Improving Model Robustness by Adaptively Correcting Perturbation Levels with Active Queries
Not on the map. Why?
Abstract (arXiv)
In addition to high accuracy, robustness is becoming increasingly important for machine learning models in various applications. Recently, much research has been devoted to improving the model robustness by training with noise perturbations. Most existing studies assume a fixed perturbation level for all training examples, which however hardly holds in real tasks. In fact, excessive perturbations may destroy the discriminative content of an example, while deficient perturbations may fail to provide helpful information for improving the robustness. Motivated by this observation, we propose to adaptively adjust the perturbation levels for each example in the training process. Specifically, a novel active learning framework is proposed to allow the model to interactively query the correct perturbation level from human experts. By designing a cost-effective sampling strategy along with a new query type, the robustness can be significantly improved with a few queries. Both theoretical analysis and experimental studies validate the effectiveness of the proposed approach.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 27 of its 53 references that are in the map. First posted on arXiv 27 Mar 2021.
Builds on
27 of 53 references.
References · 27
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2015Delving Deep into Rectifiers: Surpassing Human-Level Performance on ImageNet Classificationcited by 3,590
- 2014Sequence to Sequence Learning with Neural Networkscited by 2,974
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
- 2020On Adaptive Attacks to Adversarial Example Defensescited by 547
15 more
- 2019Using Self-Supervised Learning Can Improve Model Robustness and Uncertaintycited by 511
- 2019On Evaluating Adversarial Robustnesscited by 442
- 2018Generating Natural Language Adversarial Examplescited by 422
- 2019Making Convolutional Networks Shift-Invariant Againcited by 390
- 2019Benchmarking Robustness in Object Detection: Autonomous Driving when Winter is Comingcited by 332
- 2020Attacks Which Do Not Kill Training Make Adversarial Learning Strongercited by 242
- 2018Adversarial Risk and the Dangers of Evaluating Against Weak Attackscited by 221
- 2019MNIST-C: A Robustness Benchmark for Computer Visioncited by 137
- 2019Adversarial Examples Are a Natural Consequence of Test Error in Noisecited by 114
- 2019Wasserstein Adversarial Examples via Projected Sinkhorn Iterationscited by 89
- 2019Metric Learning for Adversarial Robustnesscited by 77
- 2020CAT: Customized Adversarial Training for Improved Robustnesscited by 61
- 2020Learning perturbation sets for robust machine learningcited by 48
- 2020A simple way to make neural networks robust against diverse image corruptionscited by 30
- 2017Active Decision Boundary Annotation with Deep Generative Modelscited by 8
Built on by
Citing papers per year: 2022: 2; 2023: 3; 2024: 3; 2025: 0; 2026: 1.
9 papers.
- 2022Active Learning for Open-set Annotationcited by 33
- 2022A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunitiescited by 8
- 2024Machine Learning Robustness: A Primercited by 8
- 2024Bidirectional Uncertainty-Based Active Learning for Open Set Annotationcited by 7
- 2023How To Overcome Confirmation Bias in Semi-Supervised Image Classification By Active Learningcited by 2
- 2023Robustness Enhancement in Neural Networks with Alpha-Stable Training Noisecited by 2
- 2023Dynamic Domain Discrepancy Adjustment for Active Multi-Domain Adaptationcited by 0
- 2024Dirichlet-Based Coarse-to-Fine Example Selection For Open-Set Annotationcited by 0
- 2026Towards Resilient Intrusion Detection in CubeSats: Challenges, TinyML Solutions, and Future Directionscited by 0
- 2026Towards Resilient Intrusion Detection in CubeSats: Challenges, TinyML Solutions, and Future Directions7 Apr 2026
- 2024Dirichlet-Based Coarse-to-Fine Example Selection For Open-Set Annotation26 Sep 2024
- 2024Machine Learning Robustness: A Primer1 Apr 2024
- 2024Bidirectional Uncertainty-Based Active Learning for Open Set Annotation23 Feb 2024
- 2023Robustness Enhancement in Neural Networks with Alpha-Stable Training Noise17 Nov 2023
- 2023How To Overcome Confirmation Bias in Semi-Supervised Image Classification By Active Learning16 Aug 2023
- 2023Dynamic Domain Discrepancy Adjustment for Active Multi-Domain Adaptation26 Jul 2023
- 2022A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities17 Oct 2022
- 2022Active Learning for Open-set Annotation18 Jan 2022