让精简数据集自带抗攻击能力,训练出又快又稳的模型
Robust Dataset Distillation by Matching Adversarial Trajectories
- 在生成数据轨迹时加入对抗样本,同步优化泛化与鲁棒性
- 用合成数据训练的模型在对抗攻击下准确率提升12.3%以上
- 适合追求高效训练与安全性的实际部署场景
数据蒸馏通过生成紧凑数据集,使模型在小规模数据上达到与大规模原始数据相当的性能。然而,现有方法忽视了模型的鲁棒性,导致在蒸馏数据上训练的模型易受对抗攻击。为此,本文提出“鲁棒数据蒸馏”新范式,在蒸馏过程中嵌入对抗鲁棒性。我们提出匹配对抗轨迹(MAT)方法,将对抗训练融入基于轨迹的数据蒸馏过程。MAT在轨迹生成阶段引入对抗样本,获得具备鲁棒性的训练轨迹,并以此指导数据蒸馏。实验表明,仅通过自然训练,使用我们蒸馏数据训练的模型在对抗攻击下表现显著增强,同时保持与现有方法相当的准确率。本工作确立了鲁棒数据蒸馏的重要研究方向,并为实现高效训练与对抗鲁棒性的统一提供了强基线。
原文摘要 · Abstract (English)
Dataset distillation synthesizes compact datasets that enable models to achieve performance comparable to training on the original large-scale datasets. However, existing distillation methods overlook the robustness of the model, resulting in models that are vulnerable to adversarial attacks when trained on distilled data. To address this limitation, we introduce the task of ``robust dataset distillation", a novel paradigm that embeds adversarial robustness into the synthetic datasets during the distillation process. We propose Matching Adversarial Trajectories (MAT), a method that integrates adversarial training into trajectory-based dataset distillation. MAT incorporates adversarial samples during trajectory generation to obtain robust training trajectories, which are then used to guide the distillation process. As experimentally demonstrated, even through natural training on our distilled dataset, models can achieve enhanced adversarial robustness while maintaining competitive accuracy compared to existing distillation methods. Our work highlights robust dataset distillation as a new and important research direction and provides a strong baseline for future research to bridge the gap between efficient training and adversarial robustness.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。