Fantastic Four: Differentiable and Efficient Bounds on Singular Values of Convolution Layers
Sahil Singla, Soheil Feizi
Abstract
In deep neural networks, the spectral norm of the Jacobian of a layer bounds the factor by which the norm of a signal changes during forward/backward propagation. Spectral norm regularizations have been shown to improve generalization, robustness and optimization of deep learning methods. Existing methods to compute the spectral norm of convolution layers either rely on heuristics that are efficient in computation but lack guarantees or are theoretically-sound but computationally expensive. In this work, we obtain the best of both worlds by deriving four provable upper bounds on the spectral norm of a standard 2D multi-channel convolution layer. These bounds are differentiable and can be computed efficiently during training with negligible overhead. One of these bounds is in fact the popular heuristic method of Miyato et al. ( 2018 ) (multiplied by a constant factor depending on filter sizes). Each of these four bounds can achieve the tightest gap depending on convolution filters. Thus, we propose to use the minimum of these four bounds as a tight, differentiable and efficient upper bound on the spectral norm of convolution layers. We show that our spectral bound is an effective regularizer and can be used to bound either the lipschitz constant or curvature values (eigenvalues of the Hessian) of neural networks. Through experiments on MNIST and CIFAR-10, we demonstrate the effectiveness of our spectral bound in improving generalization and provable robustness of deep networks.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 18d29b27-dda7-45d0-8d3e-4964e69dc4c8Cited by top-tier papers9
- Skew Orthogonal ConvolutionsSahil Singla, Soheil FeiziICML 2021 · 76 citations
- A Dynamical System Perspective for Lipschitz Neural NetworksLaurent Meunier, Blaise Delattre, Alexandre Araujo, Alexandre AllauzenICML 2022 · 69 citations
- Efficient Bound of Lipschitz Constant for Convolutional Layers by Gram IterationBlaise Delattre, Quentin Barthélemy, Alexandre Araujo, Alexandre AllauzenICML 2023 · 20 citations
- Constructing Orthogonal Convolutions in an Explicit MannerTan Yu, Jun Li, Yunfeng Cai, Ping LiICLR 2022 · 19 citations
- Towards Practical Control of Singular Values of Convolutional LayersAlexandra Senderovich, Ekaterina Bulatova, Anton Obukhov, Maxim V. RakhubaNeurIPS 2022 · 16 citations
Builds on4
- (De)Randomized Smoothing for Certifiable Defense against Patch AttacksAlexander Levine, Soheil FeiziNeurIPS 2020 · 188 citations
- Generalization bounds for deep convolutional neural networksPhilip M. Long, Hanie SedghiICLR 2020 · 102 citations
- Second-Order Provable Defenses against Adversarial AttacksSahil Singla, Soheil FeiziICML 2020 · 64 citations
- The Convolution Exponential and Generalized Sylvester FlowsEmiel Hoogeboom, Victor Garcia Satorras, Jakub M. Tomczak, Max WellingNeurIPS 2020 · 30 citations
Related papers
- On Lipschitz Regularization of Convolutional Layers using Toeplitz Matrix TheoryAlexandre Araujo, Benjamin Négrevergne, Yann Chevaleyre, Jamal AtifAAAI 2021 · 31 citations
- Convolutional Normalization: Improving Deep Convolutional Network Robustness and TrainingSheng Liu, Xiao Li, Yuexiang Zhai, Chong You et al.NeurIPS 2021 · 30 citations
- Compositional Curvature Bounds for Deep Neural NetworksTaha Entesari, Sina Sharifi, Mahyar FazlyabICML 2024 · 2 citations
- Large Norms of CNN Layers Do Not Hurt Adversarial RobustnessYouwei Liang, Dong HuangAAAI 2021 · 13 citations
- Robust Design of Deep Neural Networks Against Adversarial Attacks Based on Lyapunov TheoryArash Rahnama, André T. Nguyen, Edward RaffCVPR 2020
