ClassificationData AugmentationGeneral ClassificationObject