Improving Robustness via Tilted Exponential Layer: A Communication-Theoretic Perspective
Not on the map. Why?
Abstract (arXiv)
State-of-the-art techniques for enhancing robustness of deep networks mostly rely on empirical risk minimization with suitable data augmentation. In this paper, we propose a complementary approach motivated by communication theory, aimed at enhancing the signal-to-noise ratio at the output of a neural network layer via neural competition during learning and inference. In addition to standard empirical risk minimization, neurons compete to sparsely represent layer inputs by maximization of a tilted exponential (TEXP) objective function for the layer. TEXP learning can be interpreted as maximum likelihood estimation of matched filters under a Gaussian model for data noise. Inference in a TEXP layer is accomplished by replacing batch norm by a tilted softmax, which can be interpreted as computation of posterior probabilities for the competing signaling hypotheses represented by each neuron. After providing insights via simplified models, we show, by experimentation on standard image datasets, that TEXP learning and inference enhances robustness against noise and other common corruptions, without requiring data augmentation. Further cumulative gains in robustness against this array of distortions can be obtained by appropriately combining TEXP with data augmentation techniques. The code for all our experiments is available at https://github.com/bhagyapuranik/texp_for_robustness.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 31 of its 53 references that are in the map. First posted on arXiv 2 Nov 2023.
Builds on
31 of 53 references.
References · 31
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016Wide Residual Networkscited by 3,057
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2019RandAugment: Practical automated data augmentation with a reduced search spacecited by 2,261
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
- 2020RobustBench: a standardized adversarial robustness benchmarkcited by 659
19 more
- 2020Improving robustness against common corruptions by covariate shift adaptationcited by 427
- 2019A Fourier Perspective on Model Robustness in Computer Visioncited by 288
- 2018Stochastic Activation Pruning for Robust Adversarial Defensecited by 171
- 2019Adversarial Examples Are a Natural Consequence of Test Error in Noisecited by 114
- 2017A Study and Comparison of Human and Deep Learning Recognition Performance Under Visual Distortionscited by 107
- 2020Tilted Empirical Risk Minimizationcited by 103
- 2018Benchmarking Neural Network Robustness to Common Corruptions and Surface Variationscited by 99
- 2021On the effectiveness of adversarial training against common corruptionscited by 71
- 2021Improved OOD Generalization via Adversarial Training and Pre-trainingcited by 66
- 2021Consistency Regularization for Adversarial Robustnesscited by 42
- 2021On Tilted Losses in Machine Learning: Theory and Applicationscited by 42
- 2021Understanding and Improving Robustness of Vision Transformers through Patch-based Negative Augmentationcited by 40
- 2021Defending Against Image Corruptions Through Adversarial Augmentationscited by 28
- 2019Deep Learning Theory Review: An Optimal Control and Dynamical Systems Perspectivecited by 26
- 2021Robustness through Data Augmentation Loss Consistencycited by 8
- 2023What Are Effective Labels for Augmented Data? Improving Calibration and Robustness with AutoLabelcited by 6
- 2022Empirical Advocacy of Bio-inspired Models for Robust Image Recognitioncited by 3
- 2022Neuro-Inspired Deep Neural Networks with Sparse, Strong Activationscited by 2
- 2020Erratum Concerning the Obfuscated Gradients Attack on Stochastic Activation Pruningcited by 1
Built on by
Not cited yet.