Robust and Accurate Object Detection via Self-Knowledge Distillation
Not on the map. Why?
Abstract (arXiv)
Object detection has achieved promising performance on clean datasets, but how to achieve better tradeoff between the adversarial robustness and clean precision is still under-explored. Adversarial training is the mainstream method to improve robustness, but most of the works will sacrifice clean precision to gain robustness than standard training. In this paper, we propose Unified Decoupled Feature Alignment (UDFA), a novel fine-tuning paradigm which achieves better performance than existing methods, by fully exploring the combination between self-knowledge distillation and adversarial training for object detection. We first use decoupled fore/back-ground features to construct self-knowledge distillation branch between clean feature representation from pretrained detector (served as teacher) and adversarial feature representation from student detector. Then we explore the self-knowledge distillation from a new angle by decoupling original branch into a self-supervised learning branch and a new self-knowledge distillation branch. With extensive experiments on the PASCAL-VOC and MS-COCO benchmarks, the evaluation results show that UDFA can surpass the standard training and state-of-the-art adversarial training methods for object detection. For example, compared with teacher detector, our approach on GFLV2 with ResNet-50 improves clean precision by 2.2 AP on PASCAL-VOC; compared with SOTA adversarial training methods, our approach improves clean precision by 1.6 AP, while improving adversarial robustness by 0.5 AP. Our code will be available at https://github.com/grispeut/udfa.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 45 of its 56 references that are in the map. First posted on arXiv 14 Nov 2021.
Builds on
45 of 56 references.
References · 45
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,482
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Mask R-CNNcited by 7,259
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016Feature Pyramid Networks for Object Detectioncited by 5,021
- 2018Encoder-Decoder with Atrous Separable Convolution for Semantic Image Segmentationcited by 3,210
- 2020Exploring Simple Siamese Representation Learningcited by 2,853
33 more
- 2014FitNets: Hints for Thin Deep Netscited by 1,619
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2019MMDetection: Open MMLab Detection Toolbox and Benchmarkcited by 1,379
- 2019Generalized Intersection over Union: A Metric and A Loss for Bounding Box Regressioncited by 1,361
- 2017Focal Loss for Dense Object Detectioncited by 749
- 2020Fast is better than free: Revisiting adversarial trainingcited by 723
- 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
- 2017Learning Efficient Convolutional Networks through Network Slimmingcited by 673
- 2019Res2Net: A New Multi-scale Backbone Architecturecited by 468
- 2020Generalized Focal Loss: Learning Qualified and Distributed Bounding Boxes for Dense Object Detectioncited by 408
- 2019Benchmarking Robustness in Object Detection: Autonomous Driving when Winter is Comingcited by 332
- 2019Adversarial Examples Improve Image Recognitioncited by 283
- 2018Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionalitycited by 280
- 2017Adversarial Examples for Semantic Segmentation and Object Detectioncited by 275
- 2017On Detecting Adversarial Perturbationscited by 232
- 2020Understanding and Improving Fast Adversarial Trainingcited by 213
- 2021DetCo: Unsupervised Contrastive Learning for Object Detectioncited by 205
- 2019Distilling Object Detectors with Fine-grained Feature Imitationcited by 188
- 2018Disentangling Adversarial Robustness and Generalizationcited by 171
- 2021Distilling Object Detectors via Decoupled Featurescited by 105
- 2020Generalized Focal Loss V2: Learning Reliable Localization Quality Estimation for Dense Object Detectioncited by 104
- 2020QEBA: Query-Efficient Boundary-Based Blackbox Attackcited by 103
- 2021Instance Localization for Self-supervised Detection Pretrainingcited by 99
- 2020SurFree: a fast surrogate-free black-box attackcited by 59
- 2019Black-Box Adversarial Attack with Transferable Model-based Embeddingcited by 57
- 2019Towards Adversarially Robust Object Detectioncited by 55
- 2021Robust and Accurate Object Detection via Adversarial Learningcited by 42
- 2021Class-Aware Robust Adversarial Training for Object Detectioncited by 27
- 2018Robust Adversarial Perturbation on Deep Proposal-based Modelscited by 26
- 2020HoughNet: Integrating near and long-range evidence for bottom-up object detectioncited by 20
- 2020Towards Visual Distortion in Black-Box Attackscited by 6
- 2020Using Feature Alignment Can Improve Clean Average Precision and Adversarial Robustness in Object Detectioncited by 2
Built on by
Citing papers per year: 2022: 1; 2023: 1; 2024: 0; 2025: 0; 2026: 1.
3 papers.