arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2008.01204cs.LGmath.OCstat.ML
收藏

构造不正确:微调神经网络以保证有限样本集的性能

Incorrect by Construction: Fine Tuning Neural Networks for Guaranteed Performance on Finite Sets of Examples

Johns Hopkins University Applied Physics Laboratory(约翰斯·霍普金斯大学应用物理实验室);Defense Nuclear Facilities Safety Board(美国国防核设施安全委员会)

Ivan Papusha, Rosa Wu, Joshua Brulé, Yanni Kouskoulas, Daniel Genin, Aurora Schmidt

摘要:

人们对使用形式化方法来保证深度神经网络的可靠性非常感兴趣。然而,这些技术也可以用于植入仔细选择的输入-输出对。我们提出了一种新技术的初步结果,该技术使用SMT求解器来微调ReLU神经网络的权重,以保证有限的特定示例集的结果。此过程可用于确保关键示例的性能,但也可用于插入难以找到的错误示例,从而触发意外性能。我们通过微调MNIST网络来展示这种方法,以错误地对特定图像进行分类,并讨论这种方法可能会损害自由共享的机器学习模型的可靠性。

英文摘要:

There is great interest in using formal methods to guarantee the reliability of deep neural networks. However, these techniques may also be used to implant carefully selected input-output pairs. We present initial results on a novel technique for using SMT solvers to fine tune the weights of a ReLU neural network to guarantee outcomes on a finite set of particular examples. This procedure can be used to ensure performance on key examples, but it could also be used to insert difficult-to-find incorrect examples that trigger unexpected performance. We demonstrate this approach by fine tuning an MNIST network to incorrectly classify a particular image and discuss the potential for the approach to compromise reliability of freely-shared machine learning models.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑