arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2003.04286stat.MLcs.CVcs.LGcs.NE

Manifold Regularization for Locally Stable Deep Neural Networks

CSAIL(麻省理工学院计算机科学与人工智能实验室);MIT(麻省理工学院)

Charles Jin, Martin Rinard

英文摘要:

We apply concepts from manifold regularization to develop new regularization techniques for training locally stable deep neural networks. Our regularizers are based on a sparsification of the graph Laplacian which holds with high probability when the data is sparse in high dimensions, as is common in deep learning. Empirically, our networks exhibit stability in a diverse set of perturbation models, including $\ell_2$, $\ell_\infty$, and Wasserstein-based perturbations; in particular, we achieve 40% adversarial accuracy on CIFAR-10 against an adaptive PGD attack using $\ell_\infty$ perturbations of size $ε= 8/255$, and state-of-the-art verified accuracy of 21% in the same perturbation model. Furthermore, our techniques are efficient, incurring overhead on par with two additional parallel forward passes through the network.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑