Explainability-Driven Leaf Disease Classification Using Adversarial Training and Knowledge Distillation
Not on the map. Why?
Abstract (arXiv)
This work focuses on plant leaf disease classification and explores three crucial aspects: adversarial training, model explainability, and model compression. The models' robustness against adversarial attacks is enhanced through adversarial training, ensuring accurate classification even in the presence of threats. Leveraging explainability techniques, we gain insights into the model's decision-making process, improving trust and transparency. Additionally, we explore model compression techniques to optimize computational efficiency while maintaining classification performance. Through our experiments, we determine that on a benchmark dataset, the robustness can be the price of the classification accuracy with performance reductions of 3%-20% for regular tests and gains of 50%-70% for adversarial attack tests. We also demonstrate that a student model can be 15-25 times more computationally efficient for a slight performance reduction, distilling the knowledge of more complex models.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 25 of its 41 references that are in the map. First posted on arXiv 30 Dec 2023.
Builds on
25 of 41 references.
References · 25
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Densely Connected Convolutional Networkscited by 6,691
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2015Learning Deep Features for Discriminative Localizationcited by 2,430
- 2016Xception: Deep Learning with Depthwise Separable Convolutionscited by 2,320
- 2013Visualizing and Understanding Convolutional Networkscited by 2,278
- 2016Adversarial examples in the physical worldcited by 1,762
13 more
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2014Convolutional Neural Networks for Sentence Classificationcited by 1,124
- 2014Striving for Simplicity: The All Convolutional Netcited by 983
- 2017Grad-CAM++: Improved Visual Explanations for Deep Convolutional Networkscited by 936
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
- 2020Fast is better than free: Revisiting adversarial trainingcited by 723
- 2016Adversarial Training Methods for Semi-Supervised Text Classificationcited by 280
- 2018Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Modelscited by 135
- 2020Use HiResCAM instead of Grad-CAM for faithful explanations of convolutional neural networkscited by 79
- 2018Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Networkcited by 68
- 2017Boosting Adversarial Attacks with Momentumcited by 23
- 2021Distilling the Knowledge of Romanian BERTs Using Multiple Teacherscited by 13
- 2023SkinDistilViT: Lightweight Vision Transformer for Skin Lesion Classificationcited by 5
Built on by
Citing papers per year: 2024: 1.
1 paper.