Repository logo

Infoscience

  • English
  • French
Log In
Logo EPFL, École polytechnique fédérale de Lausanne

Infoscience

  • English
  • French
Log In
  1. Home
  2. Academic and Research Output
  3. Conferences, Workshops, Symposiums, and Seminars
  4. On Certifying Non-Uniform Bounds against Adversarial Attacks
 
conference paper

On Certifying Non-Uniform Bounds against Adversarial Attacks

Liu, Chen  
•
Tomioka, Ryota
•
Cevher, Volkan  orcid-logo
2019
Proceedings of the 36 th International Conference on Machine Learning, Long Beach, California
36th International Conference on Machine Learning (ICML)'2019

This work studies the robustness certification problem of neural network models, which aims to find certified adversary-free regions as large as possible around data points. In contrast to the existing approaches that seek regions bounded uniformly along all input features, we consider non-uniform bounds and use it to study the decision boundary of neural network models. We formulate our target as an optimization problem with nonlinear constraints. Then, a framework applicable for general feedforward neural networks is proposed to bound the output logits so that the relaxed problem can be solved by the augmented Lagrangian method. Our experiments show the non-uniform bounds have larger volumes than uniform ones and the geometric similarity of the non-uniform bounds gives a quantitative, dataagnostic metric of input features’ robustness. Further, compared with normal models, the robust models have even larger non-uniform bounds and better interpretability.

  • Files
  • Details
  • Metrics
Loading...
Thumbnail Image
Name

paper.pdf

Type

Publisher's Version

Version

Published version

Access type

openaccess

Size

3.67 MB

Format

Adobe PDF

Checksum (MD5)

bd08fe41a175d950ddfbebf319e079fc

Loading...
Thumbnail Image
Name

Supp.pdf

Access type

openaccess

Size

4.43 MB

Format

Adobe PDF

Checksum (MD5)

9ff76f738df98e3a4df5028bc545e4c1

Logo EPFL, École polytechnique fédérale de Lausanne
  • Contact
  • infoscience@epfl.ch

  • Follow us on Facebook
  • Follow us on Instagram
  • Follow us on LinkedIn
  • Follow us on X
  • Follow us on Youtube
AccessibilityLegal noticePrivacy policyCookie settingsEnd User AgreementGet helpFeedback

Infoscience is a service managed and provided by the Library and IT Services of EPFL. © EPFL, tous droits réservés