Input Validation for Neural Networks via Runtime Local Robustness Verification

Authors: Jiangchao Liu, Liqian Chen, Antoine Mine, Ji Wang
Published: 2020-02-09 | Updated: 2024-02-13

Source: https://arxiv.org/abs/2002.03339

PDF: https://arxiv.org/pdf/2002.03339

AIにより推定されたラベル

ロバスト性向上手法 敵対的サンプル 敵対的摂動手法

※ こちらのラベルはAIによって自動的に追加されました。そのため、正確でないことがあります。
詳細は文献データベースについてをご覧ください。

Abstract

Local robustness verification can verify that a neural network is robust wrt. any perturbation to a specific input within a certain distance. We call this distance Robustness Radius. We observe that the robustness radii of correctly classified inputs are much larger than that of misclassified inputs which include adversarial examples, especially those from strong adversarial attacks. Another observation is that the robustness radii of correctly classified inputs often follow a normal distribution. Based on these two observations, we propose to validate inputs for neural networks via runtime local robustness verification. Experiments show that our approach can protect neural networks from adversarial examples and improve their accuracies.