CNN Classifier’s Robustness Enhancement when Preserving Privacy

Abstract

Laws on privacy preservation challenges supervised learning algorithms in industrial applications and could be an obstacle for the artificial intelligence solutions. In the literature, this issue is never discussed for the algorithm's design. Indeed, algorithms do not behave the same when the input is modified to protect privacy. Particularly, the unmodified data samples predicts with low confidences show high vulnerability to decision changes. To overcome this challenge, we propose a novel solution that enhances classifier's robustness by particularly addressing the vulnerable samples. It consists of a novel formulation of the learning objective by hybridizing similarity learning, decision margin and intra-class distance. Experimental results and evaluation on a challenging vehicle image dataset exhibit the high effectiveness and potentials of our method for the privacy preserving classification problems.