返回
Hyperspherical class prototypes for adversarial robustness
DOI:10.1016/j.patcog.2022.108527.png)
摘要
En 中文
This work addresses the problem of adversarial robustness in deep neural network classification from an optimal class boundary estimation perspective. It is argued that increased model robustness to adversarial attacks can be achieved when the feature learning process is monitored by geometrically-inspired opti-mization criteria. To this end, we propose to learn hyperspherical class prototypes in the neural feature embedding space, along with training the network parameters. Three concurrent optimization functions for the intermediate hidden layer training data activations are devised, requiring items of the same class to be enclosed by the corresponding class prototype boundaries, to have minimum distance from their class prototype vector (i.e., hypersphere center) and to have maximum distance from the remainder hy-persphere centers. Our experiments show that training standard classification model architectures with the proposed objectives, significantly increases their robustness to white-box adversarial attacks, without adverse (if not beneficial) effects to their classification accuracy. (c) 2022 Elsevier Ltd. All rights reserved.
Keyword:
Adversarial defense
Adversarial robustness
Hypersphere prototype loss
HCP loss
期刊
IF:
7.6
论文数:
1.3W
被引数:
4.5W
机构
引用论文
K-Anonymity inspired adversarial attack and multiple one-class classification defense
NEURAL NETWORKS
IF6.3
Surrogate network-based sparseness hyper-parameter optimization for deep expression recognition
PATTERN RECOGNITION
IF7.6
Semi-supervised subclass support vector data description for image and video classification
NEUROCOMPUTING
IF6.5
Cost-conscious comparison of supervised learning algorithms over multiple data sets
PATTERN RECOGNITION
IF7.6

