用对比学习提升模型抗干扰能力,让图像识别更可靠。
C-LEAD: Contrastive Learning for Enhanced Adversarial Defense
- 用对比损失函数同时训练干净和扰动图像,学更鲁棒的特征。
- 在多种攻击下准确率显著提升,最高达87.6%。
- 适合关注模型安全性的研究人员和工业部署者。
深度神经网络在图像分类、分割和目标检测等任务中表现卓越,但对对抗攻击敏感,微小输入扰动即可导致错误预测。本文提出一种新方法,首次将对比学习用于对抗防御。通过对比损失函数,联合训练模型与干净及对抗扰动图像,优化模型参数与扰动,使网络学习更具鲁棒性的表示。实验表明,该方法在多种对抗攻击下显著提升模型稳健性,有效提取更具信息量和抗干扰能力的特征,推动了深度学习对抗鲁棒性的发展。代码已开源:https://github.com/suklav/C_Lead。
原文摘要 · Abstract (English)
Deep neural networks (DNNs) have achieved remarkable success in computer vision tasks such as image classification, segmentation, and object detection. However, they are vulnerable to adversarial attacks, which can cause incorrect predictions with small perturbations in input images. Addressing this issue is crucial for deploying robust deep-learning systems. This paper presents a novel approach that utilizes contrastive learning for adversarial defense, a previously unexplored area. Our method leverages the contrastive loss function to enhance the robustness of classification models by training them with both clean and adversarially perturbed images. By optimizing the model's parameters alongside the perturbations, our approach enables the network to learn robust representations that are less susceptible to adversarial attacks. Experimental results show significant improvements in the model's robustness against various types of adversarial perturbations. This suggests that contrastive loss helps extract more informative and resilient features, contributing to the field of adversarial robustness in deep learning. The code is publicly made available on GitHub in the following link: https://github.com/suklav/C_Lead .
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。