Adversarially robust segmentation models learn perceptually-aligned gradients
Not on the map. Why?
Abstract (arXiv)
The effects of adversarial training on semantic segmentation networks has not been thoroughly explored. While previous work has shown that adversarially-trained image classifiers can be used to perform image synthesis, we have yet to understand how best to leverage an adversarially-trained segmentation network to do the same. Using a simple optimizer, we demonstrate that adversarially-trained semantic segmentation networks can be used to perform image inpainting and generation. Our experiments demonstrate that adversarially-trained segmentation networks are more robust and indeed exhibit perceptually-aligned gradients which help in producing plausible image inpaintings. We seek to place additional weight behind the hypothesis that adversarially robust models exhibit gradients that are more perceptually-aligned with human vision. Through image synthesis, we argue that perceptually-aligned gradients promote a better understanding of a neural network's learned representations and aid in making neural networks more interpretable.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 23 of its 34 references that are in the map. First posted on arXiv 3 Apr 2022.
Builds on
23 of 34 references.
References · 23
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2014Fully Convolutional Networks for Semantic Segmentationcited by 4,845
- 2015You Only Look Once: Unified, Real-Time Object Detectioncited by 4,829
- 2016Adversarial examples in the physical worldcited by 1,762
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2018Robustness May Be at Odds with Accuracycited by 873
- 2016Universal adversarial perturbationscited by 774
11 more
- 2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 484
- 2016Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samplescited by 439
- 2018Adversarially Robust Generalization Requires More Datacited by 318
- 2020Do Adversarially Robust ImageNet Models Transfer Better?cited by 315
- 2018Are adversarial examples inevitable?cited by 113
- 2018Generalizable Data-free Objective for Crafting Universal Adversarial Perturbationscited by 88
- 2018Adversarial examples from computational constraintscited by 79
- 2019Interpreting Adversarially Trained Convolutional Neural Networkscited by 75
- 2019Enhancing Cross-task Black-Box Transferability of Adversarial Examples with Dispersion Reductioncited by 47
- 2019Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?cited by 42
- 2020On the Benefits of Models with Perceptually-Aligned Gradientscited by 13
Built on by
Not cited yet.