arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2501.13094cs.CVcs.AIcs.LG

基于对比去噪的鲁棒表示一致性模型

Robust Representation Consistency Model via Contrastive Denoising

Zhejiang University(浙江大学);NVIDIA;UW–Madison(威斯康星大学麦迪逊分校);Amazon(亚马逊);Shengshu(盛数);Tsinghua University(清华大学);Caltech(加州理工学院)

Jiachen Lei, Julius Berner, Jiongxiao Wang, Zhongzhu Chen, Zhongjia Ba, Kui Ren, Jun Zhu, Anima Anandkumar

AI总结:

本文提出基于对比去噪的鲁棒表示一致性模型(rRCM),通过实例判别在潜在空间实现沿扩散轨迹的一致表示,以单次预测完成隐式去噪分类,大幅降低推理成本并在ImageNet上取得SOTA认证准确率。

摘要:

鲁棒性对于深度神经网络至关重要,尤其是在安全敏感的应用中。为此,随机平滑为抵御对抗性扰动提供了理论保证。最近,扩散模型已被成功用于随机平滑,以在使用标准分类器进行预测之前净化受噪声扰动的样本。尽管这些方法在小扰动半径下表现出色,但它们在处理较大扰动时存在困难,并且与经典方法相比,在推理过程中会产生显著的计算开销。为了解决这个问题,我们将像素空间中沿扩散轨迹的生成建模任务重新表述为潜在空间中的判别任务。具体来说,我们通过对齐时间上相邻的点,利用实例判别来实现沿轨迹的一致表示。基于学习到的表示进行微调后,我们的模型能够通过单次预测实现隐式的去噪后分类,从而大幅降低推理成本。我们在各种数据集上进行了广泛的实验,并在推理期间以最少的计算预算实现了最先进的性能。例如,我们的方法在所有扰动半径下,在ImageNet上的平均认证准确率比基于扩散的方法高出5.3%,在较大半径下最高可达11.6%,同时平均降低了85倍的推理成本。代码可在https://github.com/jiachenlei/rRCM获取。

英文摘要:

Robustness is essential for deep neural networks, especially in security-sensitive applications. To this end, randomized smoothing provides theoretical guarantees for certifying robustness against adversarial perturbations. Recently, diffusion models have been successfully employed for randomized smoothing to purify noise-perturbed samples before making predictions with a standard classifier. While these methods excel at small perturbation radii, they struggle with larger perturbations and incur a significant computational overhead during inference compared to classical methods. To address this, we reformulate the generative modeling task along the diffusion trajectories in pixel space as a discriminative task in the latent space. Specifically, we use instance discrimination to achieve consistent representations along the trajectories by aligning temporally adjacent points. After fine-tuning based on the learned representations, our model enables implicit denoising-then-classification via a single prediction, substantially reducing inference costs. We conduct extensive experiments on various datasets and achieve state-of-the-art performance with minimal computation budget during inference. For example, our method outperforms the certified accuracy of diffusion-based methods on ImageNet across all perturbation radii by 5.3% on average, with up to 11.6% at larger radii, while reducing inference costs by 85$\times$ on average. Codes are available at: https://github.com/jiachenlei/rRCM.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑