mlsanityData to 14 Oct 2026

Skew Orthogonal Convolutions

arXiv 2105.11417 ↗First posted 24 May 2021cs.LGcited by 67

Not on the map. Why?

Abstract (arXiv)

Training convolutional neural networks with a Lipschitz constraint under the l2 norm is useful for provable adversarial robustness, interpretable gradients, stable training, etc. While 1-Lipschitz networks can be designed by imposing a 1-Lipschitz constraint on each layer, training such networks requires each layer to be gradient norm preserving (GNP) to prevent gradients from vanishing. However, existing GNP convolutions suffer from slow training, lead to significant reduction in accuracy and provide no guarantees on their approximations. In this work, we propose a GNP convolution layer called Skew Orthogonal Convolution (SOC) that uses the following mathematical property: when a matrix is it Skew-Symmetric, its exponential function is an it orthogonal matrix. To use this property, we first construct a convolution filter whose Jacobian is Skew-Symmetric. Then, we use the Taylor series expansion of the Jacobian exponential to construct the SOC layer that is orthogonal. To efficiently implement SOC, we keep a finite number of terms from the Taylor series and provide a provable guarantee on the approximation error. Our experiments on CIFAR-10 and CIFAR-100 show that SOC allows us to train provably Lipschitz, large convolutional neural networks significantly faster than prior works while achieving significant improvements for both standard and certified robust accuracies.

Key facts. Cited by 67 papers in the map (data through 14 Oct 2026). Builds on 36 of its 43 references that are in the map. First posted on arXiv 24 May 2021.

Builds on

36 of 43 references.

References · 36

  1. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  2. 2013Intriguing properties of neural networkscited by 5,155
  3. 2017Improved Training of Wasserstein GANscited by 2,235
  4. 2018Spectral Normalization for Generative Adversarial Networkscited by 1,636
  5. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
  6. 2018Robustness May Be at Odds with Accuracycited by 880
  7. 2020Fast is better than free: Revisiting adversarial trainingcited by 727
  8. 2017Spectrally-normalized margin bounds for neural networkscited by 686
  9. 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 567
  10. 2018Certified Robustness to Adversarial Examples with Differential Privacycited by 468
  11. 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 445
  12. 2017Wasserstein Auto-Encoderscited by 373
24 more
  1. 2019Provably Robust Deep Learning via Adversarially Trained Smoothed Classifierscited by 330
  2. 2018Regularisation of Neural Networks by Enforcing Lipschitz Continuitycited by 314
  3. 2017Parseval Networks: Improving Robustness to Adversarial Examplescited by 293
  4. 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 255
  5. 2018Sorting out Lipschitz function approximationcited by 213
  6. 2019Plug-and-Play Methods Provably Converge with Properly Trained Denoiserscited by 198
  7. 2018Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networkscited by 195
  8. 2018Certified Adversarial Robustness with Additive Noisecited by 180
  9. 2018Semidefinite relaxations for certifying robustness to adversarial examplescited by 179
  10. 2018Dynamical Isometry and a Mean Field Theory of CNNs: How to Train 10,000-Layer Vanilla Convolutional Neural Networkscited by 176
  11. 2017Towards Robust Neural Networks via Random Self-ensemblecited by 159
  12. 2018Scaling provable adversarial defensescited by 143
  13. 2018i-RevNet: Deep Invertible Networkscited by 137
  14. 2018The Singular Values of Convolutional Layerscited by 95
  15. 2019Preventing Gradient Attenuation in Lipschitz Constrained Convolutional Networkscited by 87
  16. 2019Generalization bounds for deep convolutional neural networkscited by 59
  17. 2017Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classificationcited by 56
  18. 2020Curse of Dimensionality on Randomized Smoothing for Certifiable Robustnesscited by 56
  19. 2018Provable Robustness of ReLU networks via Maximization of Linear Regionscited by 51
  20. 2020Second-Order Provable Defenses against Adversarial Attackscited by 40
  21. 2019Certifiably Robust Interpretation in Deep Learningcited by 35
  22. 2018RecurJac: An Efficient Recursive Algorithm for Bounding Jacobian Matrix of Neural Networks and Its Applicationscited by 27
  23. 2018L2-Nonexpansive Neural Networkscited by 21
  24. 2020The Convolution Exponential and Generalized Sylvester Flowscited by 18

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2021: 6; 2022: 11; 2023: 17; 2024: 17; 2025: 8; 2026: 8.

67 papers.

Sort:

By area:

  1. 2023Certifying LLM Safety against Adversarial Promptingcited by 266
  2. 2021A Dynamical System Perspective for Lipschitz Neural Networkscited by 60
  3. 2023A Unified Algebraic Perspective on Lipschitz Neural Networkscited by 60
  4. 2022Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspectivecited by 51
  5. 2023Direct Parameterization of Lipschitz-Bounded Deep Networkscited by 51
  6. 2021Improved deterministic l2 robustness on CIFAR-10 and CIFAR-100cited by 47
  7. 2022Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagationcited by 45
  8. 2021Policy Smoothing for Provably Robust Reinforcement Learningcited by 40
  9. 2022Almost-Orthogonal Layers for Efficient General-Purpose Lipschitz Networkscited by 39
  10. 2022LOT: Layer-wise Orthogonal Training on Improving ℓ2 Certified Robustnesscited by 33
  11. 2022projUNN: efficient method for training deep networks with unitary matricescited by 27
  12. 2023Some Fundamental Aspects about Lipschitz Continuity of Neural Networkscited by 26
38 more
  1. 2021Boosting the Certified Robustness of L-infinity Distance Netscited by 24
  2. 2023Expressive Losses for Verified Robustness via Convex Combinationscited by 23
  3. 2023Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularizationcited by 21
  4. 2024Parseval Regularization for Continual Reinforcement Learningcited by 21
  5. 2023Infeasible Deterministic, Stochastic, and Variance-Reduction Algorithms for Optimization under Orthogonality Constraintscited by 18
  6. 2021Mutual Adversarial Training: Learning together is better than going alonecited by 17
  7. 2021Existence, Stability and Scalability of Orthogonal Convolutional Neural Networkscited by 16
  8. 20231-Lipschitz Layers Compared: Memory, Speed, and Certifiable Robustnesscited by 16
  9. 2023Unlocking Deterministic Robustness Certification on ImageNetcited by 13
  10. 2023Robust low-rank training via approximate orthonormal constraintscited by 13
  11. 2023DP-SGD Without Clipping: The Lipschitz Neural Network Waycited by 11
  12. 2024PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attackscited by 11
  13. 2024Group and Shuffle: Efficient Structured Orthogonal Parametrizationcited by 11
  14. 2023Robust One-Class Classification with Signed Distance Function using 1-Lipschitz Neural Networkscited by 10
  15. 2022Improved techniques for deterministic l2 robustnesscited by 9
  16. 2022Towards Practical Control of Singular Values of Convolutional Layerscited by 9
  17. 2024Monotone, Bi-Lipschitz, and Polyak-Lojasiewicz Networkscited by 9
  18. 2023The Lipschitz-Variance-Margin Tradeoff for Enhanced Randomized Smoothingcited by 8
  19. 2024Unitary convolutions for learning on graphs and groupscited by 8
  20. 2025An Adaptive Orthogonal Convolution Scheme for Efficient and Flexible CNN Architecturescited by 8
  21. 2024Novel Quadratic Constraints for Extending LipSDP beyond Slope-Restricted Activationscited by 7
  22. 2024Spectrum Extraction and Clipping for Implicitly Linear Layerscited by 7
  23. 2024Tight and Efficient Upper Bound on Spectral Norm of Convolutional Layerscited by 7
  24. 2022Orthogonal SVD Covariance Conditioning and Latent Disentanglementcited by 5
  25. 2024Graph Unitary Message Passingcited by 5
  26. 2024OrthCaps: An Orthogonal CapsNet with Sparse Attention Routing and Pruningcited by 5
  27. 2025Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Losscited by 5
  28. 2022Improving Covariance Conditioning of the SVD Meta-layer by Orthogonalitycited by 4
  29. 2022Robust-by-Design Classification via Unitary-Gradient Neural Networkscited by 4
  30. 2023A Recipe for Improved Certifiable Robustnesscited by 4
  31. 2024Spectral Norm of Convolutional Layers with Circular and Zero Paddingscited by 4
  32. 2024Compositional Curvature Bounds for Deep Neural Networkscited by 4
  33. 2025Calibrating and Rotating: A Unified Framework for Weight Conditioning in PEFTcited by 4
  34. 2024Sparser, Better, Deeper, Stronger: Improving Sparse Training with Exact Orthogonal Initializationcited by 3
  35. 2025LipShiFT: A Certifiably Robust Shift-based Vision Transformercited by 3
  36. 2022Towards Evading the Limits of Randomized Smoothing: A Theoretical Analysiscited by 2
  37. 2023Towards Better Certified Segmentation via Diffusion Modelscited by 2
  38. 2024COMMIT: Certifying Robustness of Multi-Sensor Fusion Systems against Semantic Attackscited by 2

50 most cited of 67 All 67 (JSON)