A Sequential Framework Towards an Exact SDP Verification of Neural Networks

Ma, Ziye; Sojoudi, Somayeh

doi:10.1109/dsaa53316.2021.9564161

Cited by 2 publications

(1 citation statement)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…There are a number of techniques that provide robustness certifications to existing neural networks [5,6,41]. Among these methods, "randomized smoothing" seeks to achieve certified robustness at test time [19,38,49].…”

Section: A Parallel Line Of Work Focuses On Certified Robustnessmentioning

confidence: 99%

Improving the Accuracy-Robustness Trade-off of Classifiers via Adaptive Smoothing

Yatong¹,

Anderson²,

Kim³

et al. 2023

Preprint

View full text Add to dashboard Cite

While it is shown in the literature that simultaneously accurate and robust classifiers exist for common datasets, previous methods that improve the adversarial robustness of classifiers often manifest an accuracy-robustness trade-off. We build upon recent advancements in data-driven "locally biased smoothing" to develop classifiers that treat benign and adversarial test data differently. Specifically, we tailor the smoothing operation to the usage of a robust neural network as the source of robustness. We then extend the smoothing procedure to the multi-class setting and adapt an adversarial input detector into a policy network. The policy adaptively adjusts the mixture of the robust base classifier and a standard network, where the standard network is optimized for clean accuracy and is not robust in general. We provide theoretical analyses to motivate the use of the adaptive smoothing procedure, certify the robustness of the smoothed classifier under realistic assumptions, and justify the introduction of the policy network. We use various attack methods, including AutoAttack and adaptive attack, to empirically verify that the smoothed model noticeably improves the accuracy-robustness trade-off. On the CIFAR-100 dataset, our method simultaneously achieves an 80.09% clean accuracy and a 32.94% AutoAttacked accuracy. The code that implements adaptive smoothing is available at https://github.com/Bai-YT/AdaptiveSmoothing.

show abstract

Section: A Parallel Line Of Work Focuses On Certified Robustnessmentioning

confidence: 99%