arXiv:2509.23961cs.SEcs.LG2025-09被引 3

用学习方法优先测试最可能暴露漏洞的对抗样本,提升模型鲁棒性。

Learning-Based Testing for Deep Learning: Enhancing Model Robustness with Adversarial Input Prioritization

  • 基于学习测试思想,不依赖具体网络结构,自动筛选高风险对抗输入。
  • 在多个数据集和攻击方式下,比基线方法更快发现所有潜在故障。
  • 适合需要高效测试与增强模型鲁棒性的实际深度学习应用。

深度神经网络(DNN)在关键应用中日益普及,对对抗输入的鲁棒性要求极高。现有基于覆盖率或置信度的测试优先级方法常无法有效识别最具故障揭示性的输入,限制了实际效果。本文提出一种融合学习型测试(LBT)、假设检验与变异测试的方法,无需依赖特定网络结构或形式化验证,即可高效筛选出最可能暴露模型缺陷的对抗样本子集。实验结果表明,该方法在多种数据集、模型架构及对抗攻击技术下,始终优于基线方法,能更快地发现所有潜在故障。同时保持输入多样性,为模型重训练提供有效指导,进一步提升鲁棒性。该方法在真实DNN应用中具有显著实用价值。

原文摘要 · Abstract (English)

Context: Deep Neural Networks (DNNs) are increasingly deployed in critical applications, where resilience against adversarial inputs is paramount. However, whether coverage-based or confidence-based, existing test prioritization methods often fail to efficiently identify the most fault-revealing inputs, limiting their practical effectiveness. Aims: This project aims to enhance fault detection and model robustness in DNNs by integrating Learning-Based Testing (LBT) with hypothesis and mutation testing to efficiently prioritize adversarial test cases. Methods: Our method selects a subset of adversarial inputs with a high likelihood of exposing model faults, without relying on architecture-specific characteristics or formal verification, making it adaptable across diverse DNNs. Results: Our results demonstrate that the proposed LBT method consistently surpasses baseline approaches in prioritizing fault-revealing inputs and accelerating fault detection. By efficiently organizing test permutations, it uncovers all potential faults significantly faster across various datasets, model architectures, and adversarial attack techniques. Conclusion: Beyond improving fault detection, our method preserves input diversity and provides effective guidance for model retraining, further enhancing robustness. These advantages establish our approach as a powerful and practical solution for adversarial test prioritization in real-world DNN applications.

对抗测试模型鲁棒性测试优先级学习型测试

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。