Improving Model Robustness by Adaptively Correcting Perturbation Levels with Active Queries
Kun-Peng Ning, Lue Tao, Songcan Chen, Sheng-Jun Huang
摘要
In addition to high accuracy, robustness is becoming increasingly important for machine learning models in various applications. Recently, much research has been devoted to improving the model robustness by training with noise perturbations. Most existing studies assume a fixed perturbation level for all training examples, which however hardly holds in real tasks. In fact, excessive perturbations may destroy the discriminative content of an example, while deficient perturbations may fail to provide helpful information for improving the robustness. Motivated by this observation, we propose to adaptively adjust the perturbation levels for each example in the training process. Specifically, a novel active learning framework is proposed to allow the model interactively querying the correct perturbation level from human experts. By designing a cost-effective sampling strategy along with a new query type, the robustness can be significantly improved with a few queries. Both theoretical analysis and experimental studies validate the effectiveness of the proposed approach.
问问这篇 Paper
智能体会读完全文。
Lune 把这篇 Paper 索引到了每一个公式,引用它的顶会 Paper 也一样。你提问,回答直接引用原文。
引用它的顶会 Paper1
问问它们各自怎么用它它引用的顶会 Paper5
- On Adaptive Attacks to Adversarial Example DefensesFlorian Tramèr, Nicholas Carlini, Wieland Brendel, Aleksander MadryNeurIPS 2020 · 被引用 1,026 次
- Improving Adversarial Robustness Requires Revisiting Misclassified ExamplesYisen Wang, Difan Zou, Jinfeng Yi, James Bailey 等ICLR 2020 · 被引用 829 次
- Attacks Which Do Not Kill Training Make Adversarial Learning StrongerJingfeng Zhang, Xilie Xu, Bo Han, Gang Niu 等ICML 2020 · 被引用 452 次
- Learning perturbation sets for robust machine learningEric Wong, J. Zico KolterICLR 2021 · 被引用 40 次
- Adversarially Robust Representations with Smooth EncodersA. Taylan Cemgil, Sumedh Ghaisas, Krishnamurthy (Dj) Dvijotham, Pushmeet KohliICLR 2020 · 被引用 34 次
相关 Paper
- Asking the Right Questions to the Right Users: Active Learning with Imperfect OraclesShayok ChakrabortyAAAI 2020 · 被引用 23 次
- Self-Adaptive Perturbation Radii for Adversarial TrainingHuimin Wu, Wanli Shi, Chenkang Zhang, Bin GuKDD 2023
- Advancing Example Exploitation Can Alleviate Critical Challenges in Adversarial TrainingYao Ge, Yun Li, Keji Han, Junyi Zhu 等ICCV 2023 · 被引用 6 次
- Provably Cost-Sensitive Adversarial Defense via Randomized SmoothingYuan Xin, Dingfan Chen, Michael Backes, Xiao ZhangICML 2025
- Learning to Generate Noise for Multi-Attack RobustnessDivyam Madaan, Jinwoo Shin, Sung Ju HwangICML 2021 · 被引用 31 次
