SysNoise: Exploring and Benchmarking Training-Deployment System Inconsistency
Not on the map. Why?
Abstract (arXiv)
Extensive studies have shown that deep learning models are vulnerable to adversarial and natural noises, yet little is known about model robustness on noises caused by different system implementations. In this paper, we for the first time introduce SysNoise, a frequently occurred but often overlooked noise in the deep learning training-deployment cycle. In particular, SysNoise happens when the source training system switches to a disparate target system in deployments, where various tiny system mismatch adds up to a non-negligible difference. We first identify and classify SysNoise into three categories based on the inference stage; we then build a holistic benchmark to quantitatively measure the impact of SysNoise on 20+ models, comprehending image classification, object detection, instance segmentation and natural language processing tasks. Our extensive experiments revealed that SysNoise could bring certain impacts on model robustness across different tasks and common mitigations like data augmentation and adversarial training show limited effects on it. Together, our findings open a new research topic and we hope this work will raise research attention to deep learning deployment systems accounting for model performance. We have open-sourced the benchmark and framework at https://modeltc.github.io/systemnoise_web.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 46 of its 77 references that are in the map. First posted on arXiv 1 Jul 2023.
Builds on
46 of 77 references.
References · 46
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,415
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2013Intriguing properties of neural networkscited by 5,114
34 more
- 2016Feature Pyramid Networks for Object Detectioncited by 5,021
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,818
- 2017Rethinking Atrous Convolution for Semantic Image Segmentationcited by 2,154
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
- 2017Quantization and Training of Neural Networks for Efficient Integer-Arithmetic-Only Inferencecited by 1,548
- 2019Natural Adversarial Examplescited by 1,401
- 2020Designing Network Design Spacescited by 954
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
- 2017Natural TTS Synthesis by Conditioning WaveNet on Mel Spectrogram Predictionscited by 800
- 2018AutoAugment: Learning Augmentation Policies from Datacited by 728
- 2020RobustBench: a standardized adversarial robustness benchmarkcited by 659
- 2019Adversarial Training for Free!cited by 638
- 2020MCUNet: Tiny Deep Learning on IoT Devicescited by 269
- 2017On the (Statistical) Detection of Adversarial Examplescited by 180
- 2018Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Modelscited by 135
- 2021Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical Worldcited by 127
- 2022Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detectioncited by 79
- 2021RobustART: Benchmarking Robustness on Architecture Design and Training Techniquescited by 78
- 2021Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domaincited by 70
- 2019Training Robust Deep Neural Networks via Adversarial Noise Propagationcited by 60
- 2020Tent: Fully Test-time Adaptation by Entropy Minimizationcited by 59
- 2023X-Adv: Physical Adversarial Object Attacks against X-ray Prohibited Item Detectioncited by 58
- 2021Randomness In Neural Network Training: Characterizing The Impact of Toolingcited by 57
- 2017Adversarial and Clean Data Are Not Twinscited by 52
- 2021Harnessing Perceptual Adversarial Patches for Crowd Countingcited by 39
- 2021MQBench: Towards Reproducible and Deployable Model Quantization Benchmarkcited by 38
- 2020Exploiting Verified Neural Networks via Floating Point Numerical Errorcited by 35
- 2021Random and Adversarial Bit Error Robustness: Energy-Efficient and Secure DNN Acceleratorscited by 6
- 2021Real World Robustness from Systematic Noisecited by 5
Built on by
Not cited yet.