向强大的歧视性预测学习反对对抗性的补丁攻击
IEEE transactions on neural networks and learning systems
|October 17, 2023
概括
本研究引入了一种新的强大的歧视性预测学习 (rDPL) 方法,以增强对抗攻击的线性歧视分析 (LDA). 这种新的方法有效地防御使用高效的L1-规范优化算法对抗补丁攻击.
科学领域:
- 机器学习 机器学习
- 计算机视觉 计算机视觉
- 数据科学数据科学数据科学
背景情况:
- 线性差异分析 (LDA) 是一种受欢迎的监督缩小维度的技术.
- 传统的LDA很容易受到对抗的例子的影响,因为它最小化了平方规范.
- 现有的强大的方法经常与L1-规范优化和捍卫众多对抗性示例作斗争.
研究的目的:
- 为增强LDA提出一种新的强大的歧视性预测学习 (rDPL) 方法.
- 为了应对L1-规范比率优化的挑战,在强大的维度减少中.
- 改进机器学习应用程序中对对抗性补丁攻击的防御.
主要方法:
- 开发了一种新的强大的歧视性投影学习 (rDPL) 方法.
- 使用L1-规范的痕迹比率最小化优化算法.
- 导出并分析了一种新的高效算法,用于解决非平滑的L1-规范比率问题,并证明了趋同.
主要成果:
- 拟议的rDPL方法在防御对抗性补丁攻击方面表现出有效性.
- 新的优化算法高效,易于实施,并快速收.
- 在合成和真实基准数据集上的实验验证了该方法与最先进的技术相比的优越性能.
结论:
- 新的rDPL方法提供了一个强大的解决方案来减少对抗攻击的维度.
- 开发的优化算法成功解决了具有挑战性的L1-规范比率问题.
- 这项工作通过使更有弹性的维度减少成为可能,推动了强大的机器学习领域的发展.
相关概念视频
Masking and Demasking Agents
2.5K
EDTA titrations may necessitate masking and demasking agents to temporarily protect a particular metal ion in a mixture from the EDTA reaction. These agents facilitate the sequential analysis of the metal ions by forming stable complexes with some—but not all—metal ions during certain steps.
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
2.5K
Generalization, Discrimination, and Extinction
578
Generalization, discrimination, and extinction are key concepts in operant conditioning that influence how behaviors are learned and maintained.
Generalization occurs when a behavior reinforced in one context is performed in similar situations. For instance, a student who studies diligently for calculus and receives excellent grades might apply the same study habits to psychology and history, expecting similar results. Generalization shows how learning in one setting can influence behavior in...
Generalization occurs when a behavior reinforced in one context is performed in similar situations. For instance, a student who studies diligently for calculus and receives excellent grades might apply the same study habits to psychology and history, expecting similar results. Generalization shows how learning in one setting can influence behavior in...
578
Associative Learning
412
Associative learning is a fundamental concept in behavioral psychology, wherein a connection is established between two stimuli or events, leading to a learned response. This process is critical in understanding how behaviors are acquired and modified. Conditioning, the mechanism through which associations are formed, can be divided into two main types: classical conditioning and operant conditioning, each elucidating different aspects of associative learning.
Classical conditioning, also known...
Classical conditioning, also known...
412
Survival Tree
88
Survival trees are a non-parametric method used in survival analysis to model the relationship between a set of covariates and the time until an event of interest occurs, often referred to as the "time-to-event" or "survival time." This method is particularly useful when dealing with censored data, where the event has not occurred for some individuals by the end of the study period, or when the exact time of the event is unknown.
Building a Survival Tree
Constructing a...
Building a Survival Tree
Constructing a...
88
Improving Translational Accuracy
11.4K
Base complementarity between the three base pairs of mRNA codon and the tRNA anticodon is not a failsafe mechanism. Inaccuracies can range from a single mismatch to no correct base pairing at all. The free energy difference between the correct and nearly correct base pairs can be as small as 3 kcal/ mol. With complementarity being the only proofreading step, the estimated error frequency would be one wrong amino acid in every 100 amino acids incorporated. However, error frequencies observed in...
11.4K
Difference from Background: Limit of Detection
6.4K
The limit of detection (LOD) is the smallest amount of analyte that can be distinguished from the background noise. The LOD value corresponds to the concentration at which the analyte signal is three times larger than the standard deviation of the blank signal. Below this value, the analyte signal cannot be differentiated from the background noise. It is calculated by dividing the calibration slope by 3 times the standard deviation of the blank signals.
The LOD indicates the presence or absence...
The LOD indicates the presence or absence...
6.4K


