On the Decision Boundary of Deep Neural Networks
Not on the map. Why?
Abstract (arXiv)
While deep learning models and techniques have achieved great empirical success, our understanding of the source of success in many aspects remains very limited. In an attempt to bridge the gap, we investigate the decision boundary of a production deep learning architecture with weak assumptions on both the training data and the model. We demonstrate, both theoretically and empirically, that the last weight layer of a neural network converges to a linear SVM trained on the output of the last hidden layer, for both the binary case and the multi-class case with the commonly used cross-entropy loss. Furthermore, we show empirically that training a neural network as a whole, instead of only fine-tuning the last weight layer, may result in better bias constant for the last weight layer, which is important for generalization. In addition to facilitating the understanding of deep learning, our result can be helpful for solving a broad range of practical problems of deep learning, such as catastrophic forgetting and adversarial attacking. The experiment codes are available at https://github.com/lykaust15/NN_decision_boundary
Key facts. Cited by 11 papers in the map (data through 13 Oct 2026). First posted on arXiv 16 Aug 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 2; 2022: 2; 2023: 2; 2024: 2; 2025: 3.
11 papers.
- 2023A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validationcited by 92
- 2025Understanding and Mitigating Overrefusal in LLMs from an Unveiling Perspective of Safety Decision Boundarycited by 18
- 2021BinarizedAttack: Structural Poisoning Attacks to Graph-based Anomaly Detectioncited by 9
- 2024MANO: Exploiting Matrix Norm for Unsupervised Accuracy Estimation Under Distribution Shiftscited by 8
- 2024Relevant Irrelevance: Generating Alterfactual Explanations for Image Classifierscited by 3
- 2022LADDER: Latent Boundary-guided Adversarial Trainingcited by 2
- 2025AutoML for Multi-Class Anomaly Compensation of Sensor Driftcited by 2
- 2021How to Explain Neural Networks: an Approximation Perspectivecited by 1
- 2022Exploring Hidden Semantics in Neural Networks with Symbolic Regressioncited by 1
- 2023Improving classifier decision boundaries using nearest neighborscited by 1
- 2025Decision Potential Surface: A Theoretical and Practical Approximation of Large Language Model Decision Boundarycited by 0
- 2025Decision Potential Surface: A Theoretical and Practical Approximation of Large Language Model Decision Boundary27 Sep 2025
- 2025Understanding and Mitigating Overrefusal in LLMs from an Unveiling Perspective of Safety Decision Boundary23 May 2025
- 2025AutoML for Multi-Class Anomaly Compensation of Sensor Drift26 Feb 2025
- 2024MANO: Exploiting Matrix Norm for Unsupervised Accuracy Estimation Under Distribution Shifts29 May 2024
- 2024Relevant Irrelevance: Generating Alterfactual Explanations for Image Classifiers8 May 2024
- 2023Improving classifier decision boundaries using nearest neighbors5 Oct 2023
- 2023A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation19 May 2023
- 2022LADDER: Latent Boundary-guided Adversarial Training8 Jun 2022
- 2022Exploring Hidden Semantics in Neural Networks with Symbolic Regression22 Apr 2022
- 2021BinarizedAttack: Structural Poisoning Attacks to Graph-based Anomaly Detection18 Jun 2021
- 2021How to Explain Neural Networks: an Approximation Perspective17 May 2021