Fast Differentiable Clipping-Aware Normalization and Rescaling
Not on the map. Why?
Abstract (arXiv)
Rescaling a vector vecδ ∈ ℝn to a desired length is a common operation in many areas such as data science and machine learning. When the rescaled perturbation η vecδ is added to a starting point vecx ∈ D (where D is the data domain, e.g. D = [0, 1]n), the resulting vector vecv = vecx + η vecδ will in general not be in D. To enforce that the perturbed vector v is in D, the values of vecv can be clipped to D. This subsequent element-wise clipping to the data domain does however reduce the effective perturbation size and thus interferes with the rescaling of vecδ. The optimal rescaling η to obtain a perturbation with the desired norm after the clipping can be iteratively approximated using a binary search. However, such an iterative approach is slow and non-differentiable. Here we show that the optimal rescaling can be found analytically using a fast and differentiable algorithm. Our algorithm works for any p-norm and can be used to train neural networks on inputs with normalized perturbations. We provide native implementations for PyTorch, TensorFlow, JAX, and NumPy based on EagerPy.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). First posted on arXiv 15 Jul 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 1; 2022: 3; 2023: 1.
5 papers.
- 2022Smart App Attack: Hacking Deep Learning Models in Android Appscited by 12
- 2023Targeted Adversarial Attacks on Wind Power Forecastscited by 9
- 2022DDDM: a Brain-Inspired Framework for Robust Classificationcited by 3
- 2021Denoised Internal Models: a Brain-Inspired Autoencoder against Adversarial Attackscited by 1
- 2022Learning Representations Robust to Group Shifts and Adversarial Examplescited by 0
- 2023Targeted Adversarial Attacks on Wind Power Forecasts29 Mar 2023
- 2022DDDM: a Brain-Inspired Framework for Robust Classification1 May 2022
- 2022Smart App Attack: Hacking Deep Learning Models in Android Apps23 Apr 2022
- 2022Learning Representations Robust to Group Shifts and Adversarial Examples18 Feb 2022
- 2021Denoised Internal Models: a Brain-Inspired Autoencoder against Adversarial Attacks21 Nov 2021