Sorry, you need to enable JavaScript to visit this website.

DELVING DEEPER INTO VULNERABLE SAMPLES IN ADVERSARIAL TRAINING

DOI:
10.60864/grqy-cf88
Citation Author(s):
Submitted by:
fei zhao
Last updated:
6 June 2024 - 10:32am
Document Type:
Poster
Document Year:
2024
Presenters:
Pengfei Zhao,Haojie Yuan,Qi Chu,Shubin Xu,Nenghai Yu
Paper Code:
EEA11072
 

Recently, vulnerable samples have been shown to be crucial
for improving adversarial training performance. Our analysis
on existing vulnerable samples mining methods indicate that
existing methods have two problems: 1) valuable connections
among different pairs of natural samples and their adversarial
counterparts are ignored; 2) parts of vulnerable samples are
unconsidered. To better leverage vulnerable samples, we propose INter PAir ConstrainT (INPACT) and Vulnerable Aware
adveRsarial Training (VART) to address these drawbacks respectively. INPACT assesses adversarial risk with more comprehensive regularization on sample relationships, which takes
both inter and intra connections of natural/adversarial sample
pairs into consideration. Meanwhile VART makes full use of
all vulnerable samples, including notable proportion neglected
by existing instance re-weighting strategies. Extensive experiments on different datasets and backbones demonstrate the
effectiveness of the proposed method.

up
0 users have voted: