mlsanityData to 7 Oct 2026

Learning Representations Robust to Group Shifts and Adversarial Examples

arXiv 2202.09446 ↗First posted 18 Feb 2022cs.LG cs.CVcited by 0

Not on the map. Why?

Abstract (arXiv)

Despite the high performance achieved by deep neural networks on various tasks, extensive studies have demonstrated that small tweaks in the input could fail the model predictions. This issue of deep neural networks has led to a number of methods to improve model robustness, including adversarial training and distributionally robust optimization. Though both of these two methods are geared towards learning robust models, they have essentially different motivations: adversarial training attempts to train deep neural networks against perturbations, while distributional robust optimization aims at improving model performance on the most difficult "uncertain distributions". In this work, we propose an algorithm that combines adversarial training and group distribution robust optimization to improve robust representation learning. Experiments on three image benchmark datasets illustrate that the proposed method achieves superior results on robust metrics without sacrificing much of the standard measures.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 48 of its 63 references that are in the map. First posted on arXiv 18 Feb 2022.

Builds on

48 of 63 references.

References · 48

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  4. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  5. 2014Deep Learning Face Attributes in the Wildcited by 3,679
  6. 2015Delving Deep into Rectifiers: Surpassing Human-Level Performance on ImageNet Classificationcited by 3,590
  7. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
  8. 2016Adversarial examples in the physical worldcited by 1,762
  9. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
  10. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
  11. 2019Distributionally Robust Neural Networks for Group Shifts: On the Importance of Regularization for Worst-Case Generalizationcited by 1,232
  12. 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
36 more
  1. 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,012
  2. 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
  3. 2016Adversarial Machine Learning at Scalecited by 934
  4. 2017Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learningcited by 918
  5. 2018Robustness May Be at Odds with Accuracycited by 873
  6. 2017One pixel attack for fooling deep neural networkscited by 579
  7. 2017Adversarial Examples for Evaluating Reading Comprehension Systemscited by 568
  8. 2015Listen, Attend and Spellcited by 542
  9. 2019On Evaluating Adversarial Robustnesscited by 442
  10. 2013DeCAF: A Deep Convolutional Activation Feature for Generic Visual Recognitioncited by 422
  11. 2018Fairness Without Demographics in Repeated Loss Minimizationcited by 363
  12. 2018Learning Models with Uniform Performance via Distributionally Robust Optimizationcited by 334
  13. 2017Certifying Some Distributional Robustness with Principled Adversarial Trainingcited by 333
  14. 2019High Frequency Component Helps Explain the Generalization of Convolutional Neural Networkscited by 310
  15. 2019Adversarial Examples Improve Image Recognitioncited by 283
  16. 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 276
  17. 2018Generating Adversarial Examples with Adversarial Networkscited by 256
  18. 2019Towards Stable and Efficient Training of Verifiably Robust Neural Networkscited by 204
  19. 2020Bag of Tricks for Adversarial Trainingcited by 199
  20. 2017EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examplescited by 154
  21. 2016Variance-based regularization with convex objectivescited by 153
  22. 2020Understanding and Mitigating the Tradeoff Between Robustness and Accuracycited by 148
  23. 2019Distributionally Robust Language Modelingcited by 142
  24. 2018Scaling provable adversarial defensescited by 141
  25. 2015Distributionally Robust Logistic Regressioncited by 124
  26. 2021Dive into Deep Learningcited by 111
  27. 2020Adversarial Training for Large Neural Language Modelscited by 109
  28. 2019Adversarial Robustness Against the Union of Multiple Perturbation Modelscited by 88
  29. 2020Adversarial Distributional Training for Robust Deep Learningcited by 79
  30. 2015Learning with a Strong Adversarycited by 68
  31. 2021Examining and Combating Spurious Features under Distribution Shiftcited by 64
  32. 2016Does Distributionally Robust Supervised Learning Give Robust Classifiers?cited by 38
  33. 2021De-Pois: An Attack-Agnostic Defense against Data Poisoning Attackscited by 29
  34. 2019Perceptual Based Adversarial Audio Attackscited by 13
  35. 2020Denoised Smoothing: A Provable Defense for Pretrained Classifierscited by 8
  36. 2020Fast Differentiable Clipping-Aware Normalization and Rescalingcited by 5

Built on by

Not cited yet.