期刊
IEEE TRANSACTIONS ON IMAGE PROCESSING
卷 30, 期 -, 页码 8955-8967出版社
IEEE-INST ELECTRICAL ELECTRONICS ENGINEERS INC
DOI: 10.1109/TIP.2021.3121150
关键词
Robustness; Training; Handheld computers; Perturbation methods; Complexity theory; Streaming media; Standards; Adversarial examples; deep learning; general robustness; computer vision
资金
- National Key Research and Development Plan of China [2020AAA0103502]
- National Natural Science Foundation of China [62022009, 61872021]
PDA is a method that improves the robustness of DNNs by progressively injecting diverse adversarial noises during training. Compared to other strategies, DNNs trained with PDA achieve better general robustness against adversarial attacks, common corruptions, and clean images.
Adversarial images are imperceptible perturbations to mislead deep neural networks (DNNs), which have attracted great attention in recent years. Although several defense strategies achieved encouraging robustness against adversarial samples, most of them still failed to consider the robustness on common corruptions (e.g. noise, blur, and weather/digital effects). To address this problem, we propose a simple yet effective method, named Progressive Diversified Augmentation (PDA), which improves the robustness of DNNs by progressively injecting diverse adversarial noises during training. In other words, DNNs trained with PDA achieve better general robustness against both adversarial attacks and common corruptions than other strategies. In addition, PDA also enjoys the advantages of spending less training time and keeping high standard accuracy on clean examples. Further, we theoretically prove that PDA can control the perturbation bound and guarantee better robustness. Extensive results on CIFAR-10, SVHN, ImageNet, CIFAR-10-C and ImageNet-C have demonstrated that PDA comprehensively outperforms its counterparts on the robustness against adversarial examples and common corruptions as well as clean images. More experiments on the frequency-based perturbations and visualized gradients further prove that PDA achieves general robustness and is more aligned with the human visual system.
作者
我是这篇论文的作者
点击您的名字以认领此论文并将其添加到您的个人资料中。
推荐
暂无数据