arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2102.05913cs.SE
收藏

RobOT:面向深度学习系统的鲁棒性测试

RobOT: Robustness-Oriented Testing for Deep Learning Systems

Jingyi Wang, Jialuo Chen, Youcheng Sun, Xingjun Ma, Dongxia Wang, Jun Sun, Peng Cheng

摘要:

最近,人们对将软件工程技术应用于深度学习(DL)系统的质量保证的兴趣显著增长。一个流行的方向是深度学习测试,其中对抗性示例(又名~缺陷)通过模糊搜索或在某些测试度量的帮助下的引导搜索来发现。然而,最近的研究表明,现有DL测试方法常用的神经元覆盖度量与模型鲁棒性无关。它也不是检验后模型稳健性置信度的有效度量。在这项工作中,我们提出了一个新的测试框架,称为面向健壮性测试(RobOT)来解决这个差距。RobOT的一个关键部分是定量测量1)每个测试用例在提高模型鲁棒性(通常通过再训练)方面的价值,以及2)模型鲁棒性改进的收敛质量。RobOT利用所提出的度量自动生成测试用例,提高模型的鲁棒性。所提出的指标也是一个强有力的指标,如何以及鲁棒性的改善,通过测试收敛。在多个基准数据集上的实验证实了RobOT在提高DL模型鲁棒性方面的有效性和效率,对抗鲁棒性提高了67.02%,比最先进的DeepGini高出50.65%。

英文摘要:

Recently, there has been a significant growth of interest in applying software engineering techniques for the quality assurance of deep learning (DL) systems. One popular direction is deep learning testing, where adversarial examples (a.k.a.~bugs) of DL systems are found either by fuzzing or guided search with the help of certain testing metrics. However, recent studies have revealed that the commonly used neuron coverage metrics by existing DL testing approaches are not correlated to model robustness. It is also not an effective measurement on the confidence of the model robustness after testing. In this work, we address this gap by proposing a novel testing framework called Robustness-Oriented Testing (RobOT). A key part of RobOT is a quantitative measurement on 1) the value of each test case in improving model robustness (often via retraining), and 2) the convergence quality of the model robustness improvement. RobOT utilizes the proposed metric to automatically generate test cases valuable for improving model robustness. The proposed metric is also a strong indicator on how well robustness improvement has converged through testing. Experiments on multiple benchmark datasets confirm the effectiveness and efficiency of RobOT in improving DL model robustness, with 67.02% increase on the adversarial robustness that is 50.65% higher than the state-of-the-art work DeepGini.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑