arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2102.01336cs.LGcs.AI
收藏

用于分布外检测的概率信任区间

Probabilistic Trust Intervals for Out of Distribution Detection

Quansight;Indian Institute of Technology(印度理工学院)

Gagandeep Singh, Ishan Mishra, Deepak Mishra

AI总结:

本文提出一种基于概率信任区间的方法,通过在推理时采样网络权重并利用输出不一致性进行分布外检测,无需OOD样本即可在多个数据集上显著优于基线方法。

摘要:

深度学习网络区分分布内(ID)和分布外(OOD)输入的能力对于确保AI系统的可靠性和可信度至关重要。现有的OOD检测方法通常涉及复杂的架构创新,例如集成模型,这些方法虽然提高了检测精度,但显著增加了模型复杂度和训练时间。其他方法利用替代样本来模拟OOD输入,但这些方法可能无法在不同类型的OOD数据上很好地泛化。在本文中,我们提出了一种简单而新颖的技术,以在不改变预训练网络原始参数的情况下增强其OOD检测能力。我们的方法为每个网络权重定义了概率信任区间,该区间由分布内数据确定。在推理过程中,采样额外的权重值,并利用输出之间的不一致性进行OOD检测。我们提出了一种度量标准来量化这种不一致性,并通过实证证据验证了其有效性。我们的方法在多个OOD数据集上显著优于各种基线方法,且无需真实或替代的OOD样本。我们在MNIST、Fashion-MNIST、CIFAR-10、CIFAR-100和CIFAR-10-C(CIFAR-10的损坏增强版本)上,跨多种神经网络架构(例如VGG-16、ResNet-20、DenseNet-100)评估了我们的方法。在MNIST-FashionMNIST设置中,我们的方法在95%真阳性率(TPR)下的假阳性率(FPR)为12.46%,而最佳基线方法为27.09%。在对抗性和损坏数据集(如CIFAR-10-C)上,我们提出的方法能轻松区分干净输入和噪声输入。这些结果证明了我们的方法在识别损坏和对抗性输入方面的鲁棒性,且在训练过程中无需OOD样本。

英文摘要:

The ability of a deep learning network to distinguish between in-distribution (ID) and out-of-distribution (OOD) inputs is crucial for ensuring the reliability and trustworthiness of AI systems. Existing OOD detection methods often involve complex architectural innovations, such as ensemble models, which, while enhancing detection accuracy, significantly increase model complexity and training time. Other methods utilize surrogate samples to simulate OOD inputs, but these may not generalize well across different types of OOD data. In this paper, we propose a straightforward yet novel technique to enhance OOD detection in pre-trained networks without altering its original parameters. Our approach defines probabilistic trust intervals for each network weight, determined using in-distribution data. During inference, additional weight values are sampled, and the resulting disagreements among outputs are utilized for OOD detection. We propose a metric to quantify this disagreement and validate its effectiveness with empirical evidence. Our method significantly outperforms various baseline methods across multiple OOD datasets without requiring actual or surrogate OOD samples. We evaluate our approach on MNIST, Fashion-MNIST, CIFAR-10, CIFAR-100 and CIFAR-10-C (a corruption-augmented version of CIFAR-10), across various neural network architectures (e.g., VGG-16, ResNet-20, DenseNet-100). On the MNIST-FashionMNIST setup, our method achieves a False Positive Rate (FPR) of 12.46\% at 95\% True Positive Rate (TPR), compared to 27.09\% achieved by the best baseline. On adversarial and corrupted datasets such as CIFAR-10-C, our proposed method easily differentiate between clean and noisy inputs. These results demonstrate the robustness of our approach in identifying corrupted and adversarial inputs, all without requiring OOD samples during training.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑