With the recent increase in the computational power of modern mobile devices, machine learning-based heavy tasks such as face detection and speech recognition are now integral parts of such devices. This requires frameworks to execute machine learning models (e.g., Deep Neural Networks) on mobile devices. Although there exist studies on the accuracy and performance of these frameworks, the quality of on-device deep learning frameworks, in terms of their robustness, has not been systematically studied yet. In this paper, we empirically compare two on-device deep learning frameworks with three adversarial attacks on three different model architectures. We also use both the quantized and unquantized variants for each architecture. The results show that, in general, neither of the deep learning frameworks is better than the other in terms of robustness, and there is not a significant difference between the PC and mobile frameworks either. However, in cases like Boundary attack, mobile version is more robust than PC. In addition, quantization improves robustness in all cases when moving from PC to mobile.
翻译:随着现代移动设备的计算能力的最近增加,像面对面检测和语音识别等基于机器学习的繁重任务现在已成为这些装置的组成部分,这就要求有框架来执行移动装置的机器学习模型(例如深神经网络),虽然对这些框架的准确性和性能进行了研究,但是尚未系统地研究设备内深层学习框架的强度质量。在本文件中,我们从经验上比较了两个在深层次上设计的深层次学习框架和三个不同的模型结构的三次对抗性攻击。我们还对每个结构使用量化和未量化的变异。结果显示,总体而言,无论是深层学习框架在稳健性方面都没有比其他框架好,而且个人计算机与移动框架之间也没有显著差别。然而,在边界攻击等情况下,移动版本比个人计算机更强。此外,在从个人计算机到移动的所有情况下,四分化都提高了所有情况下的稳健性。