paper-with-me

Papers

Which Models have Perceptually-Aligned Gradients? An Explanation via Off-Manifold Robustness

2023-05-30 · NeurIPS 2023 11 · Suraj Srinivas, Sebastian Bordt, Hima Lakkaraju

One of the remarkable properties of robust computer vision models is that their input-gradients are often aligned with human perception, referred to in the literature as perceptually-aligned gradients (PAGs). Despite only being trained for classification, PAGs cause robust models to have rudimentary generative capabilities, including image generation, denoising, and in-painting. However, the underlying mechanisms behind these phenomena remain unknown. In this work, we provide a first explanation of PAGs via \emph{off-manifold robustness}, which states that models must be more robust off- the data manifold than they are on-manifold. We first demonstrate theoretically that off-manifold robustness leads input gradients to lie approximately on the data manifold, explaining their perceptual alignment. We then show that Bayes optimal models satisfy off-manifold robustness, and confirm the same empirically for robust models trained via gradient norm regularization, randomized smoothing, and adversarial training with projected gradient descent. Quantifying the perceptual alignment of model gradients via their similarity with the gradients of generative models, we show that off-manifold robustness correlates well with perceptual alignment. Finally, based on the levels of on- and off-manifold robustness, we identify three different regimes of robustness that affect both perceptual alignment and model accuracy: weak robustness, bayes-aligned robustness, and excessive robustness. Code is available at \url{https://github.com/tml-tuebingen/pags}.

📄 PDF Abstract BibTeX arXiv:2305.19101

Code (1)

tml-tuebingen/pags 공식 구현 pytorch

Tasks

DenoisingImage Generation

Similar Papers 제목 키워드 기반

The Manifold Hypothesis for Gradient-Based Explanations

2022-06-15 · Sebastian Bordt, Uddeshya Upadhyay, Zeynep Akata, Ulrike Von Luxburg

When do gradient-based explanation algorithms provide perceptually-aligned explanations? We propose a criterion: the feature attributions need to be aligned with the tangent space of the data manifold. To provide evidenc…

Diabetic Retinopathy Detection

Adversarially robust segmentation models learn perceptually-aligned gradients

2022-04-03 · Pedro Sandoval-Segura

The effects of adversarial training on semantic segmentation networks has not been thoroughly explored. While previous work has shown that adversarially-trained image classifiers can be used to perform image synthesis, w…

Image GenerationImage InpaintingSegmentationSemantic Segmentation

Do Perceptually Aligned Gradients Imply Adversarial Robustness?

2022-07-22 · Roy Ganz, Bahjat Kawar, Michael Elad

Adversarially robust classifiers possess a trait that non-robust models do not -- Perceptually Aligned Gradients (PAG). Their gradients with respect to the input align well with human perception. Several works have ident…

Adversarial RobustnessImage Classification

Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?

2019-10-18 · Simran Kaur, Jeremy Cohen, Zachary C. Lipton

For a standard convolutional neural network, optimizing over the input pixels to maximize the score of some target class will generally produce a grainy-looking version of the original image. However, Santurkar et al. (2…

Adversarial Robustness

On the Benefits of Models with Perceptually-Aligned Gradients

2020-05-04 · Gunjan Aggarwal, Abhishek Sinha, Nupur Kumari, Mayank Singh

Adversarial robust models have been shown to learn more robust and interpretable features than standard trained models. As shown in [\cite{tsipras2018robustness}], such robust models inherit useful interpretable properti…