paper-with-me

홈 › Papers

Robust Generalization against Corruptions via Worst-Case Sharp ness Minimization

2023-02-14 · journal 2023 2 · Zhuo Huang, Xiaobo Xia, Li Shen, Jun Yu, Chen Gong, Bo Han, Tongliang Liu

Robust generalization aims to deal with the most challenging data distributions which are rarely presented in training set and contain severe noise corruptions. Common solutions such as distributionally robust optimization (DRO) focus on the worst-case empirical risk to ensure low training error on the uncommon noisy distributions. However, due to the over-parameterized model being optimized on scarce worst-case data, DRO fails to produce a smooth loss landscape, thus struggling on generalizing well to the test set. Therefore, instead of focusing on the worst-case risk minimization, we propose SharpDRO by penalizing the sharpness of the worst-case distribution, which measures the loss changes around the neighbor of learning parameters. Through worst-case sharpness minimization, the proposed method successfully produces a flat loss curve on the corrupted distributions, thus achieving robust generalization. Moreover, by considering whether the distribution annotation is available, we apply SharpDRO to two problem settings and design a worst-case selection process for robust generalization. Through simulating real-world noisy distributions using CIFAR10/100 and ImageNet30 datasets, we show that SharpDRO exhibits strong generalization ability against severe corruptions and exceeds well-known baseline methods with large performance gains. Anonymous Url: I certify that there is no URL (e.g., github page) that could be used to find authors’ identity.

📄 PDF Abstract BibTeX

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

Robust Generalization against Photon-Limited Corruptions via Worst-Case Sharpness Minimization

2023-03-23 · CVPR 2023 1 · Zhuo Huang, Miaoxi Zhu, Xiaobo Xia, Li Shen 외

Robust generalization aims to tackle the most challenging data distributions which are rare in the training set and contain severe noises, i.e., photon-limited corruptions. Common solutions such as distributionally robus…

Defending Against Image Corruptions Through Adversarial Augmentations

2021-04-02 · ICLR 2022 4 · Dan A. Calian, Florian Stimberg, Olivia Wiles, Sylvestre-Alvise Rebuffi 외

Modern neural networks excel at image classification, yet they remain vulnerable to common image corruptions such as blur, speckle noise or fog. Recent methods that focus on this problem, such as AugMix and DeepAugment, …

image-classificationImage Classification

A simple way to make neural networks robust against diverse image corruptions

2020-01-16 · ECCV 2020 8 · Evgenia Rusak, Lukas Schott, Roland S. Zimmermann, Julian Bitterwolf 외

The human visual system is remarkably robust against a wide range of naturally occurring variations and corruptions like rain or snow. In contrast, the performance of modern image recognition models strongly degrades whe…

Testing Robustness Against Unforeseen Adversaries

2019-08-21 · Max Kaufmann, Daniel Kang, Yi Sun, Steven Basart 외

Adversarial robustness research primarily focuses on L_p perturbations, and most defenses are developed with identical training-time and test-time adversaries. However, in real-world applications developers are unlikely …

Adversarial DefenseAdversarial Robustness

Improving Robustness against Real-World and Worst-Case Distribution Shifts through Decision Region Quantification

2022-05-19 · Leo Schwinn, Leon Bungert, An Nguyen, René Raab 외

The reliability of neural networks is essential for their use in safety-critical applications. Existing approaches generally aim at improving the robustness of neural networks to either real-world distribution shifts (e.…