Being Friends Instead of Adversaries: Deep Networks Learn from Data Simplified by Other Networks
Simone Marullo, Matteo Tiezzi, Marco Gori, Stefano Melacci
Abstract
Amongst a variety of approaches aimed at making the learning procedure of neural networks more effective, the scientific community developed strategies to order the examples according to their estimated complexity, to distil knowledge from larger networks, or to exploit the principles behind adversarial machine learning.
A different idea has been recently proposed, named Friendly Training, which consists in altering the input data by adding an automatically estimated perturbation, with the goal of facilitating the learning process of a neural classifier. The transformation progressively fades-out as long as training proceeds, until it completely vanishes. In this work we revisit and extend this idea, introducing a radically different and novel approach inspired by the effectiveness of neural generators in the context of Adversarial Machine Learning. We propose an auxiliary multi-layer network that is responsible of altering the input data to make them easier to be handled by the classifier at the current stage of the training procedure. The auxiliary network is trained jointly with the neural classifier, thus intrinsically increasing the 'depth' of the classifier, and it is expected to spot general regularities in the data alteration process. The effect of the auxiliary network is progressively reduced up to the end of training, when it is fully dropped and the classifier is deployed for applications. We refer to this approach as Neural Friendly Training.
An extended experimental procedure involving several datasets and different neural architectures shows that Neural Friendly Training overcomes the originally proposed Friendly Training technique, improving the generalization of the classifier, especially in the case of noisy data.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext ba585db2-56d6-4e33-90c4-c2c6b9ee69b0Builds on2
Related papers
- Friendly Attacks to Improve Channel Coding ReliabilityAnastasiia Kurmukova, Deniz GündüzAAAI 2024 · 4 citations
- Adversarial Defense via Learning to Generate Diverse AttacksYunseok Jang, Tianchen Zhao, Seunghoon Hong, Honglak LeeICCV 2019 · 88 citations
- DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency DomainFengpeng Li, Kemou Li, Haiwei Wu, Jinyu Tian et al.NeurIPS 2024 · 19 citations
- Reducing Excessive Margin to Achieve a Better Accuracy vs. Robustness Trade-offRahul Rade, Seyed-Mohsen Moosavi-DezfooliICLR 2022 · 166 citations
- Combating Adversaries with Anti-adversariesMotasem Alfarra, Juan C. Pérez, Ali K. Thabet, Adel Bibi et al.AAAI 2022 · 39 citations
