arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2305.08076cs.CVcs.CRcs.LG
收藏

使用教师助手改进防御性蒸馏

Improving Defensive Distillation using Teacher Assistant

Maniratnam Mandal, Suna Gao

AI总结:

本研究受教师助手知识蒸馏启发,提出引入助手网络以提升防御性蒸馏模型的鲁棒性,实验证明该方法在多数情况下有效,且多步蒸馏可进一步提升鲁棒性而对准确性影响甚微。

摘要:

对抗性攻击对应用于现代应用的深度神经网络的安全性和可靠性构成了重大威胁。更具体地说,在基于计算机视觉的任务中,专家可以利用模型架构的知识来创建人眼无法察觉的对抗样本。这些攻击可能导致自动驾驶汽车、人脸识别等流行应用中的安全问题。因此,构建对此类攻击具有鲁棒性的网络是非常可取且必不可少的。在文献中存在的各种方法中,防御性蒸馏近年来显示出前景。通过使用知识蒸馏,研究人员已经能够创建对其中一些攻击具有鲁棒性的模型。然而,更多的攻击已被开发出来,暴露了防御性蒸馏的弱点。在本项目中,我们从教师助手知识蒸馏中获得灵感,并提出引入一个助手网络可以提高蒸馏模型的鲁棒性。通过一系列实验,我们评估了不同蒸馏温度下蒸馏模型在准确性、敏感性和鲁棒性方面的表现。我们的实验表明,所提出的假设在大多数情况下可以提高鲁棒性。此外,我们展示了多步蒸馏可以在对模型准确性影响很小的情况下进一步提高鲁棒性。

英文摘要:

Adversarial attacks pose a significant threat to the security and safety of deep neural networks being applied to modern applications. More specifically, in computer vision-based tasks, experts can use the knowledge of model architecture to create adversarial samples imperceptible to the human eye. These attacks can lead to security problems in popular applications such as self-driving cars, face recognition, etc. Hence, building networks which are robust to such attacks is highly desirable and essential. Among the various methods present in literature, defensive distillation has shown promise in recent years. Using knowledge distillation, researchers have been able to create models robust against some of those attacks. However, more attacks have been developed exposing weakness in defensive distillation. In this project, we derive inspiration from teacher assistant knowledge distillation and propose that introducing an assistant network can improve the robustness of the distilled model. Through a series of experiments, we evaluate the distilled models for different distillation temperatures in terms of accuracy, sensitivity, and robustness. Our experiments demonstrate that the proposed hypothesis can improve robustness in most cases. Additionally, we show that multi-step distillation can further improve robustness with very little impact on model accuracy.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑