arXiv · 2011.08367
Extreme Value Preserving Networks
Abstract
Recent evidence shows that convolutional neural networks (CNNs) are biased towards textures so that CNNs are non-robust to adversarial perturbations over textures, while traditional robust visual features like SIFT (scale-invariant feature transforms) are designed to be robust across a substantial range of affine distortion, addition of noise, etc with the mimic of human perception nature. This paper aims to leverage good properties of SIFT to renovate CNN architectures towards better accuracy and robustness. We borrow the scale-space extreme value idea from SIFT, and propose extreme value preserving networks (EVPNets). Experiments demonstrate that EVPNets can achieve similar or better accuracy than conventional CNNs, while achieving much better robustness on a set of adversarial attacks (FGSM,PGD,etc) even without adversarial training.
Explore related subjects
Keep this discovery
Mingjie Sun, Jianguo Li, Changshui Zhang. 2020-11-17. Extreme Value Preserving Networks. https://arxiv.org/abs/2011.08367
Cite the original work for its findings. Save a collection to share your selection of sources.