Adversarial Examples Can Be Effective Data Augmentation for Unsupervised Machine Learning
Chia-Yi Hsu, Pin-Yu Chen, Songtao Lu, Sijia Liu, Chia-Mu Yu
Abstract
Adversarial examples causing evasive predictions are widely used to evaluate and improve the robustness of machine learning models. However, current studies focus on supervised learning tasks, relying on the ground truth data label, a targeted objective, or supervision from a trained classifier. In this paper, we propose a framework of generating adversarial examples for unsupervised models and demonstrate novel applications to data augmentation. Our framework exploits a mutual information neural estimator as an information theoretic similarity measure to generate adversarial examples without supervision. We propose a new MinMax algorithm with provable convergence guarantees for the efficient generation of unsupervised adversarial examples. Our framework can also be extended to supervised adversarial examples. When using unsupervised adversarial examples as a simple plugin data augmentation tool for model retraining, significant improvements are consistently observed across different unsupervised tasks and datasets, including data reconstruction, representation learning, and contrastive learning. Our results show novel methods and considerable advantages in studying and improving unsupervised machine learning via adversarial examples.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Cited by top-tier papers3
- Analyzing Generalization in Policy Networks: A Case Study with the Double-Integrator SystemRuining Zhang, Haoran Han, Maolong Lv, Qisong Yang et al.AAAI 2024 · 5 citations
- Improving the Robustness of Transformer-based Large Language Models with Dynamic AttentionLujia Shen, Yuwen Pu, Shouling Ji, Changjiang Li et al.NDSS 2024
- Adversarial Latent Feature Augmentation for FairnessHoin Jung, Junyi Chai, Xiaoqian WangICLR 2025
Builds on5
- Towards Evaluating the Robustness of Neural NetworksNicholas Carlini, David A. WagnerS&P 2017 · 9,786 citations
- Contrastive Learning with Adversarial ExamplesChih-Hui Ho, Nuno VasconcelosNeurIPS 2020 · 174 citations
- Min-Max Optimization without Gradients: Convergence and Applications to Black-Box Evasion and Poisoning AttacksSijia Liu, Songtao Lu, Xiangyi Chen, Yao Feng et al.ICML 2020 · 68 citations
- Adversarially Robust Representations with Smooth EncodersA. Taylan Cemgil, Sumedh Ghaisas, Krishnamurthy (Dj) Dvijotham, Pushmeet KohliICLR 2020 · 34 citations
- Learning Adversarially Robust Representations via Worst-Case Mutual Information MaximizationSicheng Zhu, Xiao Zhang, David EvansICML 2020 · 30 citations
Related papers
- Effective Targeted Attacks for Adversarial Self-Supervised LearningMinseon Kim, Hyeonjeong Ha, Sooel Son, Sung Ju HwangNeurIPS 2023 · 6 citations
- A Unified Contrastive Energy-based Model for Understanding the Generative Ability of Adversarial TrainingYifei Wang, Yisen Wang, Jiansheng Yang, Zhouchen LinICLR 2022 · 19 citations
- Adversarial Self-Supervised Contrastive LearningMinseon Kim, Jihoon Tack, Sung Ju HwangNeurIPS 2020 · 294 citations
- Unsupervised Graph Poisoning Attack via Contrastive Loss Back-propagationSixiao Zhang, Hongxu Chen, Xiangguo Sun, Yicong Li et al.WWW 2022 · 52 citations
- Maximum-Entropy Adversarial Data Augmentation for Improved Generalization and RobustnessLong Zhao, Ting Liu, Xi Peng, Dimitris N. MetaxasNeurIPS 2020 · 207 citations
