mlsanityData to 7 Oct 2026

Improving Robustness via Tilted Exponential Layer: A Communication-Theoretic Perspective

arXiv 2311.01047 ↗First posted 2 Nov 2023cs.LG cs.IT eess.SPcited by 0

Not on the map. Why?

Abstract (arXiv)

State-of-the-art techniques for enhancing robustness of deep networks mostly rely on empirical risk minimization with suitable data augmentation. In this paper, we propose a complementary approach motivated by communication theory, aimed at enhancing the signal-to-noise ratio at the output of a neural network layer via neural competition during learning and inference. In addition to standard empirical risk minimization, neurons compete to sparsely represent layer inputs by maximization of a tilted exponential (TEXP) objective function for the layer. TEXP learning can be interpreted as maximum likelihood estimation of matched filters under a Gaussian model for data noise. Inference in a TEXP layer is accomplished by replacing batch norm by a tilted softmax, which can be interpreted as computation of posterior probabilities for the competing signaling hypotheses represented by each neuron. After providing insights via simplified models, we show, by experimentation on standard image datasets, that TEXP learning and inference enhances robustness against noise and other common corruptions, without requiring data augmentation. Further cumulative gains in robustness against this array of distortions can be obtained by appropriately combining TEXP with data augmentation techniques. The code for all our experiments is available at https://github.com/bhagyapuranik/texp_for_robustness.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 31 of its 53 references that are in the map. First posted on arXiv 2 Nov 2023.

Builds on

31 of 53 references.

References · 31

  1. 2014Adam: A Method for Stochastic Optimizationcited by 36,960
  2. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
  3. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
  4. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  6. 2013Intriguing properties of neural networkscited by 5,114
  7. 2016Wide Residual Networkscited by 3,057
  8. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
  9. 2019RandAugment: Practical automated data augmentation with a reduced search spacecited by 2,261
  10. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
  11. 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
  12. 2020RobustBench: a standardized adversarial robustness benchmarkcited by 659
19 more
  1. 2020Improving robustness against common corruptions by covariate shift adaptationcited by 427
  2. 2019A Fourier Perspective on Model Robustness in Computer Visioncited by 288
  3. 2018Stochastic Activation Pruning for Robust Adversarial Defensecited by 171
  4. 2019Adversarial Examples Are a Natural Consequence of Test Error in Noisecited by 114
  5. 2017A Study and Comparison of Human and Deep Learning Recognition Performance Under Visual Distortionscited by 107
  6. 2020Tilted Empirical Risk Minimizationcited by 103
  7. 2018Benchmarking Neural Network Robustness to Common Corruptions and Surface Variationscited by 99
  8. 2021On the effectiveness of adversarial training against common corruptionscited by 71
  9. 2021Improved OOD Generalization via Adversarial Training and Pre-trainingcited by 66
  10. 2021Consistency Regularization for Adversarial Robustnesscited by 42
  11. 2021On Tilted Losses in Machine Learning: Theory and Applicationscited by 42
  12. 2021Understanding and Improving Robustness of Vision Transformers through Patch-based Negative Augmentationcited by 40
  13. 2021Defending Against Image Corruptions Through Adversarial Augmentationscited by 28
  14. 2019Deep Learning Theory Review: An Optimal Control and Dynamical Systems Perspectivecited by 26
  15. 2021Robustness through Data Augmentation Loss Consistencycited by 8
  16. 2023What Are Effective Labels for Augmented Data? Improving Calibration and Robustness with AutoLabelcited by 6
  17. 2022Empirical Advocacy of Bio-inspired Models for Robust Image Recognitioncited by 3
  18. 2022Neuro-Inspired Deep Neural Networks with Sparse, Strong Activationscited by 2
  19. 2020Erratum Concerning the Obfuscated Gradients Attack on Stochastic Activation Pruningcited by 1

Built on by

Not cited yet.