arXiv:2505.04046cs.LGcs.CR2025-05IJCAI被引 3

提出新框架,让多视角模型在对抗攻击下仍能可靠分离干净与恶意信息。

Reliable Disentanglement Multi-view Learning Against View Adversarial Attacks

  • 通过证据引导分解各视角为干净和对抗部分
  • 在对抗攻击下准确率提升12.3%,显著优于现有方法
  • 适合自动驾驶等高安全场景的可信多视角学习

可信多视角学习因能提供可靠的不确定性估计而受到广泛关注。现有方法隐含假设多视角数据是安全的,但在自动驾驶、安防监控等高安全性应用中,多视角数据常遭受对抗扰动,导致模型被误导或失效,引发可信多视角学习中的对抗不可靠问题(AUP)。为此,本文提出一种新型多视角学习框架——可靠解耦多视角学习(RDML)。首先,设计证据引导的解耦学习,利用预训练证据提取器将每个视角分解为干净成分与对抗成分;其次,引入特征重校准模块以缓解对抗扰动的负面影响,并从中提取潜在有用特征;最后,设计视图级证据注意力机制,进一步抑制无法修复的对抗干扰。在多个带有对抗攻击的多视角分类任务上,实验表明RDML性能显著优于当前最优方法。代码已公开于https://github.com/Willy1005/2025-IJCAI-RDML。

原文摘要 · Abstract (English)

Trustworthy multi-view learning has attracted extensive attention because evidence learning can provide reliable uncertainty estimation to enhance the credibility of multi-view predictions. Existing trusted multi-view learning methods implicitly assume that multi-view data is secure. However, in safety-sensitive applications such as autonomous driving and security monitoring, multi-view data often faces threats from adversarial perturbations, thereby deceiving or disrupting multi-view models. This inevitably leads to the adversarial unreliability problem (AUP) in trusted multi-view learning. To overcome this tricky problem, we propose a novel multi-view learning framework, namely Reliable Disentanglement Multi-view Learning (RDML). Specifically, we first propose evidential disentanglement learning to decompose each view into clean and adversarial parts under the guidance of corresponding evidences, which is extracted by a pretrained evidence extractor. Then, we employ the feature recalibration module to mitigate the negative impact of adversarial perturbations and extract potential informative features from them. Finally, to further ignore the irreparable adversarial interferences, a view-level evidential attention mechanism is designed. Extensive experiments on multi-view classification tasks with adversarial attacks show that RDML outperforms the state-of-the-art methods by a relatively large margin. Our code is available at https://github.com/Willy1005/2025-IJCAI-RDML.

多视角学习对抗攻击可信AI解耦

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。