FTA2C:在对抗性培训中实现准确性和稳定性之间的优越权衡
Zhenghan Gao1, Chengming Liu2, Yucheng Shi1
1School of Computer and Artificial Intelligence, Zhengzhou University, Zhengzhou, China.
概括
我们介绍了特征转换对齐和压缩 (FTA2C),这是一个新方法来保护深度神经网络免受共同处理特征的对抗性攻击. FTA2C提高了模型稳定性,同时保持了高准确性,解决了准确性-稳定性权衡问题.
科学领域:
- 计算机科学 计算机科学
- 人工智能的人工智能
- 机器学习 机器学习
背景情况:
- 深度神经网络 (DNN) 容易受到敌对干扰,因为它们的特征不强大.
- 现有的对抗性训练方法通常通过单独处理特征来牺牲准确性以获得稳定性.
研究的目的:
- 提出一种新的插件方法,特征转换对齐和压缩 (FTA2C),以提高DNN的稳定性和准确性.
- 引入一个防御效率指标 (DEM) 来评估防御战略.
主要方法:
- FTA2C采用压缩网络来限制扰动空间和特征转换网络来增强强大的特征.
- 一个对齐机制确保了强大的特征空间中的对抗性和自然样本之间的一致性,从而实现了协同处理.
- 防御效率指标 (DEM) 量化了自然准确性和对抗性强度之间的权衡.
主要成果:
- FTA2C显著提高了对抗性稳定性,同时在四个基准数据集中保持了高的自然准确性.
- 与传统方法相比,拟议的方法在平衡准确性-稳定性权衡方面表现优越.
- 实验验证了FTA2C在保护DNN免受对抗性干扰方面的有效性.
结论:
- 在对抗防御中,FTA2C为准确性-稳定性困境提供了有效的解决方案.
- 防御效率指标 (DEM) 提供了一种标准化和可解释的方式来评估防御方法.
- 拟议的方法推进了强大的机器学习和对抗防御领域.
相关概念视频
Improving Translational Accuracy
14.1K
Base complementarity between the three base pairs of mRNA codon and the tRNA anticodon is not a failsafe mechanism. Inaccuracies can range from a single mismatch to no correct base pairing at all. The free energy difference between the correct and nearly correct base pairs can be as small as 3 kcal/ mol. With complementarity being the only proofreading step, the estimated error frequency would be one wrong amino acid in every 100 amino acids incorporated. However, error frequencies observed in...
14.1K
Improving Translational Accuracy
3.5K
3.5K
Accuracy, limits, and approximation
1.1K
Accuracy, limits, and approximations are common in many fields, especially in engineering calculations. These concepts are imperative for ensuring that a given value is as close as possible to its true value.
Accuracy is defined as the closeness of the measured value to the true or actual value. In engineering mechanics, repeated measurements are taken during theoretical or experimental analyses to ensure that the result is precise and accurate.
The accuracy of any solution is based on the...
Accuracy is defined as the closeness of the measured value to the true or actual value. In engineering mechanics, repeated measurements are taken during theoretical or experimental analyses to ensure that the result is precise and accurate.
The accuracy of any solution is based on the...
1.1K
Accuracy and Precision
14.0K
Scientists typically make repeated measurements of a quantity to ensure the quality of their findings and to evaluate both the precision and the accuracy of their results. Measurements are said to be precise if they yield very similar results when repeated in the same manner. A measurement is considered accurate if it yields a result that is very close to the true or the accepted value. Precise values agree with each other; accurate values agree with a true value. Highly accurate...
14.0K
Survival Tree
385
Survival trees are a non-parametric method used in survival analysis to model the relationship between a set of covariates and the time until an event of interest occurs, often referred to as the "time-to-event" or "survival time." This method is particularly useful when dealing with censored data, where the event has not occurred for some individuals by the end of the study period, or when the exact time of the event is unknown.
Building a Survival Tree
Constructing a...
Building a Survival Tree
Constructing a...
385
Accuracy and Errors in Hypothesis Testing
558
Hypothesis testing is a fundamental statistical tool that begins with the assumption that the null hypothesis H0 is true. During this process, two types of errors can occur: Type I and Type II. A Type I error refers to the incorrect rejection of a true null hypothesis, while a Type II error involves the failure to reject a false null hypothesis.
In hypothesis testing, the probability of making a Type I error, denoted as α, is commonly set at 0.05. This significance level indicates a 5%...
In hypothesis testing, the probability of making a Type I error, denoted as α, is commonly set at 0.05. This significance level indicates a 5%...
558
