arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2209.07263cs.LGcs.AI
收藏

深度学习中的鲁棒性:好的(宽度),坏的(深度)和丑陋的(初始化)

Robustness in deep learning: The good (width), the bad (depth), and the ugly (initialization)

EPFL(洛桑联邦理工学院)

Zhenyu Zhu, Fanghui Liu, Grigorios G Chrysos, Volkan Cevher

摘要:

我们研究了深度神经网络在(选定的)宽和窄,深和浅,以及懒惰和非懒惰训练设置中的平均鲁棒性概念。我们证明,在欠参数化设置,宽度有负面影响,而它提高了鲁棒性在过参数化设置。深度的效果与初始化和训练模式密切相关。特别是,当使用LeCun初始化时,深度有助于懒惰训练机制的鲁棒性。相反,当使用神经切线核(NTK)和He初始化进行初始化时,深度损害鲁棒性。此外,在非懒惰训练机制下,我们展示了双层ReLU网络的宽度如何有利于鲁棒性。我们的理论发展改进了[Huang et al. NeurIPS 21; Wu et al. NeurIPS 21]的结果,并与[Bubeck and Sellke NeurIPS 21; Bubeck et al. COLT 21]一致。

英文摘要:

We study the average robustness notion in deep neural networks in (selected) wide and narrow, deep and shallow, as well as lazy and non-lazy training settings. We prove that in the under-parameterized setting, width has a negative effect while it improves robustness in the over-parameterized setting. The effect of depth closely depends on the initialization and the training mode. In particular, when initialized with LeCun initialization, depth helps robustness with the lazy training regime. In contrast, when initialized with Neural Tangent Kernel (NTK) and He-initialization, depth hurts the robustness. Moreover, under the non-lazy training regime, we demonstrate how the width of a two-layer ReLU network benefits robustness. Our theoretical developments improve the results by [Huang et al. NeurIPS21; Wu et al. NeurIPS21] and are consistent with [Bubeck and Sellke NeurIPS21; Bubeck et al. COLT21].

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑