.png){kind=icon}
Return
Parameter Interpolation Adversarial Training for Robust Image Classification
.png){kind=icon}
PRE
AI
DOI：10.1109/TIFS.2025.3533925.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Though deep neural networks exhibit superior performance on various tasks, they are still plagued by adversarial examples. Adversarial training has been demonstrated to be the most effective method to defend against adversarial attacks. However, existing adversarial training methods show that the model robustness has apparent oscillations and overfitting issues in the training process, degrading the defense efficacy. To address these issues, we propose a novel framework called Parameter Interpolation Adversarial Training (PIAT). PIAT tunes the model parameters between each epoch by interpolating the parameters of the previous and current epochs. It makes the decision boundary of model change more moderate and alleviates the overfitting issue, helping the model converge better and achieving higher model robustness. In addition, we suggest using the Normalized Mean Square Error (NMSE) to further improve the robustness by aligning the relative magnitude of logits between clean and adversarial examples rather than the absolute magnitude. Extensive experiments conducted on several benchmark datasets demonstrate that our framework could prominently improve the robustness of both Convolutional Neural Networks (CNNs) and Vision Transformers (ViTs).
Keywords:
Training
Robustness
Overfitting
Computational modeling
Oscillators
Interpolation
Accuracy
Perturbation methods
Mean square error methods
Optimization
Adversarial examples
adversarial training
parameter interpolation
normalized mean square error
Journal
IF:
8
Papers:
5.3K
Citations:
2.3W
Organization
Cited Papers
.png){kind=icon}
ShareSaveShareSaveShareSave
View more