arXiv:2608.09688cs.LGcs.AI2026-08

解决长尾分布下对抗训练的双重偏差问题,提升脆弱类别的鲁棒性。

Confusion-Geometry Rebalancing for Long-Tailed Adversarial Training

论文配图:Confusion-Geometry Rebalancing for Long-Tailed Adversarial Training
图 1 · 摘自论文原文
  • 利用鲁棒性错误构建有向混淆图,动态调整训练信号。
  • 在多个长尾基准上实现更优的对抗鲁棒性能,显著提升弱势类别表现。
  • 适用于对长尾场景中模型公平性与鲁棒性要求高的研究者。

长尾分布下的对抗训练面临双重不平衡:类别分布不均使训练目标偏向头部类别,而对抗内最大化可能进一步放大这种偏差。现有方法通过修正类别先验或自适应类别鲁棒监督缓解问题,但通常孤立处理每个类别,无法识别导致长尾崩溃的关键边界。本文提出一种称为混淆几何再平衡(CGRm)的方法,这是一个可插拔框架,利用定向鲁棒误差作为训练信号。CGRm通过周期性鲁棒评估获取源类别损失权重、类别级鲁棒系数及有向混淆几何图。随后将反馈加权鲁棒优化与图引导的边界修正相结合,从而增强脆弱类别的鲁棒性,并锐化导致长尾性能下降的关键边界。在多个长尾基准上的实验表明,CGRm相比现有方法实现了稳定的鲁棒性提升,消融实验验证了各组件的有效性。代码已提供于补充材料中。

原文摘要 · Abstract (English)

Adversarial training under long tailed distributions suffers from a dual imbalance: the class imbalance skews the training objective toward head classes, and the adversarial inner maximization may further amplify this bias. Existing methods mitigate this issue by correcting class priors or adapting class wise robust supervision, yet they treat each class in isolation and fail to identify which boundaries drive long tailed collapse. We propose a Confusion Geometry Rebalancing method (CGRm) for long tail adversarial training, a plug in framework that leverages directed robust errors as training signals. CGRm leverages periodic robust evaluations to derive source class loss weights, class wise robust coefficients, and a directed confusion geometry graph. The method then couples feedback weighted robust optimization with graph guided margin correction, thereby boosting the robustness of vulnerable classes and sharpening the critical boundaries that drive long tailed performance degradation. Experiments on long tailed benchmarks show that CGRm achieves consistent robust performance gains over existing methods, with ablations validating the contribution of each component. We provide the code in the supplement.

对抗训练长尾分布鲁棒性分类器优化

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。