分析神经网络解集对数据扰动的响应,揭示模型鲁棒性新机制。
Set-Valued Sensitivity Analysis of Deep Neural Networks
- 用集合映射替代单个解,研究训练数据扰动如何影响解集变化
- 证明全连接网络解集具有类似Lipschitz的稳定性,扰动可控
- 无需假设损失函数海塞矩阵非奇异,适用于复杂网络如ResNet
本文提出一种基于集合映射的敏感性分析框架,用于理解深度神经网络(DNN)的解集如何响应训练数据的扰动。由于DNN可能不存在唯一解,且输入数据的微小变化可能导致不同解,因此我们关注解集本身的扩张与收缩。若解集的变化可被数据扰动程度所控制,则称模型具有类似Lipschitz的性质。该‘集到集’分析方法深入揭示了训练过程中的鲁棒性与可靠性。框架同时涵盖孤立与非孤立极小点,且不依赖损失函数海塞矩阵非奇异的假设。通过构建集合层面的度量,如集合间距离、集合收敛性、集合值映射导数及解集稳定性,我们证明全连接神经网络的解集具备Lipschitz-like性质。对于一般神经网络(如ResNet),提出基于图导数的方法,在无需重新训练的情况下估计数据扰动后的解集。
原文摘要 · Abstract (English)
This paper proposes a sensitivity analysis framework based on set valued mapping for deep neural networks (DNN) to understand and compute how the solutions (model weights) of DNN respond to perturbations in the training data. As a DNN may not exhibit a unique solution (minima) and the algorithm of solving a DNN may lead to different solutions with minor perturbations to input data, we focus on the sensitivity of the solution set of DNN, instead of studying a single solution. In particular, we are interested in the expansion and contraction of the set in response to data perturbations. If the change of solution set can be bounded by the extent of the data perturbation, the model is said to exhibit the Lipschitz like property. This "set-to-set" analysis approach provides a deeper understanding of the robustness and reliability of DNNs during training. Our framework incorporates both isolated and non-isolated minima, and critically, does not require the assumption that the Hessian of loss function is non-singular. By developing set-level metrics such as distance between sets, convergence of sets, derivatives of set-valued mapping, and stability across the solution set, we prove that the solution set of the Fully Connected Neural Network holds Lipschitz-like properties. For general neural networks (e.g., Resnet), we introduce a graphical-derivative-based method to estimate the new solution set following data perturbation without retraining.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。