paper-with-me

Papers

Improving Generalization via Uncertainty Driven Perturbations

2022-02-11 · Matteo Pagliardini, Gilberto Manunza, Martin Jaggi, Michael I. Jordan, Tatjana Chavdarova

Recently Shah et al., 2020 pointed out the pitfalls of the simplicity bias - the tendency of gradient-based algorithms to learn simple models - which include the model's high sensitivity to small input perturbations, as well as sub-optimal margins. In particular, while Stochastic Gradient Descent yields max-margin boundary on linear models, such guarantee does not extend to non-linear models. To mitigate the simplicity bias, we consider uncertainty-driven perturbations (UDP) of the training data points, obtained iteratively by following the direction that maximizes the model's estimated uncertainty. The uncertainty estimate does not rely on the input's label and it is highest at the decision boundary, and - unlike loss-driven perturbations - it allows for using a larger range of values for the perturbation magnitude. Furthermore, as real-world datasets have non-isotropic distances between data points of different classes, the above property is particularly appealing for increasing the margin of the decision boundary, which in turn improves the model's generalization. We show that UDP is guaranteed to achieve the maximum margin decision boundary on linear models and that it notably increases it on challenging simulated datasets. For nonlinear models, we show empirically that UDP reduces the simplicity bias and learns more exhaustive features. Interestingly, it also achieves competitive loss-based robustness and generalization trade-off on several datasets.

📄 PDF Abstract BibTeX arXiv:2202.05737

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

Improved Generalization-Robustness Trade-off via Uncertainty Targeted Attacks

2021-09-29 · Matteo Pagliardini, Gilberto Manunza, Martin Jaggi, Tatjana Chavdarova

The deep learning models' sensitivity to small input perturbations raises security concerns and limits their use for applications where reliability is critical. While adversarial training methods aim at training more rob…

Universal Adversarial Perturbation via Prior Driven Uncertainty Approximation

2019-10-01 · ICCV 2019 10 · Hong Liu, Rongrong Ji, Jie Li, Baochang Zhang 외

Deep learning models have shown their vulnerabilities to universal adversarial perturbations (UAP), which are quasi-imperceptible. Compared to the conventional supervised UAPs that suffer from the knowledge of training d…

Formalizing Generalization and Robustness of Neural Networks to Weight Perturbations

2021-03-03 · Yu-Lin Tsai, Chia-Yi Hsu, Chia-Mu Yu, Pin-Yu Chen

Studying the sensitivity of weight perturbation in neural networks and its impacts on model performance, including generalization and robustness, is an active research topic due to its implications on a wide range of mac…

Model Compression

Formalizing Generalization and Adversarial Robustness of Neural Networks to Weight Perturbations

2021-12-01 · NeurIPS 2021 12 · Yu-Lin Tsai, Chia-Yi Hsu, Chia-Mu Yu, Pin-Yu Chen

Studying the sensitivity of weight perturbation in neural networks and its impacts on model performance, including generalization and robustness, is an active research topic due to its implications on a wide range of mac…

Adversarial RobustnessModel Compression

Calibrating Uncertainty for Zero-Shot Adversarial CLIP

2025-12-15 · Wenjing Lu, Zerui Tao, Yuning Qiu, Dongping Zhang 외 arxiv

CLIP delivers strong zero-shot classification but remains highly vulnerable to adversarial attacks. Prior adversarial fine-tuning work primarily matches predicted logits between clean and adversarial examples, which over…

Zero-shot GeneralizationAdversarial Robustness