arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2602.07028cs.CVcs.AI

卷积神经网络与CNN-ANFIS架构对抗鲁棒性比较研究

A Comparative Study of Adversarial Robustness in CNN and CNN-ANFIS Architectures

College of Engineering and Applied Science, University of Cincinnati(工程与应用科学学院,辛辛那提大学)

Kaaustaaub Shankar, Bharadwaj Dogga, Kelly Cohen

AI总结:

本文比较了CNN与CNN-ANFIS架构在对抗鲁棒性上的表现,发现ANFIS增强在特定架构中提升鲁棒性,但并非普遍有效。

摘要:

卷积神经网络(CNNs)在图像分类任务中表现出色,但缺乏可解释性且易受对抗攻击影响。神经模糊混合模型如DCNFIS通过将全连接CNN分类器替换为自适应神经模糊推理系统(ANFIS)来提高可解释性,但其鲁棒性仍缺乏深入研究。本文在MNIST、Fashion-MNIST、CIFAR-10和CIFAR-100数据集上,对比了标准CNN(ConvNet、VGG、ResNet18)及其ANFIS增强版本在基于梯度(PGD)和无梯度(Square)攻击下的性能。结果表明,ANFIS的集成并不总能提升干净准确率,其对鲁棒性的影响具有架构依赖性:ResNet18-ANFIS表现出改进的对抗鲁棒性,而VGG-ANFIS往往表现不如基线。这些发现表明,神经模糊增强可以增强特定架构的鲁棒性,但并非普遍有益。

英文摘要:

Convolutional Neural Networks (CNNs) achieve strong image classification performance but lack interpretability and are vulnerable to adversarial attacks. Neuro-fuzzy hybrids such as DCNFIS replace fully connected CNN classifiers with Adaptive Neuro-Fuzzy Inference Systems (ANFIS) to improve interpretability, yet their robustness remains underexplored. This work compares standard CNNs (ConvNet, VGG, ResNet18) with their ANFIS-augmented counterparts on MNIST, Fashion-MNIST, CIFAR-10, and CIFAR-100 under gradient-based (PGD) and gradient-free (Square) attacks. Results show that ANFIS integration does not consistently improve clean accuracy and has architecture-dependent effects on robustness: ResNet18-ANFIS exhibits improved adversarial robustness, while VGG-ANFIS often underperforms its baseline. These findings suggest that neuro-fuzzy augmentation can enhance robustness in specific architectures but is not universally beneficial.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑