Search Robust and Adaptable Architecture

ICASSP 2024 - 2024 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)(2024)

引用 0|浏览5
暂无评分
摘要
The vulnerability of deep neural networks poses a significant challenge to their application in security-sensitive domains. In this paper, we propose the Search Robust and Adaptable Architecture (SRAA) to identify the robust architecture. Unlike previous NAS-based approaches that utilize a single network search space, we introduce a novel dual-input ensemble search space, enabling the searched structures to exhibit good robustness under different attacks. The results demonstrate that the optimal SRAA model excels in complex tasks, such as Imagenet, and exhibits superior performance against strong attacks, such as PGD. Remarkably, our NAS-based model surpasses hand-designed models in terms of adversarial accuracy under strong attacks for the first time. Furthermore, the experimental results on CIFAR10/100 and IMAGENET datasets highlight the comprehensive improvement achieved by SRAA over previous state-of-the-art (SOTA) models and baseline approaches in terms of accuracy against diverse attack scenarios.
更多
查看译文
关键词
Deep Learning,Robust neural network,Neural Architecture Search,Ensemble
AI 理解论文
溯源树
样例
生成溯源树,研究论文发展脉络
Chat Paper
正在生成论文摘要