相关实验视频
Updated: Jan 9, 2026

13:19
Deep Neural Networks for Image-Based Dietary Assessment
Published on: March 13, 2021
9.9K
通过双重随机性和几何规范化来增强DNN对抗性强度
1School of Cyber Science and Engineering, Zhengzhou University, Zhengzhou 450001, China.
Sensors (Basel, Switzerland)
|December 11, 2025
概括
双随机性和几何规范化 (DSGN) 通过使用可学习的噪音和几何规范化来增强深度神经网络 (DNN) 的安全性. 这种新的框架可以提高对抗性稳定性,同时在关键应用中保持高精度.
科学领域:
- 人工智能的人工智能
- 机器学习 机器学习
- 计算机视觉 计算机视觉
背景情况:
- 深度神经网络 (DNN) 功能强大,但易受敌对攻击,限制其在安全关键系统中的使用.
- 现有的随机防御通常使用固定的噪声,忽视决策空间几何,导致低于最佳的稳定性.
研究的目的:
- 引入双随机性和几何规范化 (DSGN),这是一个新的框架,以提高DNN的对抗性稳定性.
- 通过结合取决于输入的噪声和几何稳定性来解决电流防御的局限性.
主要方法:
- DSGN在特征表示和分类器权重中使用可学习的,依赖输入的高斯噪声,用于双路径随机建模.
- L2规范化将噪声组件投射到单元超球上,稳定决策几何,促进边缘分离.
- 这种方法捕捉了多层次的预测不确定性,并提高了决策的一致性.
主要成果:
- 在基准数据集和CNN上,DSGN在对抗PGD (1-6%) 和AutoAttack (1-17%) 的强有力的准确性方面取得了显著的改进.
- 该框架有效地稳定了决策边界和表示几何.
- 保持了高清洁准确度,并增强了对抗性强度.
结论:
- DSGN提供了一种有希望的方法来提高深度神经网络的对抗性稳定性.
- 双位随机性和几何规范化的结合有效地提高了安全关键应用程序的安全性.
- 与现有技术相比,这种方法提供了一个更稳定,更强大的防御机制.
相关概念视频
Survival Tree
369
Survival trees are a non-parametric method used in survival analysis to model the relationship between a set of covariates and the time until an event of interest occurs, often referred to as the "time-to-event" or "survival time." This method is particularly useful when dealing with censored data, where the event has not occurred for some individuals by the end of the study period, or when the exact time of the event is unknown.
Building a Survival Tree
Constructing a...
Building a Survival Tree
Constructing a...
369
Generalization, Discrimination, and Extinction
1.3K
Generalization, discrimination, and extinction are key concepts in operant conditioning that influence how behaviors are learned and maintained.
Generalization occurs when a behavior reinforced in one context is performed in similar situations. For instance, a student who studies diligently for calculus and receives excellent grades might apply the same study habits to psychology and history, expecting similar results. Generalization shows how learning in one setting can influence behavior in...
Generalization occurs when a behavior reinforced in one context is performed in similar situations. For instance, a student who studies diligently for calculus and receives excellent grades might apply the same study habits to psychology and history, expecting similar results. Generalization shows how learning in one setting can influence behavior in...
1.3K
Propagation of Uncertainty from Random Error
1.6K
An experiment often consists of more than a single step. In this case, measurements at each step give rise to uncertainty. Because the measurements occur in successive steps, the uncertainty in one step necessarily contributes to that in the subsequent step. As we perform statistical analysis on these types of experiments, we must learn to account for the propagation of uncertainty from one step to the next. The propagation of uncertainty depends on the type of arithmetic operation performed on...
1.6K
Neural Regulation
43.0K
Digestion begins with a cephalic phase that prepares the digestive system to receive food. When our brain processes visual or olfactory information about food, it triggers impulses in the cranial nerves innervating the salivary glands and stomach to prepare for food.
43.0K
Reducing Line Loss
344
In a three-phase circuit, line loss is an indicator of energy dissipated as heat due to the resistance of transmission lines. To address this, incorporating transformers into the system—a step-up transformer at the source and a step-down transformer at the load—is a strategic solution. Two three-phase transformers are introduced to improve this.
With a step-up transformer at the source, the voltage is increased, thereby reducing the current in the transmission lines since power loss in...
With a step-up transformer at the source, the voltage is increased, thereby reducing the current in the transmission lines since power loss in...
344
Collisions in Multiple Dimensions: Introduction
6.5K
It is far more common for collisions to occur in two dimensions; that is, the initial velocity vectors are neither parallel nor antiparallel to each other. Let's see what complications arise from this. The first idea is that momentum is a vector. Like all vectors, it can be expressed as a sum of perpendicular components (usually, though not always, an x-component and a y-component, and a z-component if necessary). Thus, when the statement of conservation of momentum is written for a...
6.5K
