arXiv:2603.29917cs.CV2026-03

用扩散模型去噪特征,提升手写数字分类的抗干扰能力。

Diffusion-Based Feature Denoising with NNMF for Robust handwritten digit multi-class classification

  • 用非负矩阵分解和CNN生成混合特征表示。
  • 通过逐步加噪与去噪,使模型在噪声下仍保持高准确率。
  • 适合需要高鲁棒性的图像分类任务,如对抗攻击防御。

本文提出一种针对手写数字多分类的鲁棒框架,结合扩散驱动的特征去噪与混合特征表示。首先利用非负矩阵分解(NNMF)将输入图像转化为紧致可解释的原型表示,同时通过卷积神经网络(CNN)提取深层特征,融合形成统一的混合表示。为增强鲁棒性,在特征空间中引入逐步加噪的扩散过程,训练一个特征去噪网络以从带噪输入中重建干净表示。该方法在基准与对抗攻击设置下均进行评估,使用AutoAttack测试。实验结果表明,基于扩散的混合模型兼具有效性与鲁棒性,优于仅依赖CNN的基线模型,验证了特征级扩散防御在可靠多分类中的潜力。

原文摘要 · Abstract (English)

This work presents a robust multi-class classification framework for handwritten digits that combines diffusion-driven feature denoising with a hybrid feature representation. Inspired by our previous work on brain tumor classification, the proposed approach operates in a feature space to improve the robustness to noise and adversarial attacks. This manuscript is submitted as an extended abstract rather than a full-length press-ready paper. First, the input images are converted into tight, interpretable exemplification using Non-negative Matrix Factorization (NNMF). In parallel, special deep features are extracted using a computational neural network (CNN). These integral features are combined into a united hybrid representation. The main objective of this work is to extend our previously validated two-class framework to a multi-class handwritten digit classification scenario. To improve robustness, a step diffusion operation is used in the feature space by gradually adding Gaussian noise. A feature denoiser network is trained to reverse this operation and rebuild clean representations from tilted inputs. The courteous features are then applied for multi-class classification. The suggested method is evaluated in both baseline and adversarial settings using AutoAttack. The experimental outcome present that the diffusion-based hybrid model is both effective and robust, the CNN baseline models outperforming while maintain powerful classification performance. These results explain the activity of feature-level diffusion defense for reliable multi-class handwritten digit classification.

图像分类扩散模型特征去噪

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。