arXiv:2607.03075cs.LGcs.CV2026-07

提升模型鲁棒性的同时,让预测不确定性更可靠。

Robustness Meets Uncertainty: Evidential Adversarial Training for Robust Selective Classification

论文配图:Robustness Meets Uncertainty: Evidential Adversarial Training for Robust Selective Classification
图 1 · 摘自论文原文
  • 用狄利克雷分布建模不确定性,结合对抗训练优化
  • 在多种攻击下保持高鲁棒性且预测不确定性更准确
  • 适合对安全性和可靠性要求高的实际应用

安全关键应用需要既鲁棒又可靠的分类器。对抗训练虽广泛用于提升深度神经网络的鲁棒性,但其对预测不确定性的可靠性影响仍不明确。本文从选择性分类视角系统研究这一问题,提出统一基准,标准化架构、数据增强、威胁模型和评估指标,覆盖干净样本、对抗样本和常见噪声场景。在多种前沿对抗训练方法中,我们发现一个普遍现象:部分方法虽提升对抗准确率,却恶化了不确定性排序,导致选择性分类性能下降。为此,我们提出证据对抗训练(EV-AT),通过狄利克雷分布建模不确定性,结合(i)基于证据的损失以提升干净数据准确率与不确定性可靠性,(ii)鲁棒证据对齐损失,在对数狄利克雷参数空间中对齐干净与对抗样本预测。大量实验表明,EV-AT将鲁棒性-不确定性权衡的帕累托前沿推向现有最优水平。代码已开源。

原文摘要 · Abstract (English)

Safety-critical applications require classifiers that are both robust and reliable. Adversarial training is a widely adopted defense for improving robustness in deep neural networks; however, its effect on the reliability of predictive uncertainty remains underexplored. We investigate this gap through the lens of selective classification, which has rarely been systematically analyzed alongside adversarial robustness. We introduce a unified benchmark for the robustness-uncertainty trade-off. It standardizes architectures, augmentations, threat models, and evaluation metrics across clean, adversarial, and common-corruption settings. Across a wide range of state-of-the-art adversarial training methods, we uncover a recurring failure mode: several approaches improve robust accuracy while degrading uncertainty ranking, leading to poorer selective behavior. To address this, we propose Evidential Adversarial Training (EV-AT), which models uncertainty through a Dirichlet distribution and combines (i) an evidence-based loss promoting clean accuracy and reliable uncertainty with (ii) a robust evidence-alignment loss matching clean and adversarial predictions in log Dirichlet-parameter space. Extensive experiments show that EV-AT shifts the Pareto frontier of robustness-uncertainty trade-offs beyond prior state-of-the-art adversarial training methods. Our source code is publicly available at https://github.com/NicolasSournac/Robustness_Meets_Uncertainty.EV-AT.

对抗训练不确定性选择性分类

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。