Improving Model Robustness by Adaptively Correcting Perturbation Levels with Active Queries
Kun-Peng Ning, Lue Tao, Songcan Chen, Sheng-Jun Huang
Abstract
In addition to high accuracy, robustness is becoming increasingly important for machine learning models in various applications. Recently, much research has been devoted to improving the model robustness by training with noise perturbations. Most existing studies assume a fixed perturbation level for all training examples, which however hardly holds in real tasks. In fact, excessive perturbations may destroy the discriminative content of an example, while deficient perturbations may fail to provide helpful information for improving the robustness. Motivated by this observation, we propose to adaptively adjust the perturbation levels for each example in the training process. Specifically, a novel active learning framework is proposed to allow the model interactively querying the correct perturbation level from human experts. By designing a cost-effective sampling strategy along with a new query type, the robustness can be significantly improved with a few queries. Both theoretical analysis and experimental studies validate the effectiveness of the proposed approach.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 63c8e8a8-34d1-4bb4-8143-3e7febd0c78bCited by top-tier papers1
Ask how each one uses itBuilds on5
- On Adaptive Attacks to Adversarial Example DefensesFlorian Tramèr, Nicholas Carlini, Wieland Brendel, Aleksander MadryNeurIPS 2020 · 1,026 citations
- Improving Adversarial Robustness Requires Revisiting Misclassified ExamplesYisen Wang, Difan Zou, Jinfeng Yi, James Bailey et al.ICLR 2020 · 829 citations
- Attacks Which Do Not Kill Training Make Adversarial Learning StrongerJingfeng Zhang, Xilie Xu, Bo Han, Gang Niu et al.ICML 2020 · 452 citations
- Learning perturbation sets for robust machine learningEric Wong, J. Zico KolterICLR 2021 · 40 citations
- Adversarially Robust Representations with Smooth EncodersA. Taylan Cemgil, Sumedh Ghaisas, Krishnamurthy (Dj) Dvijotham, Pushmeet KohliICLR 2020 · 34 citations
Related papers
- Asking the Right Questions to the Right Users: Active Learning with Imperfect OraclesShayok ChakrabortyAAAI 2020 · 23 citations
- Self-Adaptive Perturbation Radii for Adversarial TrainingHuimin Wu, Wanli Shi, Chenkang Zhang, Bin GuKDD 2023
- Advancing Example Exploitation Can Alleviate Critical Challenges in Adversarial TrainingYao Ge, Yun Li, Keji Han, Junyi Zhu et al.ICCV 2023 · 6 citations
- Provably Cost-Sensitive Adversarial Defense via Randomized SmoothingYuan Xin, Dingfan Chen, Michael Backes, Xiao ZhangICML 2025
- Learning to Generate Noise for Multi-Attack RobustnessDivyam Madaan, Jinwoo Shin, Sung Ju HwangICML 2021 · 31 citations
