mlsanityData to 7 Oct 2026

Is Smoothness the Key to Robustness? A Comparison of Attention and Convolution Models Using a Novel Metric

arXiv 2410.17628 ↗First posted 23 Oct 2024cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

Robustness is a critical aspect of machine learning models. Existing robustness evaluation approaches often lack theoretical generality or rely heavily on empirical assessments, limiting insights into the structural factors contributing to robustness. Moreover, theoretical robustness analysis is not applicable for direct comparisons between models. To address these challenges, we propose textitTopoLip, a metric based on layer-wise analysis that bridges topological data analysis and Lipschitz continuity for robustness evaluation. TopoLip provides a unified framework for both theoretical and empirical robustness comparisons across different architectures or configurations, and it reveals how model parameters influence the robustness of models. Using TopoLip, we demonstrate that attention-based models typically exhibit smoother transformations and greater robustness compared to convolution-based models, as validated through theoretical analysis and adversarial tasks. Our findings establish a connection between architectural design, robustness, and topological properties.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 37 of its 51 references that are in the map. First posted on arXiv 23 Oct 2024.

Builds on

37 of 51 references.

References · 37

  1. 2017Attention Is All You Needcited by 59,932
  2. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  3. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  4. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  5. 2013Intriguing properties of neural networkscited by 5,114
  6. 2015Delving Deep into Rectifiers: Surpassing Human-Level Performance on ImageNet Classificationcited by 3,590
  7. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
  8. 2021Masked-attention Mask Transformer for Universal Image Segmentationcited by 2,338
  9. 2016Identity Mappings in Deep Residual Networkscited by 1,960
  10. 2020On Layer Normalization in the Transformer Architecturecited by 906
  11. 2021Do Vision Transformers See Like Convolutional Neural Networks?cited by 671
  12. 2024KAN: Kolmogorov-Arnold Networkscited by 634
25 more
  1. 2019Stand-Alone Self-Attention in Vision Modelscited by 542
  2. 2018Regularisation of Neural Networks by Enforcing Lipschitz Continuitycited by 311
  3. 2019Learning Deep Transformer Models for Machine Translationcited by 309
  4. 2019On the Relationship between Self-Attention and Convolutional Layerscited by 299
  5. 2015Persistence Images: A Stable Vector Representation of Persistent Homologycited by 235
  6. 2021Are Transformers More Robust Than CNNs?cited by 187
  7. 2017Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulationcited by 182
  8. 2018Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approachcited by 181
  9. 2018Dynamical Isometry and a Mean Field Theory of CNNs: How to Train 10,000-Layer Vanilla Convolutional Neural Networkscited by 176
  10. 2021Inductive Biases and Variable Creation in Self-Attention Mechanismscited by 144
  11. 2021Sinkformers: Transformers with Doubly Stochastic Attentioncited by 136
  12. 2023The emergence of clusters in self-attention dynamicscited by 133
  13. 2020Topology of deep neural networkscited by 111
  14. 2023Intrinsic Dimension Estimation for Robust Detection of AI-Generated Textscited by 111
  15. 2018CNN-Cert: An Efficient Framework for Certifying Robustness of Convolutional Neural Networkscited by 50
  16. 2023How Smooth Is Attention?cited by 44
  17. 2022Can CNNs Be More Robust Than Transformers?cited by 38
  18. 2018Persistence Fisher Kernel: A Riemannian Manifold Kernel for Persistence Diagramscited by 33
  19. 2021Mask Attention Networks: Rethinking and Strengthen Transformercited by 28
  20. 2023Latent Positional Information is in the Self-Attention Variance of Transformer Language Models Without Positional Embeddingscited by 23
  21. 2019Convolution, attention and structure embeddingcited by 15
  22. 2020Metrics and methods for robustness evaluation of neural networks with generative modelscited by 12
  23. 2018Computing Wasserstein Distance for Persistence Diagrams on a Quantum Computercited by 8
  24. 2024Bayesian Entropy Neural Networks for Physics-Aware Predictioncited by 3
  25. 2016A Theoretical Framework for Robustness of (Deep) Classifiers against Adversarial Examplescited by 2

Built on by

Not cited yet.