arXiv subjects

Baijiong Lin

Publications and source records attributed to Baijiong Lin.

21 records · Page 2Linked to original sources

arXiv2020

Effective, Efficient and Robust Neural Architecture Search

Recent advances in adversarial attacks show the vulnerability of deep neural networks searched by Neural Architecture Search (NAS). Although NAS methods can find network architectures with the state-of-the-art performance, the adversarial robustness and resource constraint are often ignored in NAS. To solve this problem, we propose an Effective, Efficient, and Robust Neural Architecture Search (E2RNAS) method to search a neural network architecture by taking the performance, robustness, and resource constraint into consideration. The objective function of the proposed E2RNAS method is formulated as a bi-level multi-objective optimization problem with the upper-level problem as a multi-objective optimization problem, which is different from existing NAS methods. To solve the proposed objective function, we integrate the multiple-gradient descent algorithm, a widely studied gradient-based multi-objective optimization algorithm, with the bi-level optimization. Experiments on benchmark datasets show that the proposed E2RNAS method can find adversarially robust architectures with optimized model size and comparable classification accuracy.

cs.LG↗

arXiv2020

Multi-Task Adversarial Attack

Deep neural networks have achieved impressive performance in various areas, but they are shown to be vulnerable to adversarial attacks. Previous works on adversarial attacks mainly focused on the single-task setting. However, in real applications, it is often desirable to attack several models for different tasks simultaneously. To this end, we propose Multi-Task adversarial Attack (MTA), a unified framework that can craft adversarial examples for multiple tasks efficiently by leveraging shared knowledge among tasks, which helps enable large-scale applications of adversarial attacks on real-world systems. More specifically, MTA uses a generator for adversarial perturbations which consists of a shared encoder for all tasks and multiple task-specific decoders. Thanks to the shared encoder, MTA reduces the storage cost and speeds up the inference when attacking multiple tasks simultaneously. Moreover, the proposed framework can be used to generate per-instance and universal perturbations for targeted and non-targeted attacks. Experimental results on the Office-31 and NYUv2 datasets demonstrate that MTA can improve the quality of attacks when compared with its single-task counterpart.

cs.LG↗

arXiv2019

Binary Neutron Stars Gravitational Wave Detection Based on Wavelet Packet Analysis And Convolutional Neural Networks

This work investigates the detection of binary neutron stars gravitational wave based on convolutional neural network (CNN). To promote the detection performance and efficiency, we proposed a scheme based on wavelet packet (WP) decomposition and CNN. The WP decomposition is a time-frequency method and can enhance the discriminant features between gravitational wave signal and noise before detection. The CNN conducts the gravitational wave detection by learning a function mapping relation from the data under being processed to the space of detection results. This function-mapping-relation style detection scheme can detection efficiency significantly. In this work, instrument effects are considered, and the noise are computed from a power spectral density (PSD) equivalent to the Advanced LIGO design sensitivity. The quantitative evaluations and comparisons with the state-of-art method matched filtering show the excellent performances for BNS gravitational wave detection. On efficiency, the current experiments show that this WP-CNN-based scheme is more than 960 times faster than the matched filtering.

astro-ph.IM↗