提出新方法提升轻量模型抗攻击能力,同时不牺牲正常样本表现。
CIARD: Cyclic Iterative Adversarial Robustness Distillation
- 采用多教师框架与对比推力损失,解决双教师目标冲突问题。
- 在多种攻击下平均防御率提升3.53%,干净样本准确率提高5.87%。
- 适合需要兼顾鲁棒性与泛化性的边缘设备部署场景。
对抗鲁棒性蒸馏(ARD)旨在将教师模型的性能与鲁棒性迁移至轻量级学生模型,以实现在资源受限环境下的稳定表现。尽管现有方法提升了学生模型的鲁棒性,但不可避免地导致其在干净样本上的性能下降。我们总结出问题根源在于:1)双教师框架中清洁教师与鲁棒教师优化目标不一致,阻碍有效知识传递;2)训练过程中迭代生成的对抗样本导致鲁棒教师性能退化。为此,我们提出新型循环迭代对抗鲁棒性蒸馏(CIARD)方法,包含两项关键创新:a)基于对比推力损失对齐的多教师框架,缓解双教师优化目标冲突;b)持续对抗重训练机制,动态维持教师模型的鲁棒性。在CIFAR-10、CIFAR-100和Tiny-ImageNet上的大量实验表明,CIARD在不同攻击场景下平均防御率提升3.53%,干净样本准确率提升5.87%,建立新的平衡鲁棒性与泛化性的基准。代码已开源。
原文摘要 · Abstract (English)
Adversarial robustness distillation (ARD) aims to transfer both performance and robustness from teacher model to lightweight student model, enabling resilient performance on resource-constrained scenarios. Though existing ARD approaches enhance student model's robustness, the inevitable by-product leads to the degraded performance on clean examples. We summarize the causes of this problem inherent in existing methods with dual-teacher framework as: 1. The divergent optimization objectives of dual-teacher models, i.e., the clean and robust teachers, impede effective knowledge transfer to the student model, and 2. The iteratively generated adversarial examples during training lead to performance deterioration of the robust teacher model. To address these challenges, we propose a novel Cyclic Iterative ARD (CIARD) method with two key innovations: a. A multi-teacher framework with contrastive push-loss alignment to resolve conflicts in dual-teacher optimization objectives, and b. Continuous adversarial retraining to maintain dynamic teacher robustness against performance degradation from the varying adversarial examples. Extensive experiments on CIFAR-10, CIFAR-100, and Tiny-ImageNet demonstrate that CIARD achieves remarkable performance with an average 3.53 improvement in adversarial defense rates across various attack scenarios and a 5.87 increase in clean sample accuracy, establishing a new benchmark for balancing model robustness and generalization. Our code is available at https://github.com/eminentgu/CIARD
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。