mlsanityData to 14 Oct 2026

Improving Generalization via Uncertainty Driven Perturbations

arXiv 2202.05737 ↗First posted 11 Feb 2022cs.LGcited by 3

Not on the map. Why?

Abstract (arXiv)

Recently Shah et al., 2020 pointed out the pitfalls of the simplicity bias - the tendency of gradient-based algorithms to learn simple models - which include the model's high sensitivity to small input perturbations, as well as sub-optimal margins. In particular, while Stochastic Gradient Descent yields max-margin boundary on linear models, such guarantee does not extend to non-linear models. To mitigate the simplicity bias, we consider uncertainty-driven perturbations (UDP) of the training data points, obtained iteratively by following the direction that maximizes the model's estimated uncertainty. The uncertainty estimate does not rely on the input's label and it is highest at the decision boundary, and - unlike loss-driven perturbations - it allows for using a larger range of values for the perturbation magnitude. Furthermore, as real-world datasets have non-isotropic distances between data points of different classes, the above property is particularly appealing for increasing the margin of the decision boundary, which in turn improves the model's generalization. We show that UDP is guaranteed to achieve the maximum margin decision boundary on linear models and that it notably increases it on challenging simulated datasets. For nonlinear models, we show empirically that UDP reduces the simplicity bias and learns more exhaustive features. Interestingly, it also achieves competitive loss-based robustness and generalization trade-off on several datasets.

Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Builds on 51 of its 77 references that are in the map. First posted on arXiv 11 Feb 2022.

Builds on

51 of 77 references.

References · 51

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2014Adam: A Method for Stochastic Optimizationcited by 37,240
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  4. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  5. 2015Rethinking the Inception Architecture for Computer Visioncited by 5,475
  6. 2013Intriguing properties of neural networkscited by 5,155
  7. 2017On Calibration of Modern Neural Networkscited by 4,960
  8. 2015Dropout as a Bayesian Approximation: Representing Model Uncertainty in Deep Learningcited by 4,448
  9. 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
  10. 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,926
  11. 2016Understanding deep learning requires rethinking generalizationcited by 1,674
  12. 2016Concrete Problems in AI Safetycited by 1,642
38 more
  1. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
  2. 2016Variational Inference: A Review for Statisticianscited by 1,472
  3. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
  4. 2017Towards A Rigorous Science of Interpretable Machine Learningcited by 1,416
  5. 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,312
  6. 2019Can You Trust Your Model's Uncertainty? Evaluating Predictive Uncertainty Under Dataset Shiftcited by 1,287
  7. 2014How transferable are features in deep neural networks?cited by 1,225
  8. 2017A Closer Look at Memorization in Deep Networkscited by 942
  9. 2018Robustness May Be at Odds with Accuracycited by 880
  10. 2017Ensemble Adversarial Training: Attacks and Defensescited by 840
  11. 2020Fast is better than free: Revisiting adversarial trainingcited by 727
  12. 2017Evasion Attacks against Machine Learning at Test Timecited by 689
  13. 2017The Implicit Bias of Gradient Descent on Separable Datacited by 655
  14. 2017Computing Nonvacuous Generalization Bounds for Deep (Stochastic) Neural Networks with Many More Parameters than Training Datacited by 533
  15. 2017Regularizing Neural Networks by Penalizing Confident Output Distributionscited by 464
  16. 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 414
  17. 2015Autoencoding beyond pixels using a learned similarity metriccited by 407
  18. 2015Return of Frustratingly Easy Domain Adaptationcited by 391
  19. 2020The Pitfalls of Simplicity Bias in Neural Networkscited by 351
  20. 2014In Search of the Real Inductive Bias: On the Role of Implicit Regularization in Deep Learningcited by 342
  21. 2020Hands-on Bayesian Neural Networks -- a Tutorial for Deep Learning Userscited by 338
  22. 2020Attacks Which Do Not Kill Training Make Adversarial Learning Strongercited by 243
  23. 2020Understanding and Improving Fast Adversarial Trainingcited by 214
  24. 2018Disentangling Adversarial Robustness and Generalizationcited by 172
  25. 2018Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Modelscited by 135
  26. 2016Robust Large Margin Deep Neural Networkscited by 118
  27. 2018Large Margin Deep Networks for Classificationcited by 112
  28. 2021On Feature Collapse and Deep Kernel Learning for Single Forward Pass Uncertaintycited by 87
  29. 2021Desiderata for Representation Learning: A Causal Perspectivecited by 76
  30. 2019Adversarially robust transfer learningcited by 67
  31. 2020A law of robustness for two-layers neural networkscited by 55
  32. 2017Variational Approaches for Auto-Encoding Generative Adversarial Networkscited by 52
  33. 2015A Unified Gradient Regularization Family for Adversarial Examplescited by 43
  34. 2020Uncertainty Estimation Using a Single Deep Deterministic Neural Networkcited by 37
  35. 2020Improving Calibration through the Relationship with Adversarial Robustnesscited by 26
  36. 2021Which priors matter? Benchmarking models for learning latent dynamicscited by 26
  37. 2017Intriguing Properties of Adversarial Examplescited by 20
  38. 2021The Peril of Popular Deep Learning Uncertainty Estimation Methodscited by 12

50 most cited of 51 All 51 (JSON)

Built on by

Cited by year

Citing papers per year: 2023: 2; 2024: 1.

3 papers.