Set-Valued Sensitivity Analysis of Deep Neural Networks
Xin Wang, Feilong Wang, Xuegang (Jeff) Ban
Abstract
This paper proposes a sensitivity analysis framework based on set-valued mapping for deep neural networks (DNN) to understand and compute how the solutions (model weights) of DNN respond to perturbations in the training data. As a DNN may not exhibit a unique solution (minima) and the algorithm of solving a DNN may lead to different solutions with minor perturbations to input data, we focus on the sensitivity of the solution set of DNN, instead of studying a single solution. In particular, we are interested in the expansion and contraction of the solution set in response to data perturbations. If the change of solution set can be bounded by the extent of the data perturbation, the model is said to exhibit the Lipschitz-like property. This 'set-to-set' analysis approach provides a deeper understanding of the robustness and reliability of DNNs during training. Our framework incorporates both isolated and non-isolated minima, and critically, does not require the assumption that the Hessian of loss function is non-singular. By developing set-level metrics such as distance between sets, convergence of sets, derivatives of set-valued mapping, and stability across the solution set, we prove that the solution set of the Fully Connected Neural Network holds Lipschitz-like properties. For general neural networks (e.g. Resnet), we introduce a graphical-derivative-based method to estimate the new solution set following data perturbation without retraining.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 4cbbd621-eabb-48aa-842a-a3b0ab6825f7Builds on3
- Loss Surface Simplexes for Mode Connecting Volumes and Fast EnsemblingGregory W. Benton, Wesley J. Maddox, Sanae Lotfi, Andrew Gordon WilsonICML 2021 · 88 citations
- Model-Targeted Poisoning Attacks with Provable ConvergenceFnu Suya, Saeed Mahloujifar, Anshuman Suri, David Evans et al.ICML 2021 · 52 citations
- The Memory-Perturbation Equation: Understanding Model's Sensitivity to DataPeter Nickl, Lu Xu, Dharmesh Tailor, Thomas Möllenhoff et al.NeurIPS 2023 · 17 citations
Related papers
- Robust Design of Deep Neural Networks Against Adversarial Attacks Based on Lyapunov TheoryArash Rahnama, André T. Nguyen, Edward RaffCVPR 2020
- Smoothed Geometry for Robust AttributionZifan Wang, Haofan Wang, Shakul Ramkumar, Piotr Mardziel et al.NeurIPS 2020 · 67 citations
- A Quantitative Geometric Approach to Neural-Network SmoothnessZi Wang, Gautam Prakriya, Somesh JhaNeurIPS 2022 · 20 citations
- DP-SGD Without Clipping: The Lipschitz Neural Network WayLouis Béthune, Thomas Massena, Thibaut Boissin, Aurélien Bellet et al.ICLR 2024 · 13 citations
- Direct Parameterization of Lipschitz-Bounded Deep NetworksRuigang Wang, Ian R. ManchesterICML 2023 · 66 citations
