To tackle the susceptibility of deep neural networks to examples, the adversarial training has been proposed which provides a notion of robust through an inner maximization problem presenting the first-order embedded within the outer minimization of the training loss. To generalize the adversarial robustness over different perturbation types, the adversarial training method has been augmented with the improved inner maximization presenting a union of multiple perturbations e.g., various $\ell_p$ norm-bounded perturbations.
翻译:为解决深层神经网络的易感性,提出了对抗性培训建议,通过内在最大化问题提供一种强健的概念,这种内在最大化问题提出了在将培训损失的外部最小化中嵌入的第一阶。为了对不同扰动类型的对抗性强健性加以概括,对抗性培训方法随着内部内化的改善而得到加强,呈现出多种扰动的结合,例如,由规范约束的各种美元/美元/美元/美元/美元组成的扰动。