Pixel to Binary Embedding Towards Robustness for CNNs
There are several problems with the robustness of Convolutional Neural Networks (CNNs). For example, the prediction of CNNs can be changed by adding a small magnitude of noise to an input, and the performances of CNNs are degraded when the distribution of input is shifted by a transformation never seen during training (e.g., the blur effect). There are approaches to replace pixel values with binary embeddings to tackle the problem of adversarial perturbations, which successfully improve robustness. In this work, we propose Pixel to Binary Embedding (P2BE) to improve the robustness of CNNs. P2BE is a learnable binary embedding method as opposed to previous hand-coded binary embedding methods. P2BE outperforms other binary embedding methods in robustness against adversarial perturbations and visual corruptions that are not shown during training.
Code (1)
Similar Papers 제목 키워드 기반
Iris Presentation Attack Detection by Attention-based and Deep Pixel-wise Binary Supervision Network
Iris presentation attack detection (PAD) plays a vital role in iris recognition systems. Most existing CNN-based iris PAD solutions 1) perform only binary label supervision during the training of CNNs, serving global inf…
Iris RecognitionUncertainty-based method for improving poorly labeled segmentation datasets
The success of modern deep learning algorithms for image segmentation heavily depends on the availability of large datasets with clean pixel-level annotations (masks), where the objects of interest are accurately delinea…
Image SegmentationSegmentationSemantic SegmentationAttribute CNNs for Word Spotting in Handwritten Documents
Word spotting has become a field of strong research interest in document image analysis over the last years. Recently, AttributeSVMs were proposed which predict a binary attribute representation. At their time, this infl…
AttributeSegmentationWord Spotting In Handwritten DocumentsAdvFilter: Predictive Perturbation-aware Filtering against Adversarial Attack via Multi-domain Learning
High-level representation-guided pixel denoising and adversarial training are independent solutions to enhance the robustness of CNNs against adversarial attacks by pre-processing input data and re-training models, respe…
Adversarial AttackAdversarial RobustnessDenoisingA Novel Global Spatial Attention Mechanism in Convolutional Neural Network for Medical Image Classification
Spatial attention has been introduced to convolutional neural networks (CNNs) for improving both their performance and interpretability in visual tasks including image classification. The essence of the spatial attention…
Binary ClassificationClassificationGeneral Classificationimage-classification+2