Skew Orthogonal Convolutions
Not on the map. Why?
Abstract (arXiv)
Training convolutional neural networks with a Lipschitz constraint under the l2 norm is useful for provable adversarial robustness, interpretable gradients, stable training, etc. While 1-Lipschitz networks can be designed by imposing a 1-Lipschitz constraint on each layer, training such networks requires each layer to be gradient norm preserving (GNP) to prevent gradients from vanishing. However, existing GNP convolutions suffer from slow training, lead to significant reduction in accuracy and provide no guarantees on their approximations. In this work, we propose a GNP convolution layer called Skew Orthogonal Convolution (SOC) that uses the following mathematical property: when a matrix is it Skew-Symmetric, its exponential function is an it orthogonal matrix. To use this property, we first construct a convolution filter whose Jacobian is Skew-Symmetric. Then, we use the Taylor series expansion of the Jacobian exponential to construct the SOC layer that is orthogonal. To efficiently implement SOC, we keep a finite number of terms from the Taylor series and provide a provable guarantee on the approximation error. Our experiments on CIFAR-10 and CIFAR-100 show that SOC allows us to train provably Lipschitz, large convolutional neural networks significantly faster than prior works while achieving significant improvements for both standard and certified robust accuracies.
Key facts. Cited by 67 papers in the map (data through 14 Oct 2026). Builds on 36 of its 43 references that are in the map. First posted on arXiv 24 May 2021.
Builds on
36 of 43 references.
References · 36
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2017Improved Training of Wasserstein GANscited by 2,235
- 2018Spectral Normalization for Generative Adversarial Networkscited by 1,636
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
- 2018Robustness May Be at Odds with Accuracycited by 880
- 2020Fast is better than free: Revisiting adversarial trainingcited by 727
- 2017Spectrally-normalized margin bounds for neural networkscited by 686
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 567
- 2018Certified Robustness to Adversarial Examples with Differential Privacycited by 468
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 445
- 2017Wasserstein Auto-Encoderscited by 373
24 more
- 2019Provably Robust Deep Learning via Adversarially Trained Smoothed Classifierscited by 330
- 2018Regularisation of Neural Networks by Enforcing Lipschitz Continuitycited by 314
- 2017Parseval Networks: Improving Robustness to Adversarial Examplescited by 293
- 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 255
- 2018Sorting out Lipschitz function approximationcited by 213
- 2019Plug-and-Play Methods Provably Converge with Properly Trained Denoiserscited by 198
- 2018Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networkscited by 195
- 2018Certified Adversarial Robustness with Additive Noisecited by 180
- 2018Semidefinite relaxations for certifying robustness to adversarial examplescited by 179
- 2018Dynamical Isometry and a Mean Field Theory of CNNs: How to Train 10,000-Layer Vanilla Convolutional Neural Networkscited by 176
- 2017Towards Robust Neural Networks via Random Self-ensemblecited by 159
- 2018Scaling provable adversarial defensescited by 143
- 2018i-RevNet: Deep Invertible Networkscited by 137
- 2018The Singular Values of Convolutional Layerscited by 95
- 2019Preventing Gradient Attenuation in Lipschitz Constrained Convolutional Networkscited by 87
- 2019Generalization bounds for deep convolutional neural networkscited by 59
- 2017Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classificationcited by 56
- 2020Curse of Dimensionality on Randomized Smoothing for Certifiable Robustnesscited by 56
- 2018Provable Robustness of ReLU networks via Maximization of Linear Regionscited by 51
- 2020Second-Order Provable Defenses against Adversarial Attackscited by 40
- 2019Certifiably Robust Interpretation in Deep Learningcited by 35
- 2018RecurJac: An Efficient Recursive Algorithm for Bounding Jacobian Matrix of Neural Networks and Its Applicationscited by 27
- 2018L2-Nonexpansive Neural Networkscited by 21
- 2020The Convolution Exponential and Generalized Sylvester Flowscited by 18
Built on by
Citing papers per year: 2021: 6; 2022: 11; 2023: 17; 2024: 17; 2025: 8; 2026: 8.
67 papers.
Sort:
By area:
- 2023Certifying LLM Safety against Adversarial Promptingcited by 266
- 2021A Dynamical System Perspective for Lipschitz Neural Networkscited by 60
- 2023A Unified Algebraic Perspective on Lipschitz Neural Networkscited by 60
- 2022Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspectivecited by 51
- 2023Direct Parameterization of Lipschitz-Bounded Deep Networkscited by 51
- 2021Improved deterministic l2 robustness on CIFAR-10 and CIFAR-100cited by 47
- 2022Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagationcited by 45
- 2021Policy Smoothing for Provably Robust Reinforcement Learningcited by 40
- 2022Almost-Orthogonal Layers for Efficient General-Purpose Lipschitz Networkscited by 39
- 2022LOT: Layer-wise Orthogonal Training on Improving ℓ2 Certified Robustnesscited by 33
- 2022projUNN: efficient method for training deep networks with unitary matricescited by 27
- 2023Some Fundamental Aspects about Lipschitz Continuity of Neural Networkscited by 26
38 more
- 2021Boosting the Certified Robustness of L-infinity Distance Netscited by 24
- 2023Expressive Losses for Verified Robustness via Convex Combinationscited by 23
- 2023Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularizationcited by 21
- 2024Parseval Regularization for Continual Reinforcement Learningcited by 21
- 2023Infeasible Deterministic, Stochastic, and Variance-Reduction Algorithms for Optimization under Orthogonality Constraintscited by 18
- 2021Mutual Adversarial Training: Learning together is better than going alonecited by 17
- 2021Existence, Stability and Scalability of Orthogonal Convolutional Neural Networkscited by 16
- 20231-Lipschitz Layers Compared: Memory, Speed, and Certifiable Robustnesscited by 16
- 2023Unlocking Deterministic Robustness Certification on ImageNetcited by 13
- 2023Robust low-rank training via approximate orthonormal constraintscited by 13
- 2023DP-SGD Without Clipping: The Lipschitz Neural Network Waycited by 11
- 2024PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attackscited by 11
- 2024Group and Shuffle: Efficient Structured Orthogonal Parametrizationcited by 11
- 2023Robust One-Class Classification with Signed Distance Function using 1-Lipschitz Neural Networkscited by 10
- 2022Improved techniques for deterministic l2 robustnesscited by 9
- 2022Towards Practical Control of Singular Values of Convolutional Layerscited by 9
- 2024Monotone, Bi-Lipschitz, and Polyak-Lojasiewicz Networkscited by 9
- 2023The Lipschitz-Variance-Margin Tradeoff for Enhanced Randomized Smoothingcited by 8
- 2024Unitary convolutions for learning on graphs and groupscited by 8
- 2025An Adaptive Orthogonal Convolution Scheme for Efficient and Flexible CNN Architecturescited by 8
- 2024Novel Quadratic Constraints for Extending LipSDP beyond Slope-Restricted Activationscited by 7
- 2024Spectrum Extraction and Clipping for Implicitly Linear Layerscited by 7
- 2024Tight and Efficient Upper Bound on Spectral Norm of Convolutional Layerscited by 7
- 2022Orthogonal SVD Covariance Conditioning and Latent Disentanglementcited by 5
- 2024Graph Unitary Message Passingcited by 5
- 2024OrthCaps: An Orthogonal CapsNet with Sparse Attention Routing and Pruningcited by 5
- 2025Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Losscited by 5
- 2022Improving Covariance Conditioning of the SVD Meta-layer by Orthogonalitycited by 4
- 2022Robust-by-Design Classification via Unitary-Gradient Neural Networkscited by 4
- 2023A Recipe for Improved Certifiable Robustnesscited by 4
- 2024Spectral Norm of Convolutional Layers with Circular and Zero Paddingscited by 4
- 2024Compositional Curvature Bounds for Deep Neural Networkscited by 4
- 2025Calibrating and Rotating: A Unified Framework for Weight Conditioning in PEFTcited by 4
- 2024Sparser, Better, Deeper, Stronger: Improving Sparse Training with Exact Orthogonal Initializationcited by 3
- 2025LipShiFT: A Certifiably Robust Shift-based Vision Transformercited by 3
- 2022Towards Evading the Limits of Randomized Smoothing: A Theoretical Analysiscited by 2
- 2023Towards Better Certified Segmentation via Diffusion Modelscited by 2
- 2024COMMIT: Certifying Robustness of Multi-Sensor Fusion Systems against Semantic Attackscited by 2
50 most cited of 67 All 67 (JSON)
- 2026Riemannian Structure and Optimization for a Class of Low-Parametric Orthogonal Matrices23 Sep 2026
- 2026Adversarial Training Without Input Gradients via Low-Rank Householder Expansions27 Aug 2026
- 2026LiST: Lipschitz Scaling Training for Robust and Calibrated Neural Networks8 Jul 2026
- 2026Hybrid Robustness Verification for Spatio-Temporal Neural Networks8 Jun 2026
- 2026LoCO: Low-rank Compositional Rotation Fine-tuning15 May 2026
- 2026Fitting Is Not Enough: Smoothness in Extremely Quantized LLMs9 May 2026
- 2026LipNeXt: Scaling up Lipschitz-based Certified Robustness to Billion-parameter Models26 Jan 2026
- 2026Orthogonium : A Unified, Efficient Library of Orthogonal and 1-Lipschitz Building Blocks20 Jan 2026
- 2025Forward Only Learning for Orthogonal Neural Networks of any Depth19 Dec 2025
- 2025Turbo-Muon: Almost-Orthogonal Pre-Conditioning for Fast Muon Updates4 Dec 2025
- 2025Calibrating and Rotating: A Unified Framework for Weight Conditioning in PEFT28 Oct 2025
- 2025Deep Network Trainability via Persistent Subspace Orthogonality4 Aug 2025
38 more
- 2025Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Loss21 May 2025
- 2025R2DN: Scalable Parameterization of Contracting and Lipschitz Recurrent Deep Networks1 Apr 2025
- 2025LipShiFT: A Certifiably Robust Shift-based Vision Transformer18 Mar 2025
- 2025An Adaptive Orthogonal Convolution Scheme for Efficient and Flexible CNN Architectures14 Jan 2025
- 2024Parseval Regularization for Continual Reinforcement Learning10 Dec 2024
- 2024Integrating uncertainty quantification into randomized smoothing based robustness guarantees27 Oct 2024
- 2024Unitary convolutions for learning on graphs and groups7 Oct 2024
- 2024LOTOS: Layer-wise Orthogonalization for Training Robust Ensembles7 Oct 2024
- 2024Tight and Efficient Upper Bound on Spectral Norm of Convolutional Layers18 Sep 2024
- 2024Enhancing Robustness of Vision-Language Models through Orthogonality Learning and Self-Regularization11 Jul 2024
- 2024Group and Shuffle: Efficient Structured Orthogonal Parametrization14 Jun 2024
- 2024Compositional Curvature Bounds for Deep Neural Networks7 Jun 2024
- 2024Sparser, Better, Deeper, Stronger: Improving Sparse Training with Exact Orthogonal Initialization3 Jun 2024
- 2024OrthCaps: An Orthogonal CapsNet with Sparse Attention Routing and Pruning20 Mar 2024
- 2024Graph Unitary Message Passing17 Mar 2024
- 2024COMMIT: Certifying Robustness of Multi-Sensor Fusion Systems against Semantic Attacks4 Mar 2024
- 2024Spectrum Extraction and Clipping for Implicitly Linear Layers25 Feb 2024
- 2024PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks4 Feb 2024
- 2024Monotone, Bi-Lipschitz, and Polyak-Lojasiewicz Networks2 Feb 2024
- 2024Spectral Norm of Convolutional Layers with Circular and Zero Paddings31 Jan 2024
- 2024Novel Quadratic Constraints for Extending LipSDP beyond Slope-Restricted Activations25 Jan 2024
- 20231-Lipschitz Layers Compared: Memory, Speed, and Certifiable Robustness28 Nov 2023
- 20231-Lipschitz Neural Networks are more expressive with N-Activations10 Nov 2023
- 2023Is Certifying ℓp Robustness Still Worthwhile?13 Oct 2023
- 2023A Recipe for Improved Certifiable Robustness4 Oct 2023
- 2023Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization29 Sep 2023
- 2023The Lipschitz-Variance-Margin Tradeoff for Enhanced Randomized Smoothing28 Sep 2023
- 2023Certifying LLM Safety against Adversarial Prompting6 Sep 2023
- 2023Towards Better Certified Segmentation via Diffusion Models16 Jun 2023
- 2023Robust low-rank training via approximate orthonormal constraints2 Jun 2023
- 2023DP-SGD Without Clipping: The Lipschitz Neural Network Way25 May 2023
- 2023Expressive Losses for Verified Robustness via Convex Combinations23 May 2023
- 2023Infeasible Deterministic, Stochastic, and Variance-Reduction Algorithms for Optimization under Orthogonality Constraints29 Mar 2023
- 2023A Unified Algebraic Perspective on Lipschitz Neural Networks6 Mar 2023
- 2023Some Fundamental Aspects about Lipschitz Continuity of Neural Networks21 Feb 2023
- 2023Unlocking Deterministic Robustness Certification on ImageNet29 Jan 2023
- 2023Direct Parameterization of Lipschitz-Bounded Deep Networks27 Jan 2023
- 2023Robust One-Class Classification with Signed Distance Function using 1-Lipschitz Neural Networks26 Jan 2023
50 newest of 67 All 67 (JSON)
- 2024Parseval Regularization for Continual Reinforcement Learningcited by 21
- 2024Parseval Regularization for Continual Reinforcement Learning10 Dec 2024
- 2023Towards Better Certified Segmentation via Diffusion Models16 Jun 2023
- 2023Certifying LLM Safety against Adversarial Promptingcited by 266
- 2023Certifying LLM Safety against Adversarial Prompting6 Sep 2023
- 2021A Dynamical System Perspective for Lipschitz Neural Networkscited by 60
- 2023A Unified Algebraic Perspective on Lipschitz Neural Networkscited by 60
- 2022Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspectivecited by 51
- 2023Direct Parameterization of Lipschitz-Bounded Deep Networkscited by 51
- 2021Improved deterministic l2 robustness on CIFAR-10 and CIFAR-100cited by 47
- 2022Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagationcited by 45
- 2021Policy Smoothing for Provably Robust Reinforcement Learningcited by 40
- 2022Almost-Orthogonal Layers for Efficient General-Purpose Lipschitz Networkscited by 39
- 2022LOT: Layer-wise Orthogonal Training on Improving ℓ2 Certified Robustnesscited by 33
- 2022projUNN: efficient method for training deep networks with unitary matricescited by 27
- 2023Some Fundamental Aspects about Lipschitz Continuity of Neural Networkscited by 26
- 2021Boosting the Certified Robustness of L-infinity Distance Netscited by 24
12 most cited of 63 All 63 (JSON)
- 2026Riemannian Structure and Optimization for a Class of Low-Parametric Orthogonal Matrices23 Sep 2026
- 2026Adversarial Training Without Input Gradients via Low-Rank Householder Expansions27 Aug 2026
- 2026LiST: Lipschitz Scaling Training for Robust and Calibrated Neural Networks8 Jul 2026
- 2026Hybrid Robustness Verification for Spatio-Temporal Neural Networks8 Jun 2026
- 2026LoCO: Low-rank Compositional Rotation Fine-tuning15 May 2026
- 2026Fitting Is Not Enough: Smoothness in Extremely Quantized LLMs9 May 2026
- 2026LipNeXt: Scaling up Lipschitz-based Certified Robustness to Billion-parameter Models26 Jan 2026
- 2026Orthogonium : A Unified, Efficient Library of Orthogonal and 1-Lipschitz Building Blocks20 Jan 2026
- 2025Forward Only Learning for Orthogonal Neural Networks of any Depth19 Dec 2025
- 2025Turbo-Muon: Almost-Orthogonal Pre-Conditioning for Fast Muon Updates4 Dec 2025
- 2025Calibrating and Rotating: A Unified Framework for Weight Conditioning in PEFT28 Oct 2025
- 2025Deep Network Trainability via Persistent Subspace Orthogonality4 Aug 2025
12 newest of 63 All 63 (JSON)