arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2305.17939cs.CV

基于骨架动作识别的图卷积神经网络鲁棒性的傅里叶分析

Fourier Analysis on Robustness of Graph Convolutional Neural Networks for Skeleton-based Action Recognition

Chiba University(千叶大学)

Nariki Tanaka, Hiroshi Kera, Kazuhiko Kawamoto

AI总结:

本研究利用联合傅里叶变换分析图卷积神经网络在骨架动作识别中的鲁棒性,发现对抗训练能增强鲁棒性且不引入权衡,但傅里叶方法无法解释部位遮挡的脆弱性。

摘要:

利用傅里叶分析,我们探索了用于基于骨架动作识别的图卷积神经网络(GCNs)的鲁棒性与脆弱性。我们采用联合傅里叶变换(JFT),即图傅里叶变换(GFT)和离散傅里叶变换(DFT)的组合,来检验对抗训练的GCNs对抗对抗攻击和常见扰动的鲁棒性。在NTU RGB+D数据集上的实验结果表明,对抗训练并未在对抗攻击与低频扰动之间引入鲁棒性权衡,而这种权衡通常出现在基于卷积神经网络的图像分类中。这一发现表明,对抗训练是增强基于骨架动作识别中对抗攻击和常见扰动鲁棒性的实用方法。此外,我们发现傅里叶方法无法解释对骨架部位遮挡扰动的脆弱性,这凸显了其局限性。这些发现扩展了我们对GCNs鲁棒性的理解,有望指导开发更鲁棒的基于骨架动作识别的学习方法。

英文摘要:

Using Fourier analysis, we explore the robustness and vulnerability of graph convolutional neural networks (GCNs) for skeleton-based action recognition. We adopt a joint Fourier transform (JFT), a combination of the graph Fourier transform (GFT) and the discrete Fourier transform (DFT), to examine the robustness of adversarially-trained GCNs against adversarial attacks and common corruptions. Experimental results with the NTU RGB+D dataset reveal that adversarial training does not introduce a robustness trade-off between adversarial attacks and low-frequency perturbations, which typically occurs during image classification based on convolutional neural networks. This finding indicates that adversarial training is a practical approach to enhancing robustness against adversarial attacks and common corruptions in skeleton-based action recognition. Furthermore, we find that the Fourier approach cannot explain vulnerability against skeletal part occlusion corruption, which highlights its limitations. These findings extend our understanding of the robustness of GCNs, potentially guiding the development of more robust learning methods for skeleton-based action recognition.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑