Improving Generalization via Uncertainty Driven Perturbations
Not on the map. Why?
Abstract (arXiv)
Recently Shah et al., 2020 pointed out the pitfalls of the simplicity bias - the tendency of gradient-based algorithms to learn simple models - which include the model's high sensitivity to small input perturbations, as well as sub-optimal margins. In particular, while Stochastic Gradient Descent yields max-margin boundary on linear models, such guarantee does not extend to non-linear models. To mitigate the simplicity bias, we consider uncertainty-driven perturbations (UDP) of the training data points, obtained iteratively by following the direction that maximizes the model's estimated uncertainty. The uncertainty estimate does not rely on the input's label and it is highest at the decision boundary, and - unlike loss-driven perturbations - it allows for using a larger range of values for the perturbation magnitude. Furthermore, as real-world datasets have non-isotropic distances between data points of different classes, the above property is particularly appealing for increasing the margin of the decision boundary, which in turn improves the model's generalization. We show that UDP is guaranteed to achieve the maximum margin decision boundary on linear models and that it notably increases it on challenging simulated datasets. For nonlinear models, we show empirically that UDP reduces the simplicity bias and learns more exhaustive features. Interestingly, it also achieves competitive loss-based robustness and generalization trade-off on several datasets.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Builds on 51 of its 77 references that are in the map. First posted on arXiv 11 Feb 2022.
Builds on
51 of 77 references.
References · 51
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2015Rethinking the Inception Architecture for Computer Visioncited by 5,475
- 2013Intriguing properties of neural networkscited by 5,155
- 2017On Calibration of Modern Neural Networkscited by 4,960
- 2015Dropout as a Bayesian Approximation: Representing Model Uncertainty in Deep Learningcited by 4,448
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
- 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,926
- 2016Understanding deep learning requires rethinking generalizationcited by 1,674
- 2016Concrete Problems in AI Safetycited by 1,642
38 more
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
- 2016Variational Inference: A Review for Statisticianscited by 1,472
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
- 2017Towards A Rigorous Science of Interpretable Machine Learningcited by 1,416
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,312
- 2019Can You Trust Your Model's Uncertainty? Evaluating Predictive Uncertainty Under Dataset Shiftcited by 1,287
- 2014How transferable are features in deep neural networks?cited by 1,225
- 2017A Closer Look at Memorization in Deep Networkscited by 942
- 2018Robustness May Be at Odds with Accuracycited by 880
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 840
- 2020Fast is better than free: Revisiting adversarial trainingcited by 727
- 2017Evasion Attacks against Machine Learning at Test Timecited by 689
- 2017The Implicit Bias of Gradient Descent on Separable Datacited by 655
- 2017Computing Nonvacuous Generalization Bounds for Deep (Stochastic) Neural Networks with Many More Parameters than Training Datacited by 533
- 2017Regularizing Neural Networks by Penalizing Confident Output Distributionscited by 464
- 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 414
- 2015Autoencoding beyond pixels using a learned similarity metriccited by 407
- 2015Return of Frustratingly Easy Domain Adaptationcited by 391
- 2020The Pitfalls of Simplicity Bias in Neural Networkscited by 351
- 2014In Search of the Real Inductive Bias: On the Role of Implicit Regularization in Deep Learningcited by 342
- 2020Hands-on Bayesian Neural Networks -- a Tutorial for Deep Learning Userscited by 338
- 2020Attacks Which Do Not Kill Training Make Adversarial Learning Strongercited by 243
- 2020Understanding and Improving Fast Adversarial Trainingcited by 214
- 2018Disentangling Adversarial Robustness and Generalizationcited by 172
- 2018Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Modelscited by 135
- 2016Robust Large Margin Deep Neural Networkscited by 118
- 2018Large Margin Deep Networks for Classificationcited by 112
- 2021On Feature Collapse and Deep Kernel Learning for Single Forward Pass Uncertaintycited by 87
- 2021Desiderata for Representation Learning: A Causal Perspectivecited by 76
- 2019Adversarially robust transfer learningcited by 67
- 2020A law of robustness for two-layers neural networkscited by 55
- 2017Variational Approaches for Auto-Encoding Generative Adversarial Networkscited by 52
- 2015A Unified Gradient Regularization Family for Adversarial Examplescited by 43
- 2020Uncertainty Estimation Using a Single Deep Deterministic Neural Networkcited by 37
- 2020Improving Calibration through the Relationship with Adversarial Robustnesscited by 26
- 2021Which priors matter? Benchmarking models for learning latent dynamicscited by 26
- 2017Intriguing Properties of Adversarial Examplescited by 20
- 2021The Peril of Popular Deep Learning Uncertainty Estimation Methodscited by 12
50 most cited of 51 All 51 (JSON)
Built on by
Citing papers per year: 2023: 2; 2024: 1.
3 papers.
- 2024Uncertainty in Graph Neural Networks: A Surveycited by 23
- 2023A Closer Look at Model Adaptation using Feature Distortion and Simplicity Biascited by 20
- 2023Data Optimization in Deep Learning: A Surveycited by 6
- 2024Uncertainty in Graph Neural Networks: A Survey11 Mar 2024
- 2023Data Optimization in Deep Learning: A Survey25 Oct 2023
- 2023A Closer Look at Model Adaptation using Feature Distortion and Simplicity Bias23 Mar 2023